EXTERNAL ATTACK SURFACE MANAGEMEN