Most $10M to $30M companies have a partial list of their computers somewhere. IT keeps a spreadsheet. The MSP has a monitoring tool. Finance has purchase records. The three lists rarely match.
That gap causes problems during routine work and during an incident. Patch reports cover only the devices the tools can see. A laptop that never received the security agent also misses patches, encryption checks, and alerts. When something breaks, the team spends the first hours figuring out what exists before they can fix the problem.
Why inventories drift
Devices enter a company through several paths. A manager buys a laptop at a retail store during a hiring rush. A remote employee uses a personal computer for two weeks while waiting for a shipment, then keeps using it. A contractor brings a machine for a project and stays connected after the project ends.
Departures create drift in the other direction. A laptop sits in a former employee's closet. A server stays powered on in a back room after the application moved to the cloud. Old phones stay signed in to email because nobody removed the accounts.
Purchases made outside the normal process rarely get recorded. Each one adds a device that can access company files, email, and cloud applications without the standard controls in place.
What a usable inventory includes
A usable inventory records each device with enough detail to act on it. Record the device type and serial number, the assigned user, the location, the purchase date, and the warranty status. Add the operating system, the encryption status, and whether the security agent reports in each week.
Include the items companies often leave out. List servers, firewalls, switches, and printers. List tablets and phones that access company email. List shared workstations in warehouses, shops, and front offices. Shared machines carry the same file access as a named user's laptop, and they often stay signed in all day.
Link each device to a person who owns the follow-up. Ownership means someone confirms the device still exists, still needs access, and still runs supported software. A device with no owner should get reviewed first.
A one-week cleanup you can finish
Start with data you already have. Pull the device list from your security tool, your Microsoft 365 or Google Workspace admin console, and your MSP monitoring report. Pull purchase records for the last three years from accounting.
Combine the lists and sort by user. Duplicates will show up fast. So will gaps: users with email access and no managed device, serial numbers in purchasing with no security record, and devices reporting in under names nobody recognizes.
Work the gaps in a set order. First, confirm devices that access finance, HR, and customer data. Second, confirm remote laptops. Third, confirm shared and shop machines. For each gap, assign the device to a user, install the standard controls, or remove its access.
Walk the office once during the week. Check closets and server rooms. Equipment that nobody can explain needs a decision: assign it, retire it, or disconnect it.
Keep the list current with process, not effort
Add inventory steps to purchasing and onboarding. A new device gets recorded and configured before it goes to the user. The record gets created from the purchase order, so the serial number and warranty date come from source documents.
Add inventory steps to offboarding as well. When a person leaves, collect the devices on their record, remove accounts from phones and tablets, and update the assignment before the hardware goes to the next user.
Review the inventory every quarter. Compare the security tool count to the inventory count. Investigate any difference larger than a few devices. Check for operating systems that no longer receive updates, warranties that expired on critical hardware, and devices that stopped reporting in.
Bring the summary to leadership in plain numbers: total devices, devices with confirmed encryption, devices past support, and devices with no owner. Those four numbers show progress and point to the next purchase or cleanup task.
Accurate inventory supports every other control. Patching, encryption, backups, and insurance answers all depend on knowing which devices the company runs. One maintained list gives IT, your MSP, and leadership the same starting point for those decisions.
Not sure where your IT really stands? Start with a Clarity Audit: a focused assessment of your backups, security, vendors, and AI readiness. It's the first step in every engagement I take on.
About the author: Chris McGlasson is a fractional CIO and the founder of ClearStack Advisory, where he helps mid-market companies build AI governance, IT strategy, and technology roadmaps without the overhead of a full-time CIO. He previously built and sold LANPRO Systems, an IT services firm serving 350+ enterprise clients.