The Anatomy of Exposure: Why the Market Cannot Agree on What Counts as One

This story was originally published on HackerNoon at: https://hackernoon.com/the-anatomy-of-exposure-why-the-market-cannot-agree-on-what-counts-as-one.
Two exposure tools can scan the same environment and return 40,000 findings or 900 exposures — both correct, because each counts a different object.
Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity. You can also check exclusive content about #cybersecurity, #exposure-management, #vulnerability-management, #ctem, #attack-surface-management, #identity-security, #risk-management, #hackernoon-top-story, and more.

This story was written by: @yuriybutuzov. Learn more about this writer by checking @yuriybutuzov's about page, and for more stories, please visit hackernoon.com.

Two tools will inevitably show different numbers because they count different objects, such as conditions, findings, or exposures, and there is no agreed-upon definition of what constitutes one exposure. The market has failed to agree on a common unit of measurement, with various vendors and analysts using different terms and definitions.