This white paper demystifies attack surface management (ASM) and why it should be a required layer in your security control stack. The fact is indisputable. There is a direct linkage between identity risk and breaches attributed to service and privileged account sprawl with the problem only worsening. As a result of the pandemic, employees have moved from their cubicles to their home offices while companies have moved assets and sensitive data into multi-cloud environments leaving a trail of identity breadcrumbs everywhere for adversaries to pick up and use.