Reducing the Significant Risk of Known Exploited Vulnerabilities with IT Asset and Vulnerability Management