Vulnerability Risk Assessment Methodology