What is VCA? An introduction to vulnerability and capacity assessment