Building a More Resilient Security Program for Better Vulnerability Management