Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Asset-management practiceIntermediate

Continuous Asset Discovery

Continuous asset discovery uses multiple authoritative and observed sources to identify devices, cloud resources, virtual systems, and other enterprise assets as they appear and change.

What it means

Continuous asset discovery uses multiple authoritative and observed sources to identify devices, cloud resources, virtual systems, and other enterprise assets as they appear and change.

Why it matters

Periodic inventories miss short-lived, unmanaged, remote, and rapidly changing assets that can create exposure.

Practical focus

  • Combine management, identity, network, cloud, and procurement sources
  • Reconcile duplicates and ownership
  • Detect new and returning assets
  • Investigate assets that cannot be classified

Common mistakes

  • Using one scanner as the complete inventory
  • Ignoring ephemeral and disconnected assets
  • Counting an observed address as a fully identified asset
  • Failing to assign owners

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

GIAC GCCCGIAC GSECCompTIA Security+ISC2 CISSPISC2 CGRC

Authoritative sources