NETWORKS & APPLICATIONS they enable attackers to gain access to everything , particularly sensitive data and systems .”
And it is not just worrying about your own organisation ’ s attack surface . Many companies will work with third -parties to help integrate and manage these systems into their infrastructure . Which introduces yet another attack surface .
A 2024 study by software company Blackberry showed how 74 % of software supply chains were also exposed to cyberattacks in the last twelve months .
This growing attack surface has unfortunately seen security teams spending time focusing efforts on reactively mitigating cyberattacks , rather than preventing them in the first instance . In fact , a 2023 tenable study showed 58 % of respondents said their cybersecurity team was too busy fighting
critical incidents to take a preventive approach to reducing their organisation ’ s exposure to attacks .
Defending the surface Despite the scope of the task ahead , tactics , procedures and technology are on hand to help develop a strategy to get organisations more security .
“ When it comes to proactive cyber practices , the basics still trip up security teams ,” Bernard remarked . “ Security teams need to be able to map every cloud asset , identity , and risk to identify toxic combinations and attack paths that pose the greatest threat to the business .”
What this means in practice is having a plan for exposure management . Built on the foundations of risk-based vulnerability management , exposure management takes a broader view across the modern attack surface .
cybermagazine . com 87