IT Asset Management for Small Business: PCs, Accounts, Cost

IT asset management means keeping continuous track of the IT-related items and rights your company owns or subscribes to, along with where they are, who uses them, what state they are in, and when they expire. The scope is not limited to hardware such as PCs and smartphones. It normally also covers cloud service accounts used for work, software licences, domain and SSL certificate contracts, and network equipment. In practical terms, the goal is to reach a state where you can answer: how many do we have, who uses each one, and when does it expire?

In large companies this is handled by a dedicated department with purpose-built tooling. In smaller companies, the device count simply grows while nobody owns the problem. Rather than aiming for perfect records from the start, it is more realistic to begin by eliminating the questions you currently cannot answer.

The losses that occur in companies with weak asset tracking are quiet ones. Individually each is small, but over several years they add up to meaningful money and time.

Monthly charges for unused SaaS subscriptions continue for years
Accounts belonging to former employees remain active, leaving company data reachable from outside
Nobody knows which software is installed on which PC, creating licence compliance risk
PCs running an end-of-life OS stay in daily business use
When a machine fails, nobody knows who bought it or when, so there is no warranty and no handover documentation

Leftover accounts in particular go beyond wasted money and lead directly to security incidents. Access rights for departing staff are covered in detail in our guide to offboarding cloud accounts, and preparing for OS and software end-of-life is covered in our EOL preparation guide.

Trying to manage everything at once is how these projects fail. Split the scope into four categories and start with the ones carrying the most risk and cost.

Accounts and contracts rank highest because neglecting them causes information leakage or service outage rather than merely wasted spend. A missed domain or SSL certificate renewal surfaces as your website suddenly going dark.

For the first pass, aim to complete one full cycle rather than to be exhaustive. For a company of around 30 staff, two to three days of work is usually enough to get something usable.

1. Work backwards from payments — review twelve months of card statements and bank debits and list every IT-related charge. Unexplained subscriptions surface here
2. Work forwards from people — using the staff list, ask each person to declare the PCs and accounts they use
3. Count the physical devices — include spares in storage and machines returned by leavers, then reconcile against the ledger
4. Confirm ownership — check whose email address each service's admin account is tied to, and move personal addresses to a shared company address
5. Consolidate renewal dates — put domain, certificate, maintenance contract and licence renewal months into a single calendar

Steps 1 and 4 deliver the most value. Working backwards from payments is the only reliable way to catch services that nobody declares but that keep billing you. Checking admin account ownership prevents the situation where a service becomes unusable the moment one employee leaves. That dependency risk is covered in our article on preventing system knowledge from leaving with staff.

Dedicated IT asset management tools exist, but at smaller scales a spreadsheet ledger works perfectly well. The following gives a rough dividing line.

These figures are general market ranges and vary with features and contract terms. The main benefit of a tool is that devices report their own details automatically, so the ledger drifts less from reality. Conversely, a company with few devices and little staff turnover can run perfectly well on a manual inventory twice a year. Outsourcing options are covered in our guide to IT support outsourcing and advisory costs.

A one-off inventory becomes useless within six months. Only four rules are needed to keep it current.

Add a ledger-update line to your onboarding and offboarding checklists
Require one named approver for every new IT contract, so that anyone can no longer sign up unilaterally
Set an annual date to review the consolidated renewal calendar
Store the ledger somewhere everyone can find, never on one person's PC

None of these require new tooling or budget. Asset management usually fails not for lack of a tool but because nothing in the normal workflow triggers an update. For structuring the workload of a sole or part-time IT person, see our guide for one-person IT departments.

Can you state how many PCs the company owns, right now?
Can you list every IT-related payment from the past twelve months?
Is each cloud service's admin account held in the company's name?
When did you last verify that former employees' accounts are disabled?
Do you know the renewal dates for your domains and SSL certificates?
Are any PCs running an end-of-life OS still in business use?

If two or more of these cannot be answered immediately, an inventory is worth doing. IT asset management is not a growth investment, but the first pass often pays for itself simply by stopping charges nobody needed. For the wider security picture and how to prioritise, see our complete guide to IT risk for small businesses.