An enterprise’s surface area refers to anything that may be targeted by an attacker/hacker. Weaknesses like vulnerabilities, ineffective governing, and bugs all contribute to creating the attack surface. Strong identity access management can minimize attack surfaces and mitigate risk through security best practices.
The Cryptography, Data Protection and Identity Security Center of Excellence