External Attack Surface Management
Definition
The continuous discovery and assessment of internet-visible assets and services from an external perspective.
Why it matters
Use EASM to challenge the assumed inventory, find forgotten services and route validated assets to an owner. Discovery without attribution and treatment only creates another list.
Use it in practice
Start with authoritative evidence, record the source and freshness, and be explicit about what this term can and cannot tell you. Connect it to asset context and a named action rather than treating it as an isolated label.