Hardware, software, licences and cloud subscriptions in one register – linked to contracts, costs and services.
The questions ITAM answers
What do we have?
Where is it?
Who uses it?
What does it cost us?
Are we licensed to use it?
When does it expire?
Asset lifecycle
Phase 1
Planning
Before anything is bought: standards, requirements, budget and the right licensing model.
Catalogue of standard devices and software
Request approval rules
Total cost of ownership estimate
Phase 2
Procurement
The contract sets out what you’re allowed to do. I review licence terms, usage rights, warranties and the supplier’s SLA.
Review of licence and contract terms
Warranties and service terms in the register
Renewal and termination dates
Phase 3
Deployment
Every asset gets a record, an owner and a location, and is linked to a service, a contract and a cost centre.
A single asset record
Owner and accountability
Links to the CMDB and the contract
Phase 4
Use and maintenance
Changes, moves and regular inventories keep the register accurate, while licence usage and upcoming renewals stay on the radar.
Regular inventories and reconciliation
Licence position: entitlement versus usage
Calendar of renewals and subscriptions
Phase 5
Retirement
A clean exit: data wiping, disposal, returning licences to the pool and closing the record.
Proof of data wiping and disposal
Licences returned to the pool
A closed, traceable record
Areas I cover
Hardware (HAM)
Physical and virtual devices tracked from purchase to certified disposal.
Purchase, stocking, deployment, service and retirement processes
Warranties, leases and hardware refresh planning
Physical inventories with barcodes or RFID
Secure data wiping and responsible disposal
Software and licences (SAM)
Licence compliance and audit readiness, on-premise and in the cloud.
Effective licence position (ELP): entitlement versus usage
Licence metrics: named user, per core, PVU, subscription
Linking purchase orders, invoices and entitlements
Preparation for software vendor audits
Cloud and SaaS
Visibility of subscriptions bought outside the usual procurement route.
Register of subscriptions and their owners
Finding unused and duplicate licences
Linking costs to services and cost centres
Discovery and inventory
Several data sources combined into one, with automated cleansing and matching.
Agent-based and agentless data collection
Record matching and conflict resolution (reconciliation)
Cloud resources via API
Detecting unauthorised devices (shadow IT)
Service Configuration Management and CMDB
A configuration database you can trust as the single source of truth about what your services are made of.
Data model of services, applications and infrastructure
Links between configuration items, services and SLAs
Impact analysis for changes and incidents
Data quality: completeness, accuracy and compliance
Governance and standards
The rules, roles and responsibilities that keep the register accurate long after go-live.
Practices aligned with ITIL and ISO/IEC 19770
Roles: asset manager, configuration manager, CI owner
Policies for issuing and returning devices
Management reporting and audit evidence
Asset versus configuration item
Asset
Anything with financial, contractual or licence value. You track its price, supplier, contract, warranty, depreciation and assigned user. It falls under IT Asset Management.
Configuration item (CI)
Anything needed to deliver an IT service. You track its technical state, version, dependencies and the impact if it fails. It falls under Service Configuration Management and lives in the CMDB.
A physical server is itself both an asset and a configuration item. As an asset, it is tracked financially and contractually: purchase, warranty, depreciation, disposal. As a configuration item, it is tracked technically: its configuration and its relationships to the operating system, database and services running on it.
Tool-agnostic
I set up your register in the platform you already use, or help you choose the right one. For example:
ServiceNow
Jira Service Management Assets
Microsoft Intune
Microsoft Configuration Manager
Lansweeper
Flexera
Snow
One version of the truth about what you own – for IT, procurement and finance, and for the day the auditors arrive.
ISO/IEC 19770 · ITIL
Frequently asked questions
What is the difference between SACM, ITAM and Service Configuration Management?
SACM (Service Asset and Configuration Management) is an ITIL v3 term that combined asset and configuration management into one process. ITIL 4 splits them into two separate but closely linked practices: IT Asset Management focuses on the financial, contractual and licence side of assets across their lifecycle, Service Configuration Management on technical items, their relationships and their links to services. ITIL (Version 5), released in 2026, keeps the same split.
Which standards govern IT Asset Management?
The foundation is the ISO/IEC 19770 family. Part 1 defines requirements for an IT asset management system, part 2 software identification tags (SWID), part 3 the entitlement schema and part 4 resource utilisation measurement.
How does asset management relate to ISO/IEC 27001 and ISO/IEC 20000-1?
ISO/IEC 27001 requires an inventory of information and other associated assets (control A.5.9) and configuration management (control A.8.9). ISO/IEC 20000-1 sets requirements for both asset management and configuration management within the service management system. Without reliable records, compliance is very hard to demonstrate.
Why do asset records matter for NIS2 and DORA?
The NIS2 Directive lists asset management among the mandatory cybersecurity risk-management measures, and the DORA Regulation requires financial entities to identify and record their ICT assets and their dependencies. Accurate asset and configuration records are therefore a precondition for compliance, not just good practice.