COBIT 2019 BAI09 — Asset Management is the ISACA governance practice that guides the control of the complete lifecycle of IT assets, from acquisition to disposal. In the ServiceNow context, this objective is directly materialized in CMDB, ITAM, and SAM: without a reliable asset register, no organization can sustain cost optimization, licensing compliance, or availability of critical services.
What is BAI09 in COBIT 2019?
BAI09 integrates the "Build, Acquire and Implement" domain of COBIT 2019. Its stated objective is to account for all IT assets and optimize the value delivered by their use. This includes managing assets throughout their lifecycle to ensure they remain operational, fit for purpose, accounted for, and physically protected—with particular attention to assets critical to serviceability.
The process also covers software licensing: ensuring that the number of licenses acquired, retained, and deployed is consistent with actual commercial use and that the installed environment is contractually compliant. This is precisely the territory where ITAM and SAM (Software Asset Management) operate in practice.
The five management practices of BAI09
COBIT 2019 details BAI09 in five management practices, each with a direct correspondence in ServiceNow capabilities:
| Practice | Description | Correspondence in ServiceNow |
|---|---|---|
| BAI09.01 — Identify and record current assets | Maintain an up-to-date and accurate record of all I&T assets, aligned with configuration and financial management. | CMDB + Discovery, with CI normalization and automatic reconciliation. |
| BAI09.02 — Manage critical assets | Identify critical assets for service capacity and maximize reliability and availability. | Service Mapping and CSDM, linking CIs to business services. |
| BAI09.03 — Manage the asset lifecycle | Controlling assets from acquisition to disposal, ensuring efficient use and physical and accounting protection. | Hardware Asset Management (HAM), with lifecycle states and auditing. |
| BAI09.04 — Optimize asset value | Periodically review the asset base to identify optimization opportunities. | Asset Management dashboards and utilization/idle reports. |
| BAI09.05 — Manage licenses | Maintaining the ideal number of software licenses in relation to actual business demand. | Software Asset Management (SAM Pro), with usage versus contract reconciliation. |
How does ServiceNow implement BAI09 in practice?
The application of BAI09 outside of a structured platform tends to be restricted to spreadsheets and manual processes, with low traceability. In ServiceNow, the operation follows three complementary layers:
- CMDB and Discovery They automate BAI09.01, capturing and updating the inventory of hardware, software, and configuration relationships without relying on manual data collection.
- CSDM (Common Service Data Model) It connects these assets to business services, directly supporting BAI09.02 — the organization then knows precisely which assets support which critical services.
- SAM Pro and HAM Pro They address BAI09.03, BAI09.04, and BAI09.05 in an integrated way: hardware lifecycle, utilization optimization, and licensing reconciliation in a single data model.
This integration is what differentiates a mature ITAM operation from static inventory control: BAI09 ceases to be an audit checklist and begins to feed continuous investment and decommissioning decisions. To understand how this data model is structured in practice, see our guide on [topic]. CSDM in ServiceNow.
Skills associated with BAI09
COBIT 2019 associates BAI09 with two core skills, relevant to governance and operations teams:
- Asset Management Group (ASMG): Lifecycle management of all managed assets — hardware, software, intellectual property, licenses, and warranties — including security, inventory, compliance, use, and disposal. The goal is to protect the corporate asset portfolio, optimize total cost of ownership, and capture investment opportunities.
- Installation/Deactivation of Systems (HSIN): Installation, testing, implementation, decommissioning, and removal of hardware and associated software, following agreed-upon plans and standards, with recording of results to keep configuration management data up-to-date.
Common errors in BAI09 implementation
Organizations that attempt to implement BAI09 without a proper technological foundation often repeat the same failure patterns:
- Treating asset inventory as a one-off project, without a mechanism for continuous updating — the record becomes obsolete in a few months.
- Separating hardware management from licensing management means losing sight of the total cost of ownership.
- Not linking assets to business services prevents prioritizing true criticality during incidents or changes.
- Acquiring ITAM tools without CMDB integration creates multiple conflicting sources of truth.
4MATT, as a ServiceNow Elite Partner in Brazil, structures the application of BAI09 based on the CMDB as a single source of truth, avoiding this fragmentation pattern and sustaining governance gains over time. This alignment integrates the broader approach of IT governance adopted by the company.
Conclusion
COBIT 2019 BAI09 provides the governance framework; ServiceNow provides the ongoing operational execution of that framework. Companies that connect the two layers—framework and platform—transform asset management from a periodic audit exercise into an ongoing process of value creation, risk reduction, and licensing compliance.