Improve the product vulnerability assessments for mission-critical ICT products by incorporating necessary information from the vendor threat assessments, evaluating vulnerabilities and the ease of exploitability by a threat actor, identifying whether specific mitigations exist to address product vulnerabilities, and assigning a vulnerability rating to each vulnerability identified, to better align the product vulnerability assessment with IC Standard 731-04.