A critical application lacks an inventory entry and therefore misses patching and monitoring. What foundational program capability needs improvement?

1. Only the annual security conference schedule
2. Only the incident hotline greeting
3. Asset identification and lifecycle ownership
4. Only penetration-test report formatting