What is ISO/IEC 19770?

ISO/IEC 19770 is an international standard for Software Asset Management. It can be used for executable and non-executable software. This includes the following types of software assets:

• Software use rights
• Software for use
• Media holding copies of software for use

This standard aligns closely with ISO/IEC 20000. 

ISO/IEC 19770 consists of two documents:

• ISO/IEC 19770-1: Processes
• ISO/IEC 19770-2: Specification for SAM Data (currently in progress)

These documents can be purchased from the http://www.iso.org/.

ISO/IEC 19770 describes 27 processes that map to processes in PRM-IT (Process Reference Model for IT). This mapping is shown below.

Process Mapping

Organizational Management Processes for SAM

Control Environment for SAM

ISO/IEC 19770 process	PRM-IT Process/Activity
Corporate Governance Process for SAM	IT Governance and Management System Operation
Roles and Responsibilities for SAM	Establish Asset Management Framework
Policies, Processes and Procedures for SAM	Establish Asset Management Framework
Competence in SAM	Workforce Management

Planning and Implementation Processes for SAM

ISO/IEC 19770 process	PRM-IT Process/Activity
Planning for SAM	Establish Asset Management Framework
Implementation of SAM	Establish Asset Management Framework
Monitoring and Review of SAM	Evaluate Asset Management Performance Monitor Audit and Reconcile Asset Records
Control and Improvement of SAM	Evaluate Asset Management Performance

Core SAM Processes

Inventory Processes for SAM

ISO/IEC 19770 process	PRM-IT Process
Software Asset Identification	Establish Asset Management Framework
Software Asset Inventory Management	Control Asset Information
Software Asset Control	Ready and Control Asset

Verification and Compliance Processes for SAM

ISO/IEC 19770 process	PRM-IT Process
Software Asset Record Verification	Monitor Audit and Reconcile Asset Records
Software Licensing Compliance	Ready and Control Asset Monitor Audit and Reconcile Asset Records Report Asset Information
Software Asset Security Compliance	Monitor Audit and Reconcile Asset Records Plan and Implement Security Practices Monitor, Assess, Audit and Report Security
Conformance Verification for SAM	Evaluate Asset Management Performance

Operations Management Processes and Interfaces for SAM

ISO/IEC 19770 process	PRM-IT Process
Relationship and Contract Management for SAM	Supplier Management Service Pricing and Contract Administration
Financial Management for SAM	Financial Management
Service Level Management for SAM	Service Level Management
Security Management for SAM	Security Management

Primary Process Interfaces for SAM

Life Cycle Process Interfaces for SAM

ISO/IEC 19770 process	PRM-IT Process/Activity
Change Management Process	Change Management
Software Development Process	Solution Requirements Solution Analysis and Design Solution Development and Integration Solution Test Solution Acceptance
Software Deployment Process	Release Management
Problem Management Process	Problem Management
Acquisition Process	Supplier Management
Software Release Management Process	Solution Acceptance
Incident Management Process	Incident Management
Retirement Process	Retire and Dispose of Asset