Entity has a documented Vulnerability Management Policy and makes it available for all staff on the company employee portal