As a foundation of proper IT hygiene, national standards like NIST and CIS Controls clearly idenitfy asset discovery as a key investment that makes prevention, detection and response more effective. To discover, evaluate and mitigate exposures of their internet-connected assets. organizations need a continuous, real-time and up-to-date view of their attack surface. They also must be able to spot shadow IT, expiring assets or misconfigurations, and flag risky communications, evaluate supplier risk or assess the security of merger and acquisition (M&A) targets.