Attack surface management? That sounds like something the SAS might get involved in…
It does, but in this case we’re talking about the world of networks and cybersecurity. The “attack surface” is the sum of all possible entry points that a threat actor could use to gain unauthorised access to systems, networks or data. For a typical business this might