Back to Assessments & Documents
Technology Finance and Assets Active

IT Asset Management Maturity Assessment

A 70-question diagnostic across 11 domains that follows the asset lifecycle from strategy and people through acquisition, inventory, licensing, hardware, cloud and AI assets, contracts and cost, integration, compliance,...

Overview

A 70-question diagnostic across 11 domains that follows the asset lifecycle from strategy and people through acquisition, inventory, licensing, hardware, cloud and AI assets, contracts and cost, integration, compliance, disposal and improvement. Written for the ITAM Manager, IT Director or CFO who needs to answer: do we know what IT assets we own and use, are we license-compliant, and are we getting full value from every asset?

Detailed Description

IT assets are one of the largest controllable costs in technology, yet many organizations only find out what they own when a vendor audit arrives. Without managed ITAM, licenses are over-bought and under-used, hardware goes missing, cloud and SaaS subscriptions multiply without owners, and retired devices leave with data still on them.

This assessment covers thirteen domains in lifecycle order. It starts with strategy, policy, and ownership, then roles, a working RACI, and a real ITAM platform. It follows assets through catalog-based buying and registration, one reconciled register with discovery across endpoints, mobile, IoT, and OT, software license positions calculated before a vendor asks, hardware lifecycle and refresh, and cloud and SaaS management shared with FinOps. It then checks contract renewals, total cost and allocation, links to the CMDB, finance, and HR, vendor audit defense, verified data sanitization at disposal, and measurement through KPIs and management review.

Each question is scored on three dimensions: Documented, Implemented, and Effective. This exposes practices that exist on paper but not in daily work, work that is done but never written down, and practices that run but are never measured. Results give a maturity level per domain and a ranked improvement roadmap.

Assessment Details

Audience

ITAM Manager / SAM Manager / IT Director / VP of IT Operations / CIO / CFO. Secondary: Procurement, CISO, Compliance, Service Desk and Change Managers.

Purpose

Finds gaps in asset visibility, license compliance, cost control, and lifecycle governance. Moves the organization from reactive asset tracking to asset value management that cuts audit risk, removes waste, and lowers IT spend.

Effort

Initial assessment: 6-8 hours with the ITAM Manager, SAM Analyst, Procurement, Finance, IT Operations, and Security. Evidence gathering: 2-4 weeks. Reassessment: 4 hours.

Cadence

Annually. Reassess after a major technology refresh, cloud migration, merger or acquisition, or a vendor audit notice.

Framework Alignment

ISO/IEC 19770-1:2017 ISO/IEC 19770-2:2015 ISO/IEC 19770-3:2016 ISO/IEC 19770-4:2017 ISO/IEC 5230:2020 ISO/IEC 27001:2022 ISO/IEC 42001:2023 ISO 14001:2026 COBIT 2019 ITIL 4 NIST CSF 2.0 NIST SP 800-53 Rev 5 NIST SP 800-88 Rev 2 NIST AI RMF 1.0 IEEE 2883-2022 FinOps Framework 2026 IAS 16 IAS 38 IFRS 16 Directive 2012/19/EU R2v3 Standard e-Stewards Standard GHG Protocol Corporate Value Chain (Scope 3) Standard NCA ECC-2:2024 SAMA Cyber Security Framework 2017 UAE IA Standard v2.1

KPIs

  • Register Accuracy - Register accuracy verified by physical and data sampling. Target: 95% or higher.
  • Discovery Coverage - Share of network-connected assets reporting to discovery. Target: 98% or higher.
  • Unbudgeted True-Up Cost - Unbudgeted license true-up cost as a share of annual software spend. Target: under 2%.
  • Inactive SaaS Seats - Share of SaaS seats inactive for more than 60 days. Target: under 5%.
  • ITAM Value Ratio - Verified ITAM savings compared to ITAM operating cost. Target: 3:1 or better.

Dependencies

Configuration Management: CMDB links, shared discovery and secure builds rely on configuration management (v9.9.6). Service Availability Management and IT Service Management: service tiers, incident and change processes support warranty, spares, renewals and handoffs. Procurement, Finance and FinOps: purchase orders, invoices, cost allocation and cloud optimization are owned with procurement, IT finance and FinOps. Information Security: disposal and compliance questions need security policies and controls. HR: joiner and leaver integration needs defined HR lifecycle processes. Recommended: Complete the Configuration Management, Service Availability Management and IT FinOps and Cloud Financial Management assessments for context.

Assessment Outline

(11 domains · 70 questions)
  1. 1

    1 ITAM Strategy, Governance and People

    ITAM strategy, asset class scope, policies, named owner, steering group, asset data in planning and risk, staffed roles, cross-functional RACI, ITAM platform and training

    • 1.1 ITAM Strategy 1 questions
    • 1.2 ITAM Scope Definition 1 questions
    • 1.3 ITAM Policies 1 questions
    • 1.4 ITAM Ownership 1 questions
    • 1.5 ITAM Governance Body 1 questions
    • 1.6 Planning and Risk Alignment 1 questions
    • 1.7 ITAM Roles and Staffing 1 questions
    • 1.8 Cross-Functional RACI 1 questions
    • 1.9 ITAM Platform 1 questions
    • 1.10 ITAM Competence and Training 1 questions
  2. 2

