input: [Requirement] PCI DSS Requirement 6.2 [Proposed Change] Update requirement to allow vulnerabilities to be ranked and prioritized according to risk. [Assessment Impact] 
output: This moves the requirement more in-line with what firms do; this change allows latitude to reflect that practice during an assessment.