Technology Finance and Assets Assessment

Software Asset and License Management Maturity Assessment

Evaluates software asset and license management maturity across governance, discovery and recognition, entitlements, vendor license positions, purchasing controls, SaaS, open source, audit readiness, optimization and tooling.

Already have an account? Log in to start

Who it is for

  • Process Owner/Full Model Assessor
  • Procurement, Contracts and Legal
  • IT Operations and End-User Computing
  • Application, Development and Business Software Owners
  • Information Security and Risk
  • Finance

Software Asset Manager / License Manager / ITAM Manager / IT Director / Procurement and Vendor Managers. Secondary: Legal, Infrastructure and Cloud Leads, Application Owners, CISO, IT Finance.

What you will gain

Shows where software audit exposure and wasted license spend sit, and what to fix first. Moves the organization from reacting to vendor audits to defending signed license positions and buying only what is used.

About this assessment

Software is where IT asset management carries the most money and the most audit risk. Vendors count by core, cluster, user, document and agent, change their rules every year and audit regularly, while SaaS, cloud and AI credits spread spend across business teams. This deep dive follows the practice in order: mandate and roles, understanding what is installed and owned, calculating and signing license positions, controlling how software arrives, managing SaaS and consumption credits, open source and banned software, defending audits, optimizing renewals, and measuring results. It complements IT Asset Management v6.9.6, which remains the hub and owns the shared registers and procedure.

What we assess: 10 domains

Each domain is a group of related questions, scored on its own and rolled up into your overall result.

01 · 7 questions

1 Software Asset Management Governance and Operating Model

Software policy, scope and vendor tiers, the software asset manager and their authority to hold changes, vendor license owners, objectives and funding, licensing competence and awareness.

02 · 6 questions

2 Software Discovery, Normalization and Usage Metering

Software data standard, discovery across every environment, virtual host mapping, edition and option recognition, usage metering and data quality checks.

03 · 6 questions

3 Entitlement and Proof of License

Entitlement register, proof of entitlement, product use rights, maintenance status, restructuring transfers and purchase reconciliation.

04 · 10 questions

4 License Compliance and Effective License Position

Vendor playbooks, server and cluster licensing, container and Kubernetes licensing, user and device licensing, cloud bring-your-own-license rights, indirect and AI agent access, signed positions, true-ups and self-declarations, remediation and exposure.

05 · 8 questions

5 Software Request, Approval and Purchasing Controls

Single request route, license check before purchase, catalog use, software contract terms, installation controls, deployment records, unapproved software triage and entry route closure.

06 · 6 questions

6 SaaS and Subscription Management

SaaS ownership, identity-based provisioning, card and click-through consolidation, tier right-sizing, consumption and AI credits, and SaaS exit.

07 · 5 questions

7 Software Risk, Open Source and Supportability

Open source policy, license change monitoring, distribution compliance artifacts, banned software removal and supported version currency.

08 · 6 questions

8 Vendor Audit Readiness and Defense

Audit notice handling and response team, scope against contract rights, audit data validation, settlement, mock audits and audit lessons learned.

09 · 6 questions

9 License Optimization and Cost Avoidance

Renewal planning, licensing model strategy, edition and option right-sizing, non-production licensing, product consolidation and savings verification.

10 · 5 questions

10 Tooling, Measurement and Improvement

Software asset management tool, oversight of AI-assisted work, owner reporting, root-cause fixing and the performance scorecard.

KPIs to track

Measures that show whether the improvements hold.

KPI
License Position Currency - Tier 1 vendors with a signed license position less than six months old. Target: 100%.
Licensing Exposure - Value of open license shortfalls as a share of yearly software spend. Target: under 1%.
Discovery Coverage - Known devices and instances reporting software data within 30 days. Target: 98% or higher.
Inactive User Licenses - User licenses assigned to accounts inactive for 90 days or more. Target: under 3%.
Verified Savings - Verified license savings against the yearly target. Target: 100%.

Framework alignment

Questions are written in plain language and mapped to:

  • ISO/IEC 19770-1:2017
  • ISO/IEC 19770-2:2015
  • ISO/IEC 19770-3:2016
  • ISO/IEC 19770-4:2017
  • ISO/IEC 27001:2022
  • ISO/IEC 5230:2020
  • ISO/IEC 18974:2023
  • ISO/IEC 5962:2021
  • COBIT 2019
  • NIST SP 800-53 Rev 5
  • NIST CSF 2.0
  • NIST AI RMF 1.0
  • FinOps Framework 2026

Works best with

Practices this assessment relies on. Assessing them too gives a fuller picture.

IT Asset Management (v6.9.6): the hub model; owns the shared software registers, procedure, workbook and playbook that this model adds sections to.
Configuration Management (v9.9.6): infrastructure discovery and the configuration database supply the data that software discovery and host mapping build on.
Procurement, Legal and Finance: purchase orders, contracts, invoices and budgets are owned with these teams.
Identity and HR: joiner, mover and leaver events drive SaaS provisioning and license removal.
AI Spend Management (v12.9.6), IT FinOps (v5.9.6), Shadow AI Sprawl Governance (v3.9.6) and Vibe Coding Security (v3.9.6): own AI economics, cloud cost, shadow AI and AI-generated code scanning.
Recommended: Complete the IT Asset Management assessment first; this model goes deeper on its software questions.

What you get

Maturity scores

An overall score and a score for each of the 10 domains.

Gap analysis

A clear view of where current practice falls short, and why it matters.

Improvement recommendations

Prioritized next steps to move each area to the next level.

Detailed report

Results you can share with leadership and track over time.

See where you stand on Software Asset and License Management Maturity Assessment

Register, take the assessment, and get your maturity score with a clear improvement roadmap.

Register to take this assessment

Start Measuring Your Maturity Today

© 2026 ITSGovernance, part of SMCE. All rights reserved. Cookie settings