IT Asset Management Checklist to Track Every Device in 2026

"We don't even know how many devices are unaccounted for" is how buyers describe a register that stopped matching the fleet. An IT asset management checklist stops that drift by giving each task an owner and a date. Below: the free PDF, the record fields, a four-step audit, the KPIs and common mistakes.

IT Asset Management Checklist

The IT asset management process here follows a device from purchase to disposal. Part 1 is set up once, Parts 2 to 4 run mostly on events, and Part 5 runs on dates.

Download the IT asset management checklist (PDF, A4)

Download the IT asset management checklist (PDF, US Letter)

Steps for one joiner or leaver live in the IT onboarding and offboarding checklist (tasks 16 and 24).

Part 1: Foundation

The IT asset management policy in task 2 tells staff what to do; the contract clause in task 3 is what you point to when a leaver stops answering. Task 5 keys the register on the serial number because it never changes, while names and owners do. Task 9 matters once you hire abroad: a returned device is best kept in the country where it was collected, since a later move across a border can mean customs.

Pro tip: write a person's name in every Owner cell, never "IT", and give the IT lead a deputy. A team name hides the gap until the one person doing the work is away, as a solo IT lead said in a sales call: "if I'm on holiday, we can't hire."

Part 2: Purchase and Deployment

Without task 10, staff in a new country buy on personal cards and the device never reaches the register. The paying entity (task 12) matters when each country has its own legal entity. Task 15 stops fixed assets going missing from Finance's books. Task 13 is easy to put off; once a laptop sits in a home abroad, getting its serial means asking someone to read a sticker.

Tip: ask each reseller to print the serial number on the invoice line, so task 13 becomes a copy and paste.

Part 3: Devices in Use

A swap creates two laptops and one ticket, so task 18 collects the old one. Same-day action in task 21 shortens the time a lost laptop stays usable. Task 23 catches devices that changed hands during long leave. The list in task 22 feeds your hardware refresh cycle.

Part 4: Recovery and Disposal

Doorstep collection and a certified wipe can go to a laptop retrieval service. NIST defines media sanitisation as making access to the data "infeasible for a given level of effort" in SP 800-88 Revision 2.

The limit in task 25 forces a decision, because a waiting device loses resale value. Task 27 records what device buyback paid. Task 28's certificate is proof an auditor can ask for, and task 29 stops Finance carrying a device that no longer exists.

Part 5: Recurring Routines

\* Suggested default; change it to fit your policy.

An overdue return (task 31) is easier to chase in week two than month three, and a delivery with no register row (task 32) is one email to fix. Task 35 stops paying for idle seats, task 37 forces the storage decision, and task 40 catches routines that quietly stopped.

A reply in an r/sysadmin thread about missing laptops asked the obvious question: "If you don't maintain the spreadsheet what makes you think you'll maintain the asset management tool?" Task 39 follows the CIS Controls guide, which asks for a review "bi-annually, or more frequently."

Tip: put tasks 31 to 40 in a shared calendar as repeating events with the owner as attendee, so a skipped routine shows up as a missed meeting.

What to Record for Every IT Asset

This IT asset inventory checklist of fields puts hardware and software side by side, with what each field is used for later.

Fill the management field before shipping: zero-touch deployment enrols it in your MDM on first boot. After that, records stay current when updates ride on events you already have: the invoice (task 13), any change of holder or country (task 20) and the monthly match (task 34).

The same fields fit an office fleet in one country: CIS Control 1 covers devices connected "physically, virtually, remotely" in the CIS control text. When several people edit the register, hardware asset management software that logs every change is the next step.

How to Run an IT Asset Management Audit

Run it as a routine: monthly matching (task 34), a quarterly sample (task 36) and a full review every six months (task 39). A new IT or security lead often asks for it first. A once-a-year project finds problems late, as the title of that r/sysadmin thread shows: "I did a quick audit... and found over 100 missing laptops."

