A survey of security leaders and a large-scale rebuild at Lumen Technologies show why exposure management breaks down when organizations cannot reliably map what they own.