Attack surface management (ASM) is not limited to the surface
Help Net Security – Sylvain Cortes
There are three main components to an ASM strategy:

External attack surface management (EASM) Digital risk protection services (DRPS) Cyber asset attack surface management (CAASM) What are the main challenges in getting started with ASM? The first challenge is understanding the organizationâs security needs around ASM and how it slots into place with similar but distinct practices like EM. The next task is to overcome the IT siloes that divide the business.
Link: https://www.helpnetsecurity.com/2023/02/15/attack-surface-management-asm/