SB.1.006 Detection of assets
Organisations actively and passively detect assets that may not be registered in the CMDB, both within the network and outside. Discrepancies in CMDB and detected assets are resolved.
Active scanning of the network devices needs to take place. Passive scanning can take place through DNS or DHCP logs for example. Organisations may use other means to detect assets outside of the network, for example through registrations of domain names using organisation email addresses or detecting the use of organisational logos.