Notifications
Clear all
Topic starter
10/06/2026 12:23 am
TL;DR: IT asset management best practices in 2026 emphasise visibility, lifecycle control, automation, and cross-team process discipline across hardware, software, and SaaS, according to Zluri. The identity gap is that asset management only becomes security-relevant when it is tied to entitlement, offboarding, and renewal governance, not inventory alone.
NHIMG editorial — based on content published by Zluri: Best Practices IT Asset Management in 2026 Across the Globe
Questions worth separating out
Q: How should security teams connect IT asset management to identity governance?
A: Security teams should treat ITAM as the inventory layer and identity governance as the decision layer.
Q: Why does over-deployment matter to IAM teams?
A: Over-deployment matters because unused licences often indicate more than wasted spend.
Q: How do organisations know if ITAM is actually reducing risk?
A: ITAM is reducing risk when asset records can be traced to current ownership, current use, and a clear retirement or revocation path.
Practitioner guidance
- Link asset records to access ownership Assign a business owner and technical owner to each major SaaS or software asset, then connect renewal decisions to entitlement review and removal.
- Automate offboarding with evidence capture Use workflow automation to remove access, cancel renewals, and archive entitlement evidence at the same time.
- Run a pilot before scaling ITAM controls Start with one business unit or application group, validate discovery accuracy, then expand once the process reliably updates renewals and disposals.
What's in the full article
Zluri's full post covers the operational detail this post intentionally leaves for the source:
- Step-by-step ITAM best-practice workflow for discovery, procurement, deployment, maintenance, and retirement.
- Practical guidance for avoiding over-deployment during audits and proving software entitlement.
- How to structure automation for onboarding, offboarding, and renewal monitoring without relying on spreadsheets.
- Why SaaS subscription tracking and vendor management become more reliable when ITAM is run as a continuous process.
👉 Read Zluri's ITAM best practices guide for 2026 →
ITAM best practices in 2026: where identity governance breaks?
Explore further
10/06/2026 9:32 pm
ITAM only becomes identity governance when asset records are tied to access decisions. Inventory by itself tells you what exists, but it does not tell you whether the asset still has valid entitlement, active renewal, or an accountable owner. That is why the governance problem sits at the intersection of ITAM, SaaS management, and access lifecycle controls. Practitioners should treat asset records as the input to governance, not the governance outcome.
A few things that frame the scale:
- 92% of organisations expose NHIs to third parties, raising concerns about supply chain security, according to Ultimate Guide to NHIs.
- 96% of organisations store secrets outside of secrets managers in vulnerable locations including code, config files, and CI/CD tools, according to Ultimate Guide to NHIs.
A question worth separating out:
Q: What is the difference between asset inventory and lifecycle governance?
A: Asset inventory tells you what exists. Lifecycle governance tells you who is responsible, when the asset should be renewed or retired, and how evidence is retained. Inventory supports reporting, but lifecycle governance is what makes the control defensible in audits and operational change.
👉 Read our full editorial: ITAM best practices in 2026 expose the identity gap
