Read the entire thread and didn’t see the obvious: #1. Living Asset Inventory (constantly updated automatically) #2. Intelligence on these Assets (can be mdm

Read the entire thread and didn’t see the obvious: #1. Living Asset Inventory (constantly updated automatically) #2. Intelligence on these Assets (can be mdm, but at least reporting of sysinfo, os update version, security version) #3. Automatic patching of both security software and os version. #4. Centralized identity management (Azure AD, other SAML options) with security intelligence builtin.