From Risk Based Vulnerability To Exposure Management