CMDB has to be the one thing that every org insists is important, but literally never invest any regular time into. Instead of keeping it up to date, instead every five years we spend all that time we ignored making like three people do corporate org chart forensics to find out who uses some random application.