@GossiTheDog we have also recently released (last week) a buyers guide for external attack surface management - https://www.ncsc.gov.uk/blog-post/easm-buyers-guide-now-available - d
we also continue to push forward on Share & Defend too etc.
all of which are intended to protect the many and reduce the easy wins.