Skip to content

Attack Surface Management

What is Attack Surface Management?

The continuous discovery, classification, prioritization, and monitoring of an organization's external-facing digital assets to reduce exposure to threats.

Information Security

Frameworks that govern attack surface management

NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on attack surface management

Requirements naming attack surface management across this standard, quoted from the control text.

MITRE D3FEND1 control

Apply D3FEND MODEL tactic - establishing the digital domain that the defender intends to defend. D3-AM Asset Inventory + D3-NM Network Mapping + D3-ID Identity Discovery + D3-NM-AM Asset Mapping + D3-SI System Inventory + D3-UA User Account Inventory + D3-SWI...

MITRE-D3FEND-Model-Tactic-System-Inventory-Network-Mapping-Identity-Discovery-Asset-Identification · MITRE D3FEND Model Tactic + System Inventory + Network Mapping + Identity Discovery + Asset Identification →

Questions people ask about attack surface management

What is Attack Surface Management?
The continuous discovery, classification, prioritization, and monitoring of an organization's external-facing digital assets to reduce exposure to threats.
Why is Attack Surface Management important for compliance?
Attack Surface Management is a key concept in Information Security. Understanding attack surface management helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Attack Surface Management?
Attack Surface Management appears in the requirement text of MITRE D3FEND. Across these standards we have identified 1 control that names it directly, each linked to the control text on the compliance platform.
Where can I learn more about Attack Surface Management?
Explore our compliance framework pages to see how attack surface management applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Attack Surface Management applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.