The magnitude and complexity of the Infosys attack surface are significant; encompassing hundreds of thousands of endpoints spanning the entire globe, a highly mobile workforce, and huge data centers. Tasked with protecting the entire infrastructure, Salvi and his team have created a highly detailed framework that is used to model their environment: It utilizes a one-to-five scoring system to reflect the risk and readiness of each element across a selection of individual security-related functions.The magnitude and complexity of the Infosys attack surface are significant; encompassing hundreds of thousands of endpoints spanning the entire globe, a highly mobile workforce, and huge data centers. Tasked with protecting the entire infrastructure, Salvi and his team have created a highly detailed framework that is used to model their environment: It utilizes a one-to-five scoring system to reflect the risk and readiness of each element across a selection of individual security-related functions.In 2016, a review of the company’s infrastructure revealed a need to enhance protection against advanced persistent threats (APTs).