The Active Directory (AD) is often overlooked by organisations in their cyber defence strategy as it is only providing a supporting function for core business applications. Managing the AD is tough as there are many objects to be configured for business applications to work, this can result in weak security practices from overprivileged identities. ComfortDelGro adopts tools to facilitate attack surface management for the AD to better manage the complex AD environment so that risks are mitigated to its best potential.