[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNDpps6D_ud70hwsO5oF15V3_3tPXmQj_Z82d-2Xpiyw":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":65},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"8f5e755c-f9bd-4d07-9b40-830f79fe9160","The Expanding Attack Surface Demands a New Operating Model","the-expanding-attack-surface-demands-a-new-operating-model-af8c23","Why the Risk Operations Center Is Becoming the System of Record for Proactive Enterprise Risk Reduction The cybersecurity industry has spent years improving how we discover vulnerabilities. The challenge now is no longer finding risk. It is reducing risk faster than adversaries can exploit it. The PHP2Shell vulnerabilities disclosed in October are a reminder of […]","The article highlights the increasing challenge of reducing enterprise risk faster than adversaries can exploit it, especially with AI accelerating attack timelines. It emphasizes that the expanding attack surface beyond traditional IT assets into mobile, OT, and IoT environments necessitates a new operating model. The Risk Operations Center (ROC) is presented as a system of record for proactive risk reduction, integrating various technologies and expertise to manage and remediate vulnerabilities across the entire enterprise.","Qualys expands its Risk Operations Center to manage expanding attack surfaces and accelerate risk reduction.","https:\u002F\u002Fblog.qualys.com\u002Fqualys-insights\u002F2026\u002F11\u002F09\u002Fthe-expanding-attack-surface-demands-a-new-operating-model","https:\u002F\u002Fblog.qualys.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002Fcropped-2-1.png","2026-11-09T13:45:00+00:00","2026-11-09T14:00:25.689182+00:00",7,[17,20,23,26,28,30],{"name":18,"type":19},"Qualys Enterprise TruRisk Management","product",{"name":21,"type":22},"Qualys","vendor",{"name":24,"type":25},"AI","technology",{"name":27,"type":19},"Lookout",{"name":29,"type":19},"NowSecure",{"name":31,"type":19},"Claroty","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":32,"icon":34,"name":35,"slug":36},null,"Threat Intelligence","threat-intelligence",[38,43,48,53],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":49},{"id":50,"icon":34,"name":51,"slug":52},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":54},{"id":32,"icon":34,"name":35,"slug":36},[],[21,18,27],{"controls":58,"vendors":59},[],[60],{"slug":61,"name":21,"logo_path":62,"roles":63},"qualys","\u002Fvendor-logos\u002Fqualys.png",[64],"reported_by",{"slug":66,"title":67,"body":68,"framework_refs":69,"framework_notes":76},"expanding-attack-surface-requires-a-proactive-risk-operations-model","Expanding Attack Surface Requires a Proactive Risk Operations Model","Organizations are struggling to reduce enterprise risk faster than adversaries — now supercharged by AI — can exploit newly discovered vulnerabilities. The attack surface has grown far beyond traditional IT into mobile, OT, and IoT environments, many of which lack mature security controls or visibility. Without a unified, proactive system for tracking and remediating risk across all asset types, security teams are perpetually reactive. The Risk Operations Center (ROC) concept addresses this by consolidating risk intelligence, remediation workflows, and cross-domain expertise into a single operating model. Failure to evolve beyond siloed, IT-centric security programs leaves critical gaps that adversaries are actively mapping and exploiting.",[70,71,72,73,74,75,73],"CIS Control 7: Continuous Vulnerability Management","CIS Control 1: Inventory and Control of Enterprise Assets","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)",{"NIS2 Article 21(2)(b)":77,"NIST SP 800-53 SI-2: Flaw Remediation":78,"CIS Control 7: Continuous Vulnerability Management":79,"CIS Control 1: Inventory and Control of Enterprise Assets":80,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":81,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":82},"NIS2 mandates that essential and important entities implement risk-handling measures including vulnerability management and incident handling, reinforcing the need for the unified, proactive operating model described in the article.","NIST SI-2 requires organizations to identify, report, and correct information system flaws on defined timelines, directly countering the AI-accelerated exploitation window described in the article.","The article's core problem — adversaries exploiting vulnerabilities faster than organizations can patch — is exactly what CIS Control 7 addresses by mandating continuous scanning and time-bound remediation across all enterprise assets.","The expanding attack surface into OT, IoT, and mobile cannot be managed without first knowing what assets exist; CIS Control 1 requires a complete, up-to-date inventory as the foundation of any risk reduction program.","ISO\u002FIEC 27001:2022 A.8.8 requires organizations to systematically manage technical vulnerabilities across their entire information asset landscape, aligning directly with the ROC model proposed in the article.","Expanding into OT and IoT environments requires identity and access controls tailored to constrained devices; the CSF Protect function provides governance guidance to ensure these environments are not left as unmanaged entry points."]