Asset and Application Discovery

SANS critical security controls 1 and 2 state that an organization needs to have positive control of their assets and applications to effectively develop a comprehensive security program.