This IT asset management audit checklist pairs each ISO/IEC 27001 control that touches the physical fleet with a record that shows it working.

Check these numbers and titles against your own ISO/IEC 27001 Statement of Applicability. The third column is a suggestion, not the standard's text.

Pull the Lists

Export the register, the MDM device list, the HR roster, open invoices and the wipe certificates on the same date.

Verify the Hardware

Compare the register, the MDM check-ins from the last 30 days and the HR roster. A register device with no check-in may be lost or switched off. An MDM device with no row is untracked. A device held by a leaver is a recovery nobody started.

Give each mismatch an owner and a date: find, collect or retire. A device used from home is outside any network scan, so the proof comes from its holder. Then sample ten devices with the ten-asset proof.

Reconcile Software Licences

Compare seats paid with seats used in the last 30 days, and cancel or reassign the rest. CSF 2.0 lists this as ID.AM-02: "Inventories of software, services, and systems managed by the organization are maintained."

Fix and File the Evidence

Close each mismatch with a dated note, and keep the exports, notes and certificates in one folder named by date for the next audit.

IT Asset Management KPIs to Track

Capterra's 2022 offboarding survey of 287 HR employees prices the returns KPI. Asked about the past year, 71% of those who had offboarded anyone named at least one leaver who kept company equipment, and they estimated that equipment at $1,963 per leaver.

A falling returns share means the leaver steps in task 24 start too late. A rising count of silent devices means nobody chases the list from task 33. Devices past the storage limit mean tasks 25 and 37 are being put off.

Common IT Asset Management Mistakes

Trusting Network Discovery Alone

A discovery scan lists what is on the company network, and a laptop used from a home connection never appears. The CIS guidance for Control 1 says devices "not connected to the organization's network, require manual discovery in order to be included in the aggregate inventory." Tasks 33 and 34 fix it.

Letting the Old Device Stay When a Swap Ships

A replacement goes out and the broken laptop stays in a drawer. An admin in the same thread admitted: "we never made a real effort to get the original one back." Task 18 makes collection part of the swap.

Moving Used Devices Across Borders

Outside the European Economic Area, customs make the time and cost of moving a used laptop hard to predict. Task 9 decides in advance where returned devices wait in each country. If a move is unavoidable, plan for customs before shipping a laptop internationally.

Retiring a Device That Is Still in the MDM

A recycler in the thread put it plainly: "They are letting devices out the door before they have been actually removed from AD/whatever management software they are using." Tasks 26, 30 and 38 fix it; an IT asset disposition service supplies the certificates.

Free templates for the rest of the device's life

• To track each device: the IT inventory template (Excel), or the IT asset inventory Excel template (Excel), which adds a returns tab for leavers.
• When someone gives notice: the employee offboarding checklist (PDF or Word), 30 steps with an owner and a deadline each.
• After the last working day: the return of company property letter (Word), six letters that ask for the devices back.
• When a device will not be reused: the asset disposal form (PDF, Word or Excel), the signed record that it was wiped and left the business.
• At month end: the fixed asset register template (Excel), with cost, depreciation and book value for each device.

{{cta-primary}}

What Are the Key Requirements for IT Asset Management?

Two things, in NIST CSF 2.0 terms: an inventory of the hardware you manage (ID.AM-01), and management of each asset across its life cycle (ID.AM-08).

What Are Some IT Asset Management Tools?

Four types. An MDM such as Jamf or Intune runs task 33, an HR system tasks 7, 16 and 24, register software tasks 5 and 13, and a lifecycle service such as Tequipy Part 4's collection and wipe.

What Are the Best Practices for IT Asset Management?

Three: add each device to the register at the invoice, give every stage one named person, and run the routines on a fixed calendar.

Who Should Own IT Asset Management Without an IT Team?

People Ops, with one named person owning the register. "It's not even my job but I'm stuck doing it" is how one buyer described the role to Tequipy.