IT asset management: know where every device is

Key takeaways

IT asset management in a small business means knowing every laptop, phone and key device: who has it, its condition, its security status and when it should be replaced. A register and a starter and leaver routine prevent lost devices and unprotected data. The upkeep outsources well; purchasing decisions stay with you.

• Register every device with user, serial and status.
• Issue and recover devices through starter and leaver routines.
• Check encryption and updates on every device.
• Plan replacements before devices fail.

What should an IT asset register include?

For each device: type, make and model, serial number, assigned user, purchase date, warranty, encryption and update status, and planned replacement date. Add the date of the last check. A spreadsheet is fine for a small firm, as long as one person keeps it current.

• Which business processes should you outsource?
• Fixed asset register: keep it current all year

How do starters and leavers affect asset management?

Most losses happen at the edges of employment. A starter routine issues a configured device and records it. A leaver routine recovers the device, wipes it securely and removes access on the last day. Devices that are never recovered are a data protection risk as well as a cost.

• Starters: configure, record, issue.
• Leavers: recover, wipe, record.
• Lost devices: lock, wipe remotely, record.

• New starter admin: get employees productive from day one
• Leaver admin: final pay, P45s and access done right

Which asset management work can be outsourced?

Keeping the register, quarterly device checks, tracking warranties and replacements, coordinating starter and leaver devices and checking security status. The business approves purchases, sets the replacement budget and decides on device policies such as personal phones for work.

• Software licence management: stop paying for empty seats
• IT processes to outsource in a small business

When is a formal register overkill?

When you have three or four devices and know exactly where each is. Once staff work remotely, devices multiply or turnover rises, the register becomes the only reliable record, and Cyber Essentials expects you to know which devices are in scope.

• How much volume makes a process worth outsourcing?
• Managed security for small firms: what to outsource

What does this look like in practice?

A pattern we see: a leaver's laptop sits in a drawer for months, still signed in to company systems. A leaver checklist that includes device recovery and wiping closes that gap.

• See client work
• BPO Solutions for UK businesses

IT asset checklist

Review these quarterly.

• Every device on the register.
• Assigned user confirmed.
• Encryption and updates checked.
• Warranty and replacement dates current.
• Leaver devices recovered and wiped.

• The process selection score: outsource, split or keep?
• Patch management: keep software updated without drama

Next step

Tell us how many devices your team uses and how you track them today. We will suggest a register and the routines around it.