How the ITAM Review 12 Box Model maps to ISO/IEC 19770
The table below shows how the 12 Box model from The ITAM Review compares to the International Standard for SAM, ISO/IEC 19770-1 (2012).
The major competency areas for the 12 Box model are on the left hand side and the major process areas for ISO/IEC 19770 are along the top column.
ISO/IEC 19770-1 main process areas versus 12 Box model competency areas – CLICK TO ENLARGE
Introduction to ISO/IEC 19770
The main best practice International Standard for SAM is now in it’s second edition. The standard also has several additional components published and in development. The major components are -1, -2, and -3. Dash 1 refers to best practice, -2 refers to software ID tags and -3 refers to entitlement tags. Further dashes are under development.
- ISO/IEC 19770-1 – Best practice (ISO 19770 Wiki entry, Buy the 2012 standard online, or refer to https://www.19770.org)
- ISO/IEC 19770-2 SW ID Tags
- ISO/IEC 19770-3 Entitlement Tags (See this intro video and podcast)
- There is also an overview and glossary document (ISO/IEC 19770-5) available for free download here.
- See also the ITAM Review news archive on ISO since 2008 here: https://itassetmanagement.net/category/isoiec-19770/
ISO/IEC 19770 Certification
At the time of writing there is no formally recognized way of being certified against the ISO SAM standard, although a few organizations we know have asked their SAM partner to assess them against the ‘spirit’ of the standard to assess their maturity and identify opportunities for improvement.
The ISO standard is divided into four tiers, in theory an organization could be benchmarked against these tiers in isolation.
In layman’s terms the tiers are:
- Tier 1 – Trustworthy Data – The ability to generate good quality SAM data
- Tier 2 – Practical Management – Putting controls in place to manage SAM lifecycles
- Tier 3 – Operational Integration – Driving efficiency
- Tier 4 – Full ISO/IEC SAM Conformance – Aiming for full conformance against the standard.
The free online maturity assessment from The ITAM Review suggests organizations have Poor, Partial or Good coverage against the competency areas of the 12 Box Model. If your organization is hitting Good in most areas, it might be worth considering exploring the ISO standard.
The free maturity assessment against the ITAM Review 12 model is available here:
https://itassetmanagement.net/12-box-maturity-assessment/
In module 12, VERIFICATION, we explore what we can learn from the ISO standard when it comes to building a world class ITAM practice:
https://itassetmanagement.net/event/12-box-assessment-model-webinar-module-12/
Can’t find what you’re looking for?
More from ITAM News & Analysis
-
Broadcom is removing expired VMware licences from its portal - take action now!
Hot on the heels of Broadcom’s announcement of the end of perpetual licences for VMware it has given customers barely a week to download any keys for licenses from its portal with expired support. This is ... -
Who Loses When Broadcom Wins?
News of a new Broadcom deal rarely arrives with great fanfare. The November 2023 VMware acquisition provoked open worry online and in business circles, with many critics wondering whether the former Hewlett-Packard spinoff’s reputation would prove ... -
Software Vendor Insights: What do the numbers tell us about the opportunities for ITAM negotiations?
What software vendor insights can be gained from the latest financial results from Amazon, Google, Broadcom, Salesforce, IBM and SAP? An important part of ITAM is paying close attention to the health of the companies we ...