External Attack Surface Review Guide

A repeatable guide for discovering internet-facing assets, validating ownership, prioritizing exposures, and tracking risk reduction. The document provides clear ownership, decision thresholds, implementation steps, evidence expectations, and a repeatable review cadence so teams can apply the guidance consistently under operational pressure.