Enterprise Cybersecurity in Digital Business

7Attack Surfaces and Digital Asset Inventory

DOI: 10.4324/9781003052616-9

Threat is a mirror of security gaps. Cyber-threat is mainly a reflection of our weaknesses. An accurate vision of digital and behavior gaps is crucial for a consistent cyber-resilience.

Stephane Nappo, CISO Société Générale

Attack surfaces

There are two categories of attack surfaces, an enterprise attack surface and a global attack surface. The internet is a global attack surface. Within the enterprise, the attack surfaces are the physical and digital assets that include systems, business processes, data, and technologies.

The explosion in the use of the internet, the percentage of the business that is now a digital asset, the cloud first strategies of most organizations ...