SCF - VPM-01.1 - Attack Surface Scope
Mechanisms exist to define and manage the scope for its attack surface management activities.
Mapped framework controls
ISO 27002
Control questions
Does the organization define and manage the scope for its attack surface management activities?