Porto expanded SAM compliance with ServiceNow and 4MATT by integrating ITOM Discovery, ITAM, IRM, and Certificate Management into a single governance architecture — reducing manual scripts in 97%, automating 92% of on-premises server inventories, and bringing compliance from D+15 to D+1.
SAM compliance with ServiceNow in Porto: How an operation with over 5,000 servers, 300 licensing agreements, and 19,000 software installations migrated from manual controls to continuous governance with ServiceNow and 4MATT.
What was delivered
- Expansion of SAM compliance with ServiceNow via ITAM, ITOM Discovery, Integration Hub, IRM and Certificate Management
- Inventory automation, standardization and reconciliation of software and asset data.
- Executive and operational dashboards for monitoring compliance, Discovery health, and license usage.
- Elimination of manual scripts, spreadsheets, and parallel controls.
- A structured knowledge base with greater collaboration between IT and security.
Porto is one of Brazil's leading business groups, operating in insurance, healthcare, financial services, and other services. Its on-premises infrastructure operates on a significant scale: more than 5,000 servers, 360 networks, over 300 licensing agreements, more than 14,000 standardizations, and more than 19,000 software installations. In this environment, SAM compliance with ServiceNow has evolved from a one-off activity into a continuous governance capability.
The challenge
Porto needed to transform its software compliance into an automated, integrated, and data-driven operation—overcoming a reality of heavy reliance on manual controls, non-recurring inventories, and low operational predictability.
| Environment dimensions | Volume |
|---|---|
| Servers | +5 thousand |
| Networks | 360 |
| Licensing agreements | +300 |
| Standardizations | +14 thousand |
| Software installations | +19 thousand |
The four central challenges were: eliminating recurring manual work; overcoming non-recurring inventories with continuous monitoring; reducing the complexity of software and certificate management; and evolving from reactive actions to a more predictable and governed model.
Why did Porto choose ServiceNow and 4MATT?
The decision was structured based on benchmarks with large companies, a business case, SWOT analysis, technical, functional and business evaluation, as well as Proof of Concept with the main technologies. Four factors determined the choice:
| Decision factor | Value for the journey |
|---|---|
| Support for corporate disciplines | Alignment with methodologies, CMDB, and service management. |
| Automatically populated data | Discovery and integrations to reduce manual dependency. |
| Adaptability to manufacturers' rules | Support for the complexity of contracts, licensing, and content libraries. |
| Scalability and robustness | Capacity to support complex and evolving environments. |
SAM compliance with ServiceNow: the implemented solution
4MATT supported Porto on an integrated governance journey, connecting ITAM, ITOM Discovery, Integration Hub, IRM, and Certificate Management in a ServiceNow architecture focused on visibility, compliance, and continuous control. The project was executed in an environment without ITSM or CSM, reinforcing the platform's flexibility to directly address governance, discovery, and compliance capabilities.
The implementation followed a hybrid methodology with progressive value generation:
| Step | Approach |
|---|---|
| Planning | Workshops with teams directly and indirectly involved. |
| Discovery | Initial focus on operating systems, generating input for software compliance. |
| Accordance | Registration of contracts, standardization and reconciliation of discovered information. |
| Completion | Dashboards, license visibility, and Discovery health monitoring. |
Results achieved
Porto achieved measurable gains in automation, inventory, compliance, and governance — transforming a reactive operation into a continuous and scalable SAM compliance model with ServiceNow.
| Dimension | Result |
|---|---|
| Automation | 97% reduction of manually executed scripts |
| Inventory | 92% of automated on-premises server inventories |
| Agility | Data collection reduced from D+30 to D+1 |
| Accordance | Generation of compliance and reduced visibility from D+15 to D+1. |
| Governance | Continuous control, monitoring, standardization and reconciliation |
| Operational safety | Greater collaboration with security and evolution of the knowledge base. |
Key takeaways
The evolution of SAM compliance requires more than just technology. Success depends on a combination of reliable data, governance, integration between areas, and operational visibility. Practical lessons learned during our time at Porto included: structured network mapping; support for firewalls and clearances for Discovery; collaboration with the security team; improvement of scripts, registrations, and contracts; building a knowledge base; and creating dashboards for executive and operational monitoring.
Does your company still rely on manual controls for software, certificates, and digital assets? Speak with a 4MATT specialist Discover how to enhance SAM compliance with ServiceNow, automation, and governance in complex environments.
Are you already following 4MATT on LinkedIn? Follow us so you don’t miss new content about ITAM, SAM, and asset governance with ServiceNow.
Frequently Asked Questions
What is SAM compliance with ServiceNow?
SAM compliance with ServiceNow is the practice of using the ServiceNow platform to control, reconcile, and govern software assets, contracts, facilities, inventories, and risks associated with license usage in enterprise environments.
What problems does ServiceNow ITAM help solve in SAM?
ServiceNow ITAM helps reduce manual controls, increase visibility into assets and software, support normalization, reconcile discovered data, and structure indicators for licensing governance and compliance.
How does ITOM Discovery contribute to SAM compliance with ServiceNow?
ITOM Discovery automatically identifies assets and technical information in the environment, creating inputs for inventory, normalization, reconciliation, and software compliance analysis. This reduces reliance on manual data collection and improves data reliability for SAM.
Why integrate SAM, IRM, and Certificate Management into ServiceNow?
The integration between SAM, IRM, and Certificate Management in ServiceNow broadens the risk and governance perspective. It connects assets, software, contracts, digital certificates, and controls on a single platform, reducing operational exposure and improving traceability.
Does 4MATT implement ServiceNow for ITAM, SAM, and Discovery?
Yes. 4MATT is a ServiceNow Elite Partner in Brazil and works on projects involving ITAM, SAM, ITOM Discovery, CMDB, IRM, and Certificate Management for complex corporate environments. The Porto case demonstrates how SAM compliance with ServiceNow can be structured as a continuous governance capability.