https://blog.cloudsecurityalliance.org/2018/03/07/fedramp-three-stages-vulnerability-scanning-pitfalls/?lipi=urn%3Ali%3Apage%3Ad_flagship3_detail_base%3BjX6rPLE1Qxaaj0LMU3G1OA%3D%3D