Things you should consider before opting for vulnerability management