ESG's John Oltsik on Improving the Effectiveness of Attack Surface Management Programs