Cyber-Asset Attack-Surface Management (CAASM) Glossary Definition

Cyber-asset attack-surface management focuses on building a unified inventory of cyber assets and their security context across tools, environments, and ownership boundaries.

Security teams use CAASM-style practices to correlate asset data, reduce blind spots, and improve exposure, vulnerability, and control decisions. This is an emerging term, so teams should verify how a specific source, platform, or standard uses it before treating it as a settled category.

Additional Resource: Authoritative source.