Running Harborline Logistics' attack surface management program as an exposure funnel lying on its side: everything Harborline owns pours in at the wide end and passes eight stages — charter, discover, external, internal, validate, remediate, monitor and govern — narrowing from 1,440 discovered hostnames to verified, closed exposure; discovery that found 1,440 hostnames against 340 in the CMDB and 90 assets nobody owned; two findings with the same CVSS score ranked apart because one is on the CISA KEV list and internet-facing; and closure that only counts after a re-scan.

CY-SENIOR-100Senior Level · Attack Surface Management

Attack Surface Management Program — The Exposure Funnel

A senior-level operations and program course that builds and runs a defensive attack surface management program - discovering, validating, and reducing an organization's own exposure, never anyone else's. Work the exposure funnel - eight stages from candidate asset to governed exposure: Charter, Discover, External, Internal, Validate, Remediate, Monitor, and Govern - with real asset and ownership discovery, external and cloud/SaaS/identity mapping, KEV/EPSS-informed validation, remediation routing, continuous drift monitoring, and honest board metrics. Four hands-on activities in every lesson.

16 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Charter, authorize, and discover Harborline's full attack surface - external, internal, cloud, SaaS, identity, and OT - reconciled to real, accountable owners.
Map the external edge and the internal/cloud/SaaS/identity surface with the same rigor, and safely validate findings using KEV, EPSS, and business context before anyone acts.
Route validated exposure to named owners, remediate it by decommissioning, hardening, or shielding, and verify closure by re-scan rather than trusting a ticket.
Run continuous monitoring for new assets and drift, and report honest program metrics - MTTD/MTTR, unknown-asset rate, exposure age, ownership coverage - to the board.

Price:৳10,000