Company85 Interview Question

How would you implement a vulnerability management program for a startup?