Organizations that don’t pivot to an asset-centric security model risk more than exposure — they’re inviting catastrophic breaches.