Discovering classifying and prioritizing institutional information assets and vulnerabilities.