Vulnerability Management: Making Security First the Prime Directive