After understanding the requirements of the customer, the tester needs to create his own test model based on the expectations of the vulnerability management program, the environment, past experience, and the exposure that every type provides. 

The following are the basic types of vulnerability assessment that the tester needs to understand.