What is hardware asset management (HAM)? A practical guide for IT teams

Hardware asset management (HAM) is the practice of tracking every physical IT device, such as laptops, servers, network gear, phones, and printers, from request to retirement. Each HAM record shows a device's owner, location, status, warranty, and age. Service desks depend on HAM data because device records feed the CMDB that tickets, changes, and AI run on.

Key facts about hardware asset management

• 6 lifecycle stages: request, procurement, receiving and inventory, deployment, monitoring and maintenance, and retirement
• 3 NIST sanitization methods: clear, purge, and destroy (NIST SP 800-88 Rev. 2, 2025)
• 46% of infostealer-compromised systems with possible corporate login data were non-managed devices (Verizon 2025 DBIR)
• 65.5% of large organizations still populate the CMDB at least partly by hand (EMA, ITAM in the Age of AI, 2026)
• 18.5% rate their ITSM and CMDB asset data at 95% accuracy or higher (EMA, 2026)

TL;DR

• Know what you own: HAM tracks each physical device, its owner, location, status, warranty, and age.
• Protect the service desk: Tickets, changes, and AI decisions all depend on accurate hardware asset data.
• Plan every stage: Cover request, procurement, deployment, maintenance, and secure retirement for each device.
• Know where HAM ends: IT asset management (ITAM) adds software, licenses, and cloud resources to the hardware view.
• Keep the CMDB accurate: Reconcile device data before it reaches the configuration management database (CMDB), the system that maps assets to services.
• Start small: Define scope and owners, import data from tools you already run, and audit on a schedule.

On this page: What is HAM · Why HAM matters · Lifecycle · Secure disposal · HAM vs ITAM · Security · Challenges · Best practices · 2026 trends · Choosing software · Xurrent ITAM · FAQ

Free analyst report: EMA's findings on faster, smarter incident response.

What is hardware asset management?

Hardware asset management (HAM) is the practice of tracking and managing an organization's physical IT devices from request to retirement, including laptops, servers, network gear, phones, and printers. A good HAM record answers five questions about each device: who owns it, where it is, what state it is in, when its warranty ends, and how old it is.

HAM data is the service desk's input. Device records flow into the CMDB, where each tracked item becomes a configuration item (CI) linked to the services it supports. The Xurrent asset management and CMDB guide shows how that setup works in Xurrent.

Why hardware asset management matters

Hardware asset management pays off in five areas: cost control, security, compliance, service desk speed, and sustainability. Every ticket a service desk works touches a device, so when the record for a laptop, server, or switch is wrong, agents guess and changes miss risks. Each benefit below gets harder to deliver when device records go stale.

• Cost control: Redeploy idle devices before ordering new ones, and avoid buying duplicates.
• Security: Teams can't patch or protect a device they don't know exists.
• Compliance: Show auditors what the organization owns and where each device went.
• Service desk speed: Give agents the affected device, its owner, and its services without a search.
• Sustainability: Reuse, donate, or recycle tracked devices instead of losing them in a closet.

Stale hardware data drives wrong actions. An agent reboots the wrong server, or a ticket routes to a group that no longer owns the service. Change approvers face the same risk: a hardware change management process works only when approvers can see every device and service a change could touch.

The hardware asset lifecycle

The hardware asset lifecycle is the path a device takes through an organization, and six stages cover most devices: request, procurement, receiving and inventory, deployment, monitoring and maintenance, and retirement. Request, deployment, and offboarding are the stages most worth automating, because they hand work between teams.

1. Request: An employee or team asks for a device, often during onboarding.
2. Procurement: IT approves the request, picks a model, and places the order.
3. Receiving and inventory: The device arrives, gets an asset tag, and gets a record with its serial number.
4. Deployment: IT sets up the device and assigns it to an owner and location.
5. Monitoring and maintenance: Teams track repairs, warranty status, and age.
6. Retirement: The device reaches end of life and leaves through reuse, donation, recycling, or destruction.

Request, deployment, and offboarding steps are good candidates for automating asset lifecycle workflows. With enterprise service management (ESM), HR and IT run onboarding on one shared workflow, so a new hire's laptop request doesn't stall between teams.

Retirement and secure disposal

Hardware retirement is the stage where data risk peaks. Before a device is reused, donated, or recycled, its storage needs sanitization, which means removing data so nobody can recover it. NIST SP 800-88 Rev. 2 (2025) defines three sanitization methods: clear, purge, and destroy.

NIST says to use purge instead of clear when possible and to complete a certificate of sanitization for each device. The NIST media sanitization guidelines warn, “In some jurisdictions, simply losing control of sensitive information is enough to be considered a data breach.” The guidance binds federal agencies and is voluntary for private organizations.

HAM vs. ITAM: what's the difference?

Hardware asset management (HAM) covers physical devices only. IT asset management (ITAM) is broader: it adds software, licenses, and cloud resources to the hardware view. HAM answers what you own and where it is; ITAM also answers what runs on each device and what is exposed.

NIST's 2018 reference build for financial services shows where HAM stops. Per the NIST IT asset management guide, tracking devices by bar code “does not answer questions such as ‘What operating systems are our laptops running?’” It also can't answer “Which devices are vulnerable to the latest threat?”

The CMDB is the shared record for both HAM and ITAM. Hardware and software data land there as CIs linked to services, and agents work from that record on every ticket and change.

Hardware asset management and security

Hardware asset management supports security because teams can't protect devices they can't see. The Center for Internet Security (CIS) lists asset inventory as Control 1, and Verizon's 2025 breach data shows unmanaged devices in a large share of infostealer cases. Like NIST guidance, the CIS Controls are voluntary for private organizations.

CIS Control 1 asset inventory guidance tells organizations to “actively manage (inventory, track, and correct) all enterprise assets.” CIS also notes that inventory helps teams find “unauthorized and unmanaged assets to remove or remediate.”

