Start with your domains and entities.
Your organisation uses domains, cloud services and applications whose visibility changes over time. An exposure audit establishes what can be observed externally, then checks these observations against assets you recognise. The aim is a usable scope for prioritising further assessment.
Reporting to plan
- A map of observed assets and their ownership links
- Exposure points that need verification
- Treatment priorities with identified uncertainties
Scope, timeline and deliverables are agreed before work begins.
Explore the service