Attack Surface Management (ASM)
The continuous practice of discovering, inventorying, classifying and reducing every point where an attacker could reach a system, including optional modules, unauthenticated endpoints and forgotten exposures. ASM answers the question 'are we affected?' when an advisory arrives.