<p><strong>In order to establish and operate effective security defences, it is necessary to understand the assets that make up the network’s attack surface.</strong></p><p>In order to establish and operate effective security defences, it is necessary to understand the assets that make up the network’s attack surface. This includes all the systems (development and operational), people and processes used to operate, design and maintain the network.</p>