Vulnerability Management in USA