The ITAM Executive: A Podcast for IT Asset Management Professionals · Anglepoint

The Role of ITAM in Regulatory Compliance & GRC

·22 min·1 clip

A weekly report should show 97% coverage and zero unsupported software instances.

1. The ITAM Executive episode focuses on regulatory compliance and GRC as an extension of IT asset management. 2. The speaker frames the discussion around aligning ITAM management systems with risk and control frameworks. 3. The core question is how ITAM can add value outside its silo by working with governance, risk, and security teams. 4. The episode names PCI, New York financial requirements, FIEC or FBA, and a BEIS framework expected in 2024 as examples. 5. The speaker also cites GRI and SASB as sustainability and governance control frameworks with similar structures. 6. The argument is that all of these frameworks use control points that require conformance evidence. 7. The speaker says info security should not handle audits in isolation and service management should not work alone either. 8. The episode places ITAM, governance risk compliance, and information security in a joint venture around shared risk management. 9. The Deming cycle appears as plan, do, check, act, with the episode emphasizing the planning stage. 10. ISO 19770 is named as the software asset management standard that fits into that continuous-improvement loop. 11. One example says an organization may want protection from risk, cloud-driven innovation, and sustainability at the same time. 12. Another example contrasts that with an organization focused on cost control and application rationalization. 13. The speaker says those priorities change the metrics, measures, and processes each organization should use. 14. The control-scope section distinguishes test of design from test of effectiveness. 15. The speaker explains that test of design is usually a pass-fail question about whether a process exists and is documented. 16. The effectiveness example uses CIS and supported software, then proposes a weekly report with 97% coverage and no unsupported software instances. 17. The speaker says low visibility or end-of-life software should trigger the act part of continuous improvement. 18. The tone is practical and instructional, with repeated references to reports, dashboards, and alignment. 19. Listeners who manage ITAM, GRC, or software compliance should find this directly useful. 20. Viewers looking for entertainment or narrative storytelling may skip it.

As heard by us

A clear, practical look at how ITAM can support compliance without rebuilding the whole program.

This episode frames regulatory pressure as a natural next step for ITAM, not a reason to rebuild the program from scratch. Its useful point is that many of the required habits are already present: discovery, cost analysis, risk management, and the steady collection of data that…

Read the full review in PlayNext →

Why you'd press play

When your ITAM program needs to step into risk mitigation without a heroic rebuild, press play.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from The ITAM Executive: A Podcast for IT Asset Management Professionals