    2 Procurement and Onboarding

    Approved product catalog, request and approval route, receipt validation, tagging, registration before deployment, owner acknowledgment

    • 2.1 Approved Product Catalog 1 questions
    • 2.2 Governed Procurement 1 questions
    • 2.3 Goods Receipt Validation 1 questions
    • 2.4 Unique Asset Identification 1 questions
    • 2.5 Pre-Deployment Registration 1 questions
    • 2.6 Ownership Assignment 1 questions
  3. 3

    3 Asset Inventory and Discovery

    Asset data standard, single register, discovery sources beyond the CMDB, reconciliation, physical verification shared with configuration management, movement tracking, lost and stolen assets

    • 3.1 Asset Data Standard 1 questions
    • 3.2 Central Asset Register 1 questions
    • 3.3 Asset Discovery Sources 1 questions
    • 3.4 Discovery-Register Reconciliation 1 questions
    • 3.5 Physical Verification 1 questions
    • 3.6 Movement Tracking 1 questions
    • 3.7 Lost, Stolen and Missing Assets 1 questions
  4. 4

    4 Software Asset Management and Licensing

    Normalized software inventory, entitlements, complex license metrics, effective license positions, compliance reviews, license harvesting, SaaS seats

    • 4.1 Software Inventory 1 questions
    • 4.2 Software Normalization and Recognition 1 questions
    • 4.3 Entitlement Tracking 1 questions
    • 4.4 Complex License Metrics 1 questions
    • 4.5 Effective License Position 1 questions
    • 4.6 Proactive Compliance Review 1 questions
    • 4.7 Harvesting and Reuse 1 questions
    • 4.8 SaaS License and Usage Management 1 questions
  5. 5

    5 Hardware Asset Management

    Lifecycle states, warranty by service criticality, remote custody, spare stock, data-driven refresh forecasting, lifecycle carbon and circularity

    • 5.1 Hardware Lifecycle State Model 1 questions
    • 5.2 Warranty and Maintenance Tracking 1 questions
    • 5.3 Remote Asset Custody 1 questions
    • 5.4 Spare Stock Management 1 questions
    • 5.5 Data-Driven Refresh Forecasting 1 questions
    • 5.6 Lifecycle Carbon and Circularity 1 questions
  6. 6

    6 Cloud and Subscription Asset Management

    Cloud and subscription inventory, ownership tagging, shadow services, cloud waste passed to FinOps, AI assets and entitlements

    • 6.1 Cloud Subscription Inventory 1 questions
    • 6.2 Cloud Ownership Tagging 1 questions
    • 6.3 Shadow IT Detection 1 questions
    • 6.4 Cloud Waste Identification 1 questions
    • 6.5 AI Assets and Entitlements 1 questions
  7. 7

    7 Contract and Financial Management

    Central contract records, renewals that protect critical services, invoice quantity checks, right-sizing before renewal, total cost of ownership, depreciation, budget input, price challenge support

    • 7.1 Contract Repository 1 questions
    • 7.2 Renewal Alerting 1 questions
    • 7.3 Invoice Quantity Validation 1 questions
    • 7.4 Pre-Renewal Right-Sizing 1 questions
    • 7.5 Total Cost of Ownership 1 questions
    • 7.6 Depreciation Management 1 questions
    • 7.7 Budget and Forecast Input 1 questions
    • 7.8 Price Challenge Support 1 questions
  8. 8

    8 Integration with ITSM, Security and Business Processes

    Asset and CI lifecycle handoff, finance and procurement links, joiner-mover-leaver, incident and problem use, vulnerability management coverage

    • 8.1 Asset and CI Lifecycle Handoff 1 questions
    • 8.2 Finance and Procurement Integration 1 questions
    • 8.3 Joiner-Mover-Leaver Integration 1 questions
    • 8.4 Incident and Problem Integration 1 questions
    • 8.5 Vulnerability Management Linkage 1 questions
  9. 9

    9 Compliance, Risk and Audit

    Obligations mapped to controls, end-of-support register, open source license compliance, vendor audit playbook, internal control testing

    • 9.1 Compliance Obligations Mapping 1 questions
    • 9.2 End-of-Life and End-of-Support Management 1 questions
    • 9.3 Open Source License Compliance 1 questions
    • 9.4 Vendor Audit Response 1 questions
    • 9.5 ITAM Control Assurance 1 questions
  10. 10

    10 Disposal, Retirement and Data Sanitization

    Approved retirement process, reuse first, verified data sanitization, retired status and license and contract release, certified e-waste recyclers

    • 10.1 Disposal Process 1 questions
    • 10.2 Reuse Before Disposal 1 questions
    • 10.3 Data Sanitization 1 questions
    • 10.4 Retirement Status and Entitlement Release 1 questions
    • 10.5 E-Waste Compliance 1 questions
  11. 11

    11 Measurement, Reporting and Improvement

    ITAM KPIs, data quality, finance-agreed savings, leadership review, improvement register

    • 11.1 ITAM KPI Tracking 1 questions
    • 11.2 Data Quality Measurement 1 questions
    • 11.3 Value Reporting 1 questions
    • 11.4 Management Review 1 questions
    • 11.5 Continual Improvement Register 1 questions

At a Glance

Category Technology Finance and Assets
Type Free
Roles 6
Domains 11
Questions 70

Still have questions? Get in touch

ITSGovernance