Attack Surface

An organization's attack surface includes all possible points or vectors where an unauthorized user could attempt to enter or extract data from an environment. This includes technical vulnerabilities as well as the human element — employees who might be susceptible to phishing or social engineering. Effective security awareness training aims to significantly reduce the human attack surface.