Asset management, in one form or another, is fundamental to cyber security. Many organisations, however, have significant gaps in what they understand about their environment. Traditional asset management systems are more focused on financial and lifecycle tracking of systems & software. They collect data using (infrequent) network scans or require the installation of software on a system to be included in the asset register.
The result is an often out-of-date register that has missed systems that connect and disconnect between scans