Attack Surface Management (ASM) Visualisation and Service Delivery
- Jonathan Bellard
General Questions
What is the Attack Surface Management (ASM) Visualisation feature?
The ASM Visualisation feature provides a detailed and interactive view of an organisation’s digital assets. It enables users to visualise and manage their attack surface effectively, helping them identify potential risks and improve their security posture.
Why is ASM Visualisation important?
Understanding and managing an organisation’s attack surface is essential for maintaining cybersecurity. This feature helps users:
Identify new and unmanaged assets.
Detect security risks.
Make informed security decisions.
Ensure compliance with security regulations.
Key Features
What does the Comprehensive Visualisation Dashboard offer?
The dashboard provides a visual representation of your digital assets, making it easy to:
Understand the scope of your attack surface.
Identify and track assets.
Spot potential security risks quickly.
How does Enhanced Asset Triage work?
The ASM Visualisation feature categorises assets to streamline asset management:
New Assets: Highlights newly discovered assets in your environment.
In Scope: Displays actively managed and monitored assets.
Under Review: Flags assets requiring further investigation.
False Positive: Allows dismissal of assets incorrectly flagged.
Rogue: Identifies malicious assets like typo-squatted domains.
ASM for Security Providers
What is the ASM Service Type & Visualisation feature?
The ASM Service Type & Visualisation feature enhances discovery and management capabilities for security providers. It enables providers to set up and manage ASM projects, conduct multiple asset discovery scans, and visualise results in a dedicated dashboard.
What additional features are available for security providers?
ASM Project Management: Security providers can create and manage ASM projects tailored to specific client requirements.
Multiple Asset Discovery Scans: Conduct comprehensive scans to identify and catalogue digital assets.
Dedicated ASM Dashboard: Provides a clear visual representation of discovery scanning results.
Bespoke Project Dashboards: Each ASM project features its own dashboard for dynamic asset discovery results.
Enhanced Asset Triage: Supports classification of discovered assets into categories such as New, In Scope, Under Review, False Positive, and Rogue.
How does automation improve asset management?
Automatic Alignment: Automatically categorises discovered assets as 'In Scope' if they have been previously identified within the client's tenant.
API and JSON Imports: Supports seamless integration and data import through APIs and JSON formats.
User Impact
Who benefits from the ASM Visualisation feature?
Security teams, IT administrators, compliance officers, and security providers will find this feature valuable for monitoring and managing digital footprints.
How does this feature improve security operations?
It enhances security operations by:
Providing a clear overview of an organisation’s attack surface.
Helping prioritise and remediate vulnerabilities.
Reducing false positives to focus on real threats.
Improving compliance through continuous asset monitoring.
Empowering security providers with enhanced asset discovery and management tools.
Importance of ASM Services
What are the key benefits of using an ASM service?
Proactive Security Management: Helps organisations stay ahead of potential threats.
Informed Decision-Making: Provides visual insights and data to make better security decisions.
Enhanced Compliance: Aids in meeting regulatory requirements through detailed asset tracking.
Operational Efficiency: Supports security providers in delivering more effective asset discovery and monitoring services.
Technical & Implementation
How is the ASM Visualisation feature integrated into the platform?
The feature is accessible via the platform’s ASM dashboard and project level workflows, allowing users to view, categorise, and manage assets directly from the interface.
Conclusion
The ASM Visualisation feature is a powerful tool for organisations and security providers to gain control over digital assets and improve cybersecurity resilience. By offering an intuitive and structured approach to attack surface management, it supports proactive security, compliance, and informed decision-making.