Entity identifies vulnerabilities in the network through regular network scanning exercises conducted by an Approved Scanning Vendors