Security professionals must have a keen understanding of their environments and the dependencies on them. This includes human and technical resources, how they interact, the importance of each IT resource, the nature and value of the data that resides on each resource, and what threats they face. Having a thorough asset management system that can track all current versions of software, hardware, and other resources can be critical during incident response. Knowing what’s running provides context to an attack and whether the system could have been exploited.”]