An organization does not have software or hardware asset tracking in place, has little governance over data and access controls, and does not centrally manage assets.
You need to implement a solution, process, or program to assess the current state of the infrastructure for the organization. The solution must meet the following requirements:
* Be a recognized program, guide, model, methodology, or standard
* Be specific to IT
* Include more than just IT software/hardware
What should you use?