How to Conduct an IT Asset Audit

An IT asset audit is a systematic check that the assets in your records actually exist and are where they are supposed to be. It is the process of reconciling your asset register against physical reality.

Most organisations either do not audit at all, or do it reactively — when something goes missing, when a compliance deadline arrives, or when a new IT manager inherits a mess and needs to understand what they are working with.

Why audits matter

Without periodic audits, asset registers drift. Devices leave the building without being recorded. Employees change roles and keep old equipment. Software licences accumulate without review. Over time, the gap between your records and reality grows until the register is no longer useful.

An audit closes that gap. It gives you an accurate baseline to work from, reveals assets you had forgotten about, and surfaces gaps that need to be addressed — missing equipment, unrecorded purchases, or licences with no clear owner.

Step 1: Build your asset register

Before you can verify your assets, you need a record of what you think you own. If you are starting from scratch, this means pulling together whatever records exist — finance spreadsheets, email receipts, IT records, supplier invoices — into a single list.

If you already have an asset register, review it for completeness before you start. Are all categories represented? Are recent purchases included? Is every record assigned to a person or location?

Step 2: Verify what you own

For hardware, this means physically locating each asset and confirming the serial number matches your record. For remote and hybrid teams, this often requires a self-service confirmation process where employees verify the equipment they have at home.

For software licences, verify the seat count against actual users. Log in to each tool and check how many active accounts exist versus how many seats you are paying for.

Step 3: Identify gaps and anomalies

• Assets in your register that cannot be located — may be lost, stolen, or with a former employee
• Assets you find that are not in your register — unrecorded purchases or equipment brought in from outside
• Licences with more active users than purchased seats — a compliance risk requiring immediate action
• Licences with significantly fewer active users than seats — a cost saving opportunity
• Assets assigned to employees who have left the company
• Warranties or licences that have already expired without anyone noticing

Step 4: Update your records and act

After the audit, update your register to reflect reality. Remove assets that cannot be found and flag them appropriately. Add assets that were missing. Reassign anything incorrectly attributed.

Then act on the anomalies: chase missing equipment, cancel unused licences, and put a process in place to prevent the same gaps from recurring — typically by ensuring every new purchase and every employee departure triggers an asset register update.