In 2006 The Jericho forum discussed the diminishing role of the network perimeter in organisations’ security. Since that time our use of technology has changed in interesting ways such as the increased use of multi-tenant environments, the explosion of social tools, software defined everything – digital transformation continues unabated but with it comes new risks, digital risk. This talk explores free and novel ways that practitioners are using to address these risks.Learning Outcomes:Understand challenges bought by digital transformationCommon controls that address some of the challengesBest practices for reducing unwanted exposure and understand threatsThe role of MITRE ATT&CK in threat modelling exposure (PRE-ATT&CK)Free tools and approaches that practitioners can apply