IT Asset Management

Hardware, software, licences and cloud subscriptions in one register – linked to contracts, costs and services.

The questions ITAM answers

Asset lifecycle

Phase 1

Planning

Before anything is bought: standards, requirements, budget and the right licensing model.

  • Catalogue of standard devices and software
  • Request approval rules
  • Total cost of ownership estimate

Phase 2

Procurement

The contract sets out what you’re allowed to do. I review licence terms, usage rights, warranties and the supplier’s SLA.

  • Review of licence and contract terms
  • Warranties and service terms in the register
  • Renewal and termination dates

Phase 3

Deployment

Every asset gets a record, an owner and a location, and is linked to a service, a contract and a cost centre.

  • A single asset record
  • Owner and accountability
  • Links to the CMDB and the contract

Phase 4

Use and maintenance

Changes, moves and regular inventories keep the register accurate, while licence usage and upcoming renewals stay on the radar.

  • Regular inventories and reconciliation
  • Licence position: entitlement versus usage
  • Calendar of renewals and subscriptions

Phase 5

Retirement

A clean exit: data wiping, disposal, returning licences to the pool and closing the record.

  • Proof of data wiping and disposal
  • Licences returned to the pool
  • A closed, traceable record

Areas I cover

Hardware (HAM)

Physical and virtual devices tracked from purchase to certified disposal.

  • Purchase, stocking, deployment, service and retirement processes
  • Warranties, leases and hardware refresh planning
  • Physical inventories with barcodes or RFID
  • Secure data wiping and responsible disposal

Software and licences (SAM)

Licence compliance and audit readiness, on-premise and in the cloud.

  • Effective licence position (ELP): entitlement versus usage
  • Licence metrics: named user, per core, PVU, subscription
  • Linking purchase orders, invoices and entitlements
  • Preparation for software vendor audits

Cloud and SaaS

Visibility of subscriptions bought outside the usual procurement route.

  • Register of subscriptions and their owners
  • Finding unused and duplicate licences
  • Linking costs to services and cost centres

Discovery and inventory

Several data sources combined into one, with automated cleansing and matching.

  • Agent-based and agentless data collection
  • Record matching and conflict resolution (reconciliation)
  • Cloud resources via API
  • Detecting unauthorised devices (shadow IT)

Service Configuration Management and CMDB

A configuration database you can trust as the single source of truth about what your services are made of.

  • Data model of services, applications and infrastructure
  • Links between configuration items, services and SLAs
  • Impact analysis for changes and incidents
  • Data quality: completeness, accuracy and compliance

Governance and standards

The rules, roles and responsibilities that keep the register accurate long after go-live.

  • Practices aligned with ITIL and ISO/IEC 19770
  • Roles: asset manager, configuration manager, CI owner
  • Policies for issuing and returning devices
  • Management reporting and audit evidence

Asset versus configuration item

Asset

Anything with financial, contractual or licence value. You track its price, supplier, contract, warranty, depreciation and assigned user. It falls under IT Asset Management.

Configuration item (CI)

Anything needed to deliver an IT service. You track its technical state, version, dependencies and the impact if it fails. It falls under Service Configuration Management and lives in the CMDB.

A physical server is itself both an asset and a configuration item. As an asset, it is tracked financially and contractually: purchase, warranty, depreciation, disposal. As a configuration item, it is tracked technically: its configuration and its relationships to the operating system, database and services running on it.

Tool-agnostic

I set up your register in the platform you already use, or help you choose the right one. For example:

  • ServiceNow
  • Jira Service Management Assets
  • Microsoft Intune
  • Microsoft Configuration Manager
  • Lansweeper
  • Flexera
  • Snow
One version of the truth about what you own – for IT, procurement and finance, and for the day the auditors arrive.
ISO/IEC 19770 · ITIL

Frequently asked questions

What is the difference between SACM, ITAM and Service Configuration Management?

SACM (Service Asset and Configuration Management) is an ITIL v3 term that combined asset and configuration management into one process. ITIL 4 splits them into two separate but closely linked practices: IT Asset Management focuses on the financial, contractual and licence side of assets across their lifecycle, Service Configuration Management on technical items, their relationships and their links to services. ITIL (Version 5), released in 2026, keeps the same split.

Which standards govern IT Asset Management?

The foundation is the ISO/IEC 19770 family. Part 1 defines requirements for an IT asset management system, part 2 software identification tags (SWID), part 3 the entitlement schema and part 4 resource utilisation measurement.

How does asset management relate to ISO/IEC 27001 and ISO/IEC 20000-1?

ISO/IEC 27001 requires an inventory of information and other associated assets (control A.5.9) and configuration management (control A.8.9). ISO/IEC 20000-1 sets requirements for both asset management and configuration management within the service management system. Without reliable records, compliance is very hard to demonstrate.

Why do asset records matter for NIS2 and DORA?

The NIS2 Directive lists asset management among the mandatory cybersecurity risk-management measures, and the DORA Regulation requires financial entities to identify and record their ICT assets and their dependencies. Accurate asset and configuration records are therefore a precondition for compliance, not just good practice.

NextServices