The Verizon 2025 Data Breach Investigations Report studied systems hit by infostealers, which are malware that copy saved logins. Per the Verizon 2025 DBIR, “46% of the systems compromised with an infostealer that had possible corporate login data were non-managed devices.”

The Verizon 46% figure covers this infostealer subset, not all breaches or all company devices. Verizon also flags an open question about bring your own device (BYOD) policies: “What we don’t know is if those organizations had a BYOD policy in place or if folks just logged in with whatever computer they had available.”

Common hardware asset management challenges

Most hardware asset management programs stall for four reasons: manual data entry, data stuck in silos, records that drift or go missing, and lean teams without a CMDB admin. EMA's ITAM in the Age of AI (2026) shows how common the first three are. All EMA respondents came from organizations with 1,000 or more employees, so smaller teams may see different patterns.

Manual data entry

Spreadsheets and hand entry can't keep pace with a growing device fleet. According to EMA (2026), 65.5% still populate the CMDB at least partly by hand.

Data stuck in silos

Mobile device management (MDM) tools, discovery scanners, and purchase records often describe the same laptop three ways. According to EMA (2026), integration is the most-cited gap in discovery and asset data, at 31.0%: data lives in silos and can't be reconciled into one source.

Records that drift or go missing

Devices move, break, and change hands faster than records get updated. In EMA (2026), accuracy follows integration as a gap at 27.1%, while coverage, or missing devices, ranks lower at 12.8%. Just 18.5% of respondents rate their IT service management (ITSM) and CMDB asset data at 95% accuracy or higher.

Lean teams without a CMDB admin

Without a dedicated configuration manager, CMDB upkeep falls to whoever has time. Hardware records loaded once then drift for months.

Hardware asset management best practices

Hardware asset management best practices follow one model: capture device data, clean it, and keep it accurate. The six practices below cover scope, automated capture, reconciliation, audits, warranty tracking, and disposal planning. Start with the practice that fixes your biggest gap, then add the rest.

1. Define scope and owners: Decide which device types you track and name an owner for each data source.
2. Automate capture: Use pre-built discovery integrations to pull records from Intune, Jamf, or Lansweeper instead of spreadsheets.
3. Reconcile before the CMDB: Set rules for which source wins on each field, and review conflicts before they overwrite good data.
4. Audit on a schedule: CIS Control 1 safeguard cadences say to “Review and update the inventory of all enterprise assets bi-annually, or more frequently.”
5. Track warranty and age: Flag devices nearing end of warranty or end of life so renewals don't surprise you.
6. Plan for reuse and recycling: Set sanitization and disposal steps well before devices retire.

CIS also says to address unauthorized assets on a weekly basis. Use that pace for devices that show up without an owner.

Hardware asset management trends for 2026

Three shifts are changing hardware asset management in 2026: AI is raising the bar for asset data, more devices live off the corporate network, and sustainability is moving into the device lifecycle. Each shift raises the cost of inaccurate hardware records.

AI raises the bar for asset data

Many organizations have adopted AI faster than they've prepared their asset data. According to EMA (2026), 71.9% report broad operational AI adoption or beyond, but 22.2% call their ITAM AI-ready. A person can chase down a missing answer, but an AI agent can't.

In the same EMA research, AI-ready organizations were more likely than optimized organizations to report 95%+ CMDB accuracy (55.6% versus 7.5%), though maturity tiers are self-reported.

More devices live off the network

Remote and hybrid work means laptops join the corporate network, leave, and come back. The CIS Controls v8 assessment specification notes that “portable end-user devices will periodically join a network and then disappear.” Track off-network devices through an MDM tool that sees them wherever they are.

Sustainability moves into the lifecycle

E-waste keeps growing. The UN Global E-waste Monitor 2024 counted 4.6 million metric tons of small IT and telecom e-waste worldwide in 2022. Across all e-waste types, 22.3% had documented collection and recycling that year.

The EPA cites a 2006 U.S. Geological Survey (USGS) estimate on laptop recycling. Per EPA electronics recycling guidance, recycling one million laptops saves energy equal to “the electricity used by more than 3,500 U.S. homes in a year.” The EPA also suggests upgrading hardware before buying new.

Choosing hardware asset management software

The right hardware asset management software depends on where your device data lives and who uses it. Compare HAM tools on six capabilities: multi-source import, discovery, reconciliation, dashboards, warranty tracking, and service desk integration.

How Xurrent ITAM fits

Xurrent ITAM is ITAM for service management. Xurrent ITAM runs inside Xurrent ITSM, so hardware asset data lives where agents and Sera AI already work. It follows three steps: capture assets, clean the data with reconciliation rules, and keep it accurate with Review dashboards.

1. Capture it: Import assets from the discovery and MDM tools you already use.
2. Clean it: Reconciliation rules check the data before it reaches the CMDB.
3. Keep it accurate: Review dashboards show where asset records are slipping.

Agentless Xurrent discovery is available as an add-on for finding devices other tools miss.

Xurrent ITAM starts with a CMDB you can trust and doesn't include procurement, disposal, or software license compliance workflows. Explore Xurrent's IT asset management software to see the details.

“We're very excited about Xurrent Discovery and the potential it brings,” said Chris Parsons, global IT service desk director at GKN Aerospace Services Limited. “Great service delivery runs on great data. Bringing richer discovery data directly into Xurrent will give us the insight to move faster, make smarter decisions and continuously improve how we deliver services across GKN.”

Conclusion

Hardware asset management gives an organization a reliable record of every device it owns, and that record supports cost control, security, and faster service. Start with scope and owners, automate capture, reconcile before data reaches the CMDB, and audit on a schedule.

Give your service desk something accurate to work with.