As IT infrastructure expands, visibility and control often lag behind – until an incident forces a reckoning