Author: admin

  • From Spreadsheets to Automated Asset Tracking

    From Spreadsheets to Automated Asset Tracking

    The spreadsheet is the most common asset management tool in use today, and it is not hard to see why. It is free, familiar, and flexible enough to capture whatever columns you need. For an organisation with a handful of devices, a spreadsheet may be perfectly adequate. But beyond a certain scale – and that scale arrives sooner than most people expect – the spreadsheet becomes a liability. This article explains why, and how to migrate from manual tracking to an automated, API-driven approach without disrupting your operations.

    The Limitations of Spreadsheets

    Spreadsheets fail as asset management tools for predictable reasons. Understanding these limitations helps justify the migration and, more importantly, helps you avoid replicating them in your new system.

    ### Stale Data

    A spreadsheet reflects reality only at the moment it was last edited. The instant a laptop is reassigned, a virtual machine is created, or a user leaves the organisation, the spreadsheet is out of date. In practice, most spreadsheets are updated weekly at best, and often only monthly or quarterly. Between updates, the asset register is a historical document rather than a current view.

    ### Version Conflicts

    When multiple people maintain a shared spreadsheet – typically through a network drive or cloud storage – version conflicts are inevitable. Two people edit simultaneously, one overwrites the other’s changes, and the “save” dialogue resolves the conflict in favour of whoever clicked last. Version history helps recover lost data but does not prevent the disruption.

    ### No Audit Trail

    Spreadsheets do not natively record who changed what, or when. Some cloud spreadsheet platforms offer basic revision history, but it is coarse-grained and not designed for compliance evidence. For frameworks like ISO 27001 or SOC 2 that require demonstrable audit trails, this is a significant gap.

    ### No Reconciliation

    There is no automatic way to verify that a spreadsheet’s contents match reality. A device listed as “in use” might have been retired months ago. A user listed as holding a licence might have left the organisation. Detecting these discrepancies requires manual cross-referencing against source systems, which is time-consuming and itself error-prone.

    ### Scalability Ceiling

    Spreadsheets do not scale to hundreds or thousands of assets with multiple attributes each. Filtering, sorting, and reporting become slow, and the cognitive load of maintaining the file grows faster than the asset count.

    Preparing for Migration

    The move to automated tracking is not just a technology change; it is a process change. A successful migration starts with preparation.

    ### Inventory Your Data Sources

    Before choosing a tool, understand what data you already have access to. List every system that holds asset information: identity provider (Entra ID, Okta) for users, groups, and licence assignments; MDM (Intune, Jamf, Workspace ONE) for managed devices and enrolment state; EDR (Defender for Endpoint, CrowdStrike) for endpoint coverage and last check-in; cloud providers (AWS, Azure, GCP) for instances, storage, and network resources; procurement or finance for purchase records; and HR for joiner and leaver data.

    ### Define Your Asset Model

    Decide what attributes you need to track per asset. A practical starting set includes unique identifier (serial number, cloud instance ID, device ID), display name or hostname, owner or assigned user, type (laptop, server, cloud instance, virtual machine), location or cloud region, lifecycle state, operational state, and source system with last-seen timestamp. Resist the temptation to track every possible attribute at the start; you can add fields later.

    ### Choose Your Connectors

    Select which source systems to integrate first. A sensible approach is to start with the two or three sources that cover the majority of your estate. For most organisations, that means the identity provider and MDM, supplemented by cloud provider APIs if cloud infrastructure is significant.

    Phasing the Rollout

    A big-bang migration – connecting every source and switching off the spreadsheet in one step – is risky. A phased approach reduces risk and lets you build confidence in the new system.

    ### Phase 1: Establish the Baseline

    Connect one or two authoritative sources and let the system populate its initial asset inventory. Do not retire the spreadsheet yet. Run both in parallel and compare. This phase is about validating that the automated data is accurate and complete for the sources you have connected.

    ### Phase 2: Expand Coverage

    Add additional sources one at a time. After each addition, reconcile the new data against what you already have. You will likely discover duplicates – the same device appearing in both the MDM and EDR, for example – and the reconciliation process will teach you how to deduplicate and merge records confidently.

    ### Phase 3: Add Lifecycle and Compliance Features

    Once the inventory is stable and accurate, layer in lifecycle state tracking, alerting, and reporting. This is where the automated system starts delivering value beyond what the spreadsheet ever could: notifications when a device stops reporting, dashboards of non-compliant devices, audit-ready exports.

    ### Phase 4: Retire the Spreadsheet

    Only when the automated system has been running in parallel with the spreadsheet for a meaningful period – typically a month or two – and the data has been reconciled, should you retire the manual process. Keep the spreadsheet as an archive, but make the automated system the single source of truth for ongoing asset management.

