Attack surface analysis covers all aspects of how a threat actor might breach the environment and cause a service disruption. It is especially useful because an attack surface analysis offers the organization the chance to understand potential vulnerabilities along with associated risks. It covers software and network vulnerabilities as well as the human aspect. The following figure depicts the attack surface analysis process: