corporate vulnerability