Solution Brief – Critical Capabilities for Attack Surface Management