Today's enterprise security programs suffer from a pervasive and unmistakable flaw in their very foundations-the lack of knowledge about IT assets. Without complete visibility of IT assets, even the most scrupulous executives and carefully planned strategies are doomed to fail. A reliable asset discovery methodology must be the starting point for any successful enterprise security strategy.