customer vulnerability