What are the steps related to the vulnerability management program? Each correct answer represents a complete solution. Choose all that apply.

Baselining the Environment documents the current security posture of all systems and assets, creating a reference point against which future vulnerability scans and changes can be measured.

Maintain and Monitor is a continuous phase where the organization performs recurring scans, tracks remediation status, and validates that controls remain effective as the environment evolves.

'Organization Vulnerability' is not a defined or recognized phase in any established vulnerability management framework such as NIST SP 800-40 or CVSS-based lifecycle models.

Define Policy is the foundational step that establishes the program scope, risk tolerance, roles, responsibilities, and remediation timelines that govern all subsequent vulnerability management activities.