12 years. 4 office relocations. Zero major audit findings. The one thing that held was knowing the CMDB score before the auditor did — not after.
The three dimensions that actually matter before an audit:
Completeness — what percentage of active CIs have all mandatory fields populated. Most teams estimate 90%. The real number is usually closer to 60%.
Correctness — when did you last run a physical verification against the record. Discovery tools help but do not replace a periodic physical check, especially for decommissioned assets still showing as active. Ghost records are the most common audit finding.
Compliance — is the CMDB actually being used for change impact analysis or are engineers bypassing it and relying on tribal knowledge. If it is being bypassed the record has no operational value regardless of how accurate it is.
Curious what number other teams are actually sitting at. Anyone know their current Completeness score off the top of their head?
