My observation is that Hardware Asset Management (HAM) and Software Asset Management (SAM) data are frequently inaccurate, with many organisations lacking even a baseline expectation for precision. Given that SAM and HAM are cost centres rather than profit centres, this is understandable.
Banks must account for every transaction, every penny, and every card issued or cancelled. This standard of precision should apply equally to IT asset data—especially in security-sensitive environments. No stakeholder would accept 90% accuracy in financial data, yet the same tolerance is often granted to IT asset records, where the risks are equally tangible. The same applies to many areas of the core business that generates revenue.
Without accurate HAM and SAM data, it becomes impossible to:
- Detect unauthorised software usage
- Know if hardware assets are missing or stolen
- Know which hardware assets and software packages need security updates
- Identify support costs which are too high because usage has dropped
- Know if you have adequate software licences
Information security, risk management, internal audit, and governance professional with over 25 years of post-graduate experience gained across a diverse range of private and public sector projects in banking, insurance, telecommunications, health services, charities and more, both in the UK and internationally – MORE