Tagged threat-and-vulnerability-management