CGRC - Selection and Approval of Framework, Security, and Privacy Controls - Vulnerability Management Strategy