How to perform audits on CMDB?

[Mihir YSSS]

I need to propose a solution to the customer on how to audit CMDB.

1. What are the different ways to audit CMDB?
2. What things we need to consider while auditing?
3. Are there any out of the box methods available to do auditing?
4. Are there any scripts available to perform auditing?

[Sid_Takali]

Hi @Mihir YSSS Have a look at this article https://www.servicenow.com/community/now-platform-articles/preparing-the-cmdb-for-an-audit/ta-p/2311... 

[Mihir YSSS]

That article is advertising GlideFast consulting company. Not really found any useful information in it. Documentation is of course a crucial step and everyone are aware of it. 

[Dr Atul G- LNG]

Hi @Mihir YSSS 

CMDB audit is one of biggest task, as CMDB is heart of every module. Here are my thoughts

1. What are the different ways to audit CMDB?

Atul: First you need need to make a plan for same, bcz CMDB can't be audited in 1 day. Who are involved/ users / stakeholder and how to track the finding or gaps. This will be in plan. OOTB you can use CMDB Compliance module

https://docs.servicenow.com/bundle/washingtondc-servicenow-platform/page/product/compliance/concept/...

1. What things we need to consider while auditing?

Atul: Highlight the classes which are commonly used and follow 3 C - Correctness , completeness and compliance. Create a report where cmdb is week in these 3 C.

1. Are there any out of the box methods available to do auditing?

Atul: Yes, mentioned above.

1. Are there any scripts available to perform auditing?

Atul: NO , as of now. You can user Data certification module for audit purpose , which will create task and team will verify the record.

Adding @AJ-TechTrek  for more inputs.

[Brian Bouchard]

@Mihir YSSS - Can you please give more info about what the audit requirements are?  Are you looking to verify everything that says it's in production is truly in production? Are you looking to verify specific attributes about certain CIs are valid?    Is the scope all CIs in the CMDB?  Specific CI Classes?  A subset of CIs in all classes?  specific classes?

Understanding what you need to audit, exactly, will help you get a more precise answer to question.