Vulnerability management plan

Been asked to develop a vulnerability management program. Everywhere I seeing seethe basic steps.. identiy, remediate, scan and report..or something similar. The catch is I also have to identify the internet facing assets and eveeytime a new asset is found on the internet it has to be flagged..
I feel overwhelmed due to it being such a broad scope..
I was wondering if I could get some points if someone here has had any experience on such projects?
Thanks in …

asset assets basic catch cybersecurity facing flagged found identify internet management program report scan vulnerability vulnerability management vulnerability management plan vulnerability management program