Technology Finance and Assets Assessment

IT Asset Management Maturity Assessment

Evaluates ITAM maturity across governance, people and tooling, procurement, discovery, software licensing, hardware, cloud and SaaS, contracts, finance, integration, compliance, disposal, and measurement.

Already have an account? Log in to start

Who it is for

  • Process Owner/Full Model Assessor
  • IT Leadership and Governance
  • Procurement, Finance and Vendor Management
  • IT Operations and End-User Services
  • Information Security and Risk
  • Software, SaaS and Cloud Asset Management

ITAM Manager / SAM Manager / IT Director / VP of IT Operations / CIO / CFO. Secondary: Procurement, CISO, Compliance, Service Desk and Change Managers.

What you will gain

Finds gaps in asset visibility, license compliance, cost control, and lifecycle governance. Moves the organization from reactive asset tracking to asset value management that cuts audit risk, removes waste, and lowers IT spend.

About this assessment

IT assets are one of the largest controllable costs in technology, yet many organizations only find out what they own when a vendor audit arrives. Without managed ITAM, licenses are over-bought and under-used, hardware goes missing, cloud and SaaS subscriptions multiply without owners, and retired devices leave with data still on them.

This assessment covers thirteen domains in lifecycle order. It starts with strategy, policy, and ownership, then roles, a working RACI, and a real ITAM platform. It follows assets through catalog-based buying and registration, one reconciled register with discovery across endpoints, mobile, IoT, and OT, software license positions calculated before a vendor asks, hardware lifecycle and refresh, and cloud and SaaS management shared with FinOps. It then checks contract renewals, total cost and allocation, links to the CMDB, finance, and HR, vendor audit defense, verified data sanitization at disposal, and measurement through KPIs and management review.

Each question is scored on three dimensions: Documented, Implemented, and Effective. This exposes practices that exist on paper but not in daily work, work that is done but never written down, and practices that run but are never measured. Results give a maturity level per domain and a ranked improvement roadmap.

What we assess: 11 domains

Each domain is a group of related questions, scored on its own and rolled up into your overall result.

01 · 10 questions

1 ITAM Strategy, Governance and People

ITAM strategy, asset class scope, policies, named owner, steering group, asset data in planning and risk, staffed roles, cross-functional RACI, ITAM platform and training

02 · 6 questions

2 Procurement and Onboarding

Approved product catalog, request and approval route, receipt validation, tagging, registration before deployment, owner acknowledgment

03 · 7 questions

3 Asset Inventory and Discovery

Asset data standard, single register, discovery sources beyond the CMDB, reconciliation, physical verification shared with configuration management, movement tracking, lost and stolen assets

04 · 8 questions

4 Software Asset Management and Licensing

Normalized software inventory, entitlements, complex license metrics, effective license positions, compliance reviews, license harvesting, SaaS seats

05 · 6 questions

5 Hardware Asset Management

Lifecycle states, warranty by service criticality, remote custody, spare stock, data-driven refresh forecasting, lifecycle carbon and circularity

06 · 5 questions

6 Cloud and Subscription Asset Management

Cloud and subscription inventory, ownership tagging, shadow services, cloud waste passed to FinOps, AI assets and entitlements

07 · 8 questions

7 Contract and Financial Management

Central contract records, renewals that protect critical services, invoice quantity checks, right-sizing before renewal, total cost of ownership, depreciation, budget input, price challenge support

08 · 5 questions

8 Integration with ITSM, Security and Business Processes

Asset and CI lifecycle handoff, finance and procurement links, joiner-mover-leaver, incident and problem use, vulnerability management coverage

09 · 5 questions

9 Compliance, Risk and Audit

Obligations mapped to controls, end-of-support register, open source license compliance, vendor audit playbook, internal control testing

10 · 5 questions

10 Disposal, Retirement and Data Sanitization

Approved retirement process, reuse first, verified data sanitization, retired status and license and contract release, certified e-waste recyclers

11 · 5 questions

11 Measurement, Reporting and Improvement

ITAM KPIs, data quality, finance-agreed savings, leadership review, improvement register

KPIs to track

Measures that show whether the improvements hold.

KPI
Register Accuracy - Register accuracy verified by physical and data sampling. Target: 95% or higher.
Discovery Coverage - Share of network-connected assets reporting to discovery. Target: 98% or higher.
Unbudgeted True-Up Cost - Unbudgeted license true-up cost as a share of annual software spend. Target: under 2%.
Inactive SaaS Seats - Share of SaaS seats inactive for more than 60 days. Target: under 5%.
ITAM Value Ratio - Verified ITAM savings compared to ITAM operating cost. Target: 3:1 or better.

Framework alignment

Questions are written in plain language and mapped to:

  • ISO/IEC 19770-1:2017
  • ISO/IEC 19770-2:2015
  • ISO/IEC 19770-3:2016
  • ISO/IEC 19770-4:2017
  • ISO/IEC 5230:2020
  • ISO/IEC 27001:2022
  • ISO/IEC 42001:2023
  • ISO 14001:2026
  • COBIT 2019
  • ITIL 4
  • NIST CSF 2.0
  • NIST SP 800-53 Rev 5
  • NIST SP 800-88 Rev 2
  • NIST AI RMF 1.0
  • IEEE 2883-2022
  • FinOps Framework 2026
  • IAS 16
  • IAS 38
  • IFRS 16
  • Directive 2012/19/EU
  • R2v3 Standard
  • e-Stewards Standard
  • GHG Protocol Corporate Value Chain (Scope 3) Standard
  • NCA ECC-2:2024
  • SAMA Cyber Security Framework 2017
  • UAE IA Standard v2.1

Works best with

Practices this assessment relies on. Assessing them too gives a fuller picture.

Configuration Management: CMDB links, shared discovery and secure builds rely on configuration management (v9.9.6).
Service Availability Management and IT Service Management: service tiers, incident and change processes support warranty, spares, renewals and handoffs.
Procurement, Finance and FinOps: purchase orders, invoices, cost allocation and cloud optimization are owned with procurement, IT finance and FinOps.
Information Security: disposal and compliance questions need security policies and controls.
HR: joiner and leaver integration needs defined HR lifecycle processes.
Recommended: Complete the Configuration Management, Service Availability Management and IT FinOps and Cloud Financial Management assessments for context.

What you get

Maturity scores

An overall score and a score for each of the 11 domains.

Gap analysis

A clear view of where current practice falls short, and why it matters.

Improvement recommendations

Prioritized next steps to move each area to the next level.

Detailed report

Results you can share with leadership and track over time.

See where you stand on IT Asset Management Maturity Assessment

Register, take the assessment, and get your maturity score with a clear improvement roadmap.

Register to take this assessment

Start Measuring Your Maturity Today

© 2026 ITSGovernance, part of SMCE. All rights reserved. Cookie settings