There’s an important class of assets that don’t fit into a traditional management framework – such as IP addresses, domain names and cloud instances – that introduce risks into the cyber supply chain.