[3] Worldwide digital change has accelerated the size, scope, and composition of an organization's attack surface.
The size of an attack surface may fluctuate over time, adding and subtracting assets and digital systems (e.g. websites, hosts, cloud and mobile apps, etc.).
This leads to attack surfaces changing rapidly, based on the organization's needs and the availability of digital services to accomplish it.
With the rise of digital supply chains, interdependencies, and globalization, an organization's attack surface has a broader scope of concern (viz.
Lastly, the composition of an organization's attack surface consists of small entities linked together in digital relationships and connections to the rest of the internet and organizational infrastructure, including the scope of third-parties, digital supply chain, and even adversary-threat infrastructure.