Inventory drift is the gradual loss of accuracy in asset records as systems, software, users, and configurations change faster than the inventory is updated. A database may show a server as active when it has been decommissioned, or miss a new cloud workload, temporary account, or exposed storage bucket. In cyber security, that gap matters because defenders can only protect what they can see and track.
Attackers benefit from inventory drift by targeting forgotten assets, unpatched legacy services, stale credentials, or shadow IT that never made it into normal monitoring. Defenders reduce the risk by reconciling discovery scans with CMDB records, reviewing cloud and identity inventories regularly, and removing or disabling anything no longer needed. Good inventory hygiene turns unknowns into managed assets and closes a common path to unauthorized access.