Conducting a Hazard and Vulnerability Analysis