Asset Inventory & Governance Baseline

A comprehensive set of controls required for asset inventory and governance — the foundation of security: automated hardware and software inventory, authorized software allowlist, detection of unauthorized devices/software, written policies and roles, risk management, third-party risk, and asset lifecycle management (onboarding/disposal). Framework: SANS CIS Controls v8 Controls 1-2 and CIS v8.1 Govern function; the principle that you cannot protect assets you cannot see is fundamental.