The attack surface is expanding: 10 ways to bolster risk management

The report explains how the modern enterprise attack surface has expanded with cloud, SaaS, APIs, identities, remote work, and AI, and presents a ten-step approach to attack surface management: intelligent discovery of assets and identities, using SBOMs, partnering with engineering, improving visibility, embedding threat awareness across the SDLC, continuous discovery with cyber risk intelligence, risk-based vulnerability management, tightly controlling cloud and API access, evolving policies based on real-time intelligence, and validating resilience through red teaming and attack simulations.