Due to changes in attack methods, an increasing number of companies are considering Attack Surface Management (ASM). ASM is important as an approach to externally exposed assets, but risk measures are also necessary in anticipation of intrusions. In this session, we will talk about how companies that have implemented ASM can improve their corporate security by dealing with the next risks they should be dealing with. We hope that this will be useful for further strengthening your security.