Do you have vulnerability management program in place? If so, please describe the scope and frequency of the scans.

Yes, vulnerability of the systems are done every month