    Maintaining Data Quality During Transition

    Migration introduces the risk of data quality issues at exactly the moment you need the data to be trustworthy. A few practices help:

    • Keep source attribution. Every asset record should note which system it came from and when it was last refreshed. This makes it easy to investigate discrepancies.
    • Reconcile, do not assume. When the new system and the spreadsheet disagree, investigate rather than assuming the new system is correct. Sometimes the spreadsheet captured context that the API does not, such as a device being temporarily loaned to a contractor.
    • Define ownership of the migration. One person should own the migration end to end, with the authority to make decisions about deduplication, attribute mapping, and cutover timing.
    • Document the new process. The spreadsheet worked because everyone knew where to find it and how to edit it. The automated system needs equally clear documentation: where the data comes from, how often it refreshes, and who to contact when something looks wrong.

    After Migration

    Once the migration is complete, the ongoing discipline changes. Instead of maintaining a file, the asset management function becomes one of monitoring, exception handling, and continuous improvement. The data updates itself; the job is to ensure the integrations stay healthy, the alerts are useful, and the reporting meets the needs of IT, finance, and compliance stakeholders.

    The spreadsheet served its purpose, but the scale and pace of modern IT estates demand a different approach. Moving to automated tracking is a meaningful investment of effort, but it pays back in accuracy, audit-readiness, and the time freed from manual data entry – time that is better spent acting on the data rather than maintaining it.

    What this looks like in practice

    Before (spreadsheet): Someone manually copies “Chromebook, serial #XYZ, assigned to Tom” from an email into a Google Sheet. By next week, Tom has left and nobody updates it. The sheet says he still has the laptop.

    After (AssetGraph): Gmail picks up “Chromebook shipped to Tom” automatically. Google Admin shows the device is enrolled. When Tom’s account is deactivated, AssetGraph flags the device for recovery. No manual updates, no stale data.

    Same with Microsoft 365: Outlook catches “Surface Pro assigned to Sarah”. Intune shows it’s enrolled. When Sarah leaves and her Entra ID account is removed, AssetGraph alerts IT to collect the device.

    The spreadsheet took an hour per week to maintain and was always wrong. AssetGraph takes zero minutes and is always current.

  • Cutting Software Costs Without Losing Tools

    Cutting Software Costs Without Losing Tools

    Software is one of the easiest places for a small business to waste money. Unlike hardware, it does not sit on a shelf gathering dust. It just quietly charges your card every month, and because no one person owns the software budget, no one notices.

    The good news is that the savings are straightforward to find. Here is how.

    Review Your Subscriptions

    Start by listing every software subscription your business pays for. The best sources are:

    • Your credit card statements from the last three months
    • Your Microsoft 365 or Google Workspace admin console
    • Receipts or invoices in your accounting software

    For each subscription, record the name, the monthly cost, and the number of seats or users you are paying for.

    Check Who Actually Logs In

    For each tool, check how many of your paid users have actually logged in during the last 30 to 60 days. Most SaaS tools have an admin panel that shows last login dates.

    If you are paying for 30 seats on a tool and only 18 people have logged in this month, the other 12 are candidates for removal.

    Cancel or Downgrade

    Once you know which seats are unused:

    • Remove users who have left the company. This is the most common source of wasted spend. When someone leaves, their licences should be reassigned or removed the same day.
    • Cancel unused seats. If you have 30 seats but only need 20, reduce your plan.
    • Downgrade plans where possible. Many tools offer tiered pricing. If most of your users only need basic features, move them to a lower tier.
    • Cancel tools nobody is using. If a subscription has had zero logins for three months, cancel it.

    A Worked Example

    Consider a 30-person company with the following unused licences:

    • Microsoft 365: 4 unused seats at £18 per user per month = £72 per month
    • Adobe Creative Cloud: 3 unused seats at £25 per user per month = £75 per month
    • Slack Pro: 6 unused seats at £6 per user per month = £36 per month
    • A project management tool nobody uses: 10 seats at £9 per user per month = £90 per month

    That is £273 per month, or £3,276 per year. None of these tools are being used by the people assigned to them.

    This is not an unusual scenario. Most small businesses have at least a few subscriptions in this state.

    Set Up a Regular Review

    Software costs creep up because no one checks them. To prevent this:

    • Review your software subscriptions every quarter.
    • Check login activity before renewing annual contracts.
    • Assign one person to be responsible for the software budget.
    • Remove licences the same day someone leaves the company.

    Practical Takeaways

    • List every subscription and what it costs.
    • Check login activity to find unused seats.
    • Remove licences for former employees immediately.
    • Downgrade or cancel where you can.
    • Review quarterly so costs do not creep back up.

    Software should support your business, not drain it. A few hours of review every quarter is enough to keep costs under control.

    What this looks like in practice

    Google Workspace: Gmail receives “Google Workspace renewal – 12 Business Standard seats, £145.20/month, renews 1st March”. AssetGraph flags 3 seats with no sign-in for 60 days. Cancel those before the 1st and save £36.30/month – £435.60/year.

    Microsoft 365: Outlook receives “Microsoft 365 invoice – 25 Business Premium seats, £438.75/month”. AssetGraph flags 6 seats with zero activity. Downgrade or cancel and save up to £105.30/month – £1,263.60/year.

    Total identified savings: £141.60/month or £1,699.20/year – from reading emails you already receive.