Attack Surface Management

Chapter 9. Minimizing Attack Surfaces

Minimizing attack surfaces takes a combination of strategic and tactical approaches. Strategic methods are broad and long term, setting the foundational security policies and frameworks. Tactical approaches are not as broad; they rely on smaller, more tangible steps that can be accomplished in a shorter duration. By tailoring them to the organization’s available resources and requirements, tactics allow strategies to be implemented over time in manageable chunks. Both approaches offer unique benefits: strategic methods provide a comprehensive, future-forward security vision, while tactical approaches allow quick responses to immediate issues.

Each approach plays an important role in creating a holistic, resilient security posture. Which approach is used for a given situation depends. Rather than existing in isolation, strategic and tactical approaches often intersect in meaningful ways. For example, a live cyberattack may demand an immediate tactical response, such as isolating compromised systems. Still, the effectiveness of that response often depends on whether strategic foundations like incident response protocols, access controls, and network segmentation are already in place. This way, strategy sets the stage, while tactics bring it to life under pressure.

As always, the unique business needs, organizational security goals, and details of the situation will determine which is best. Generally, integrating strategic and tactical approaches ...