How to better manage your digital attack surface risk