Description should include

• outside materials
• supplies
• equipment.

Process/Skill Questions:

• What would an attack surface analysis entail?
• What proactive models can be used to recognize or prevent surface attacks?
• What is the Internet Security Threat Report (ISTR)?
• How can the ISTR be useful in identifying and preventing attacks on supplies, equipment, and outside materials?