External attack surface management (EASM) helps organizations discover unknown external assets. This augments the now superfluous adage that “You can’t protect what you can’t see.” EASM requires a methodical approach to properly understand the external attack surface and subsequently reduce related risk. This report will help security and risk (S&R) professionals understand why EASM requires a methodical and scientific approach and provide practical guidance on how to successfully implement or refine EASM in your organization.