The table below shows how the 12 Box model from The ITAM Review compares to the International Standard for SAM, ISO/IEC 19770-1 (2012).
The major competency areas for the 12 Box model are on the left hand side and the major process areas for ISO/IEC 19770 are along the top column.
Introduction to ISO/IEC 19770
The main best practice International Standard for SAM is now in it’s second edition. The standard also has several additional components published and in development. The major components are -1, -2, and -3. Dash 1 refers to best practice, -2 refers to software ID tags and -3 refers to entitlement tags. Further dashes are under development.
- ISO/IEC 19770-1 – Best practice (ISO 19770 Wiki entry, Buy the 2012 standard online, or refer to http://www.19770.org)
- ISO/IEC 19770-2 SW ID Tags
- ISO/IEC 19770-3 Entitlement Tags (See this intro video and podcast)
- There is also an overview and glossary document (ISO/IEC 19770-5) available for free download here.
- See also the ITAM Review news archive on ISO since 2008 here: https://www.itassetmanagement.net/category/isoiec-19770/
ISO/IEC 19770 Certification
At the time of writing there is no formally recognized way of being certified against the ISO SAM standard, although a few organizations we know have asked their SAM partner to assess them against the ‘spirit’ of the standard to assess their maturity and identify opportunities for improvement.
The ISO standard is divided into four tiers, in theory an organization could be benchmarked against these tiers in isolation.
In layman’s terms the tiers are:
- Tier 1 – Trustworthy Data – The ability to generate good quality SAM data
- Tier 2 – Practical Management – Putting controls in place to manage SAM lifecycles
- Tier 3 – Operational Integration – Driving efficiency
- Tier 4 – Full ISO/IEC SAM Conformance – Aiming for full conformance against the standard.
The free online maturity assessment from The ITAM Review suggests organizations have Poor, Partial or Good coverage against the competency areas of the 12 Box Model. If your organization is hitting Good in most areas, it might be worth considering exploring the ISO standard.
The free maturity assessment against the ITAM Review 12 model is available here:
In module 12, VERIFICATION, we explore what we can learn from the ISO standard when it comes to building a world class ITAM practice: