Using ServiceNow capabilities, the first one that comes to mind would be Software Asset Management Professional, as this will allow the Software Models to be normalized. Monitoring the normalization status is something that your SAM stakeholders will be doing on an ongoing basis, so any new software that is not normalized or is partially normalized will come up and raise a flag from that perspective. From there, certain software models can be flagged as unauthorized, blacklisted, and even automatically uninstalled if you set it up to do that. But beyond that there are additional features that can come into play in determining what to do with these models. For example:
- Does the model have a product owner? If you standardize on assigning product owners, then models without an owner should can require additional review.
- Does the model have internal lifecycle stages assigned? If you assign internal lifecycle stages for your authorized software, then the lack of these defined lifecycle stages will similarly suggest the need for review.
There are more ways to address this, these are just some of the methods worth taking a look at.
The opinions expressed here are the opinions of the author, and are not endorsed by ServiceNow or any other employer, company, or entity.
