RE: https://infosec.exchange/@TindrasGrove/117456758033860715 I beg to differ: I have promoted someone for finishing an asset inventory. That’s the single most useful baseline for security governance there is. It’s foundational and its absence makes multiple other things impossible.