# SEC06-BP02: Reduce attack surface

## Description

Minimize installed packages.

## Implementation Guidance

- Minimal base images
- Remove unnecessary services
- Disable unused features
- Hardened configurations
- CIS benchmark compliance

## Risk Level

High - Large attack surface increases risk.
