By Heath Gieson If you don’t know what you have, how can you protect it? That simple question is why the very first control in the Center for Internet Security (CIS) Critical Security Controls focuses on asset inventory. Before you can secure your organization, you need to understand what needs protecting. I always picture a grizzled old cowboy saying, “You can’t protect what you don't know you have.” Sure, the grammar could use some work, but the truth in that statement runs deep. What Does...