Enterprise Attack Surface Assessment Form

Enterprise Attack Surface Assessment Form
Complete this form to provide a comprehensive evaluation of your organization's external and internal attack surface. Please respond to each section to help us understand your current security posture.
External Asset Inventory
Rows Present Monitored
Public Websites 1 2
Cloud Applications 3 4
Exposed APIs 5 6
Remote Access Points 7 8
How frequently do you perform vulnerability scans on your external assets?
Internal Asset Inventory
Rows Present Monitored
Workstations 9 10
Internal Servers 11 12
Network Devices 13 14
IoT Devices 15 16
How would you rate the visibility of your organization's digital assets?
How mature are your vulnerability management processes?

1
2
3
4
5
1 is Not Established, 5 is Optimized
How often are internal systems reviewed for unauthorized access or changes?

Please indicate your agreement with the following statements about attack surface management.

Rows	Strongly Disagree	Disagree	Neutral	Agree	Strongly Agree
We have a real-time inventory of all internet-facing assets.
We regularly monitor for new exposures.
We have processes to quickly remediate vulnerabilities.

How would you rate your organization's ability to detect and respond to external threats?
How confident are you in the completeness of your internal asset inventory?

1
2
3
4
5
1 is Not Confident, 5 is Very Confident
Which best describes your organization's approach to attack surface management?
Should be Empty:

Select theme: