Why Asset Management Matters for Cybersecurity