Security teams have to protect an increasingly complex enterprise environment. Here are five elements of attack surface management they should consider.