Attack surface
Every point where an attacker could try to get in — every login page, open port, public email address, or exposed file.
For small firms
Shrinking the attack surface is usually cheaper and more effective than adding more detection tools on top of it.