Map attack surface without losing focus

Mapping attack surface does not mean listing everything that exists.

We explain how inventory, exposure, and ownership combine to decide what to review first.