Identifying and scanning is an important aspect of vulnerability management, but it’s just one piece of the puzzle. Organizations failing to see the full vulnerability picture tend to struggle unless they embrace a holistic approach with their vulnerability management program
https://www.securitymagazine.com/articles/96126-embrace-a-holistic-approach-to-vulnerability-management