Exposure — Exposure describes a condition that leaves an asset accessible to potential harm. Examples include an unnecessarily public service or sensitive information with excessive permissions. Exposure does not establish that an attack occurred, but it identifies a circumstance that requires assessment. – Risk Management

Added October 7, 2026