Draw out the diagram of the Vulnerability Management process

Briefly describe what events, activities, or other processes take place in each step of the Vulnerability Management process.

If you go to an environment where the Management process has not been instituted, which step would you start with in starting it from scratch and why?

When evaluating server security, issues are generally expressed in the form of a CVE. What is a CVE, and where would you find the corresponding information for what vulnerability they represent?

In general, you want hackers to know as little information about your systems as possible. Why is something like a version number of installed software something to consider hiding?