Free Checklist Templates for Systems Administration

Systems Administration

OR

Access Control Checklist

User Account Lifecycle

Sync the IdP with the HR system of record

Enforce password policy and block legacy auth

Review pending account provisioning requests

Disable departing users on the scheduled date

Privileged Access and Permissions

Document RBAC roles per critical system

Audit Domain Admin and Tier 0 membership

Rotate service account credentials

Validate just-in-time elevation through PAM

Authentication and MFA

Enforce MFA via Conditional Access policies

Configure session timeouts and revoke stale sessions

Patch IdP agents and MFA endpoints

Test the break-glass account quarterly

Policy and Documentation

Update the access control policy document

Train staff on access control procedures

Enforce ZTNA controls for remote access

Access Review and Incident Response

Run the quarterly user access review

Remediate orphan accounts and stale entitlements

Investigate access control incidents this quarter

Apply corrective actions from incident findings

Update the IR runbook with lessons learned

View Workflow Use Workflow

Application Performance Monitoring Checklist

Infrastructure Monitoring Coverage

Audit monitoring agent coverage across hosts

Verify CPU and memory baselines on critical hosts

Review disk space and IOPS on database servers

Check network latency between sites and cloud regions

Validate SNMP and syslog ingestion into the SIEM

Application Metrics Collection

Verify APM tracing on critical services

Review p95 and p99 endpoint response times

Audit application error rates by service

Inspect slow database queries and lock contention

Confirm third-party API monitoring is healthy

User Experience Monitoring

Verify RUM coverage on production front-end

Review Core Web Vitals against thresholds

Check synthetic monitor pass rate

Sample session replays for friction signals

Alerting and Notifications

Audit alert thresholds against current baselines

Update stale thresholds in the monitoring tool

Verify PagerDuty rotation and override coverage

Test alert delivery to email, SMS, and Slack

Review alert fatigue and noisy-rule list

Reporting and Dashboards

Refresh the executive performance dashboard

Compile the weekly performance report

Distribute the report to stakeholders

Performance Optimization Review

Identify the week's top performance bottleneck

Open a remediation ticket with the service owner

Schedule a load test against the staging environment

Sign off on the weekly APM review

View Workflow Use Workflow

Backup and Restore Checklist

Pre-Backup Preparation

Confirm RPO and RTO targets

Reconcile the protected-systems inventory

Check backup repository capacity

Validate immutability and air-gap configuration

Notify stakeholders of the maintenance window

Backup Execution

Trigger or verify the scheduled backup job

Monitor job progress for errors

Confirm SaaS backup coverage (M365, Google Workspace)

Capture job completion status

Confirm offsite replication completion

Failure Triage

Open a P2 ticket and identify the failed objects

Remediate and rerun the failed job

Restore Verification Drill

Select the restore test scope

Restore into the isolated recovery network

Validate restored data integrity

Tear down the recovery environment

Documentation and Reporting

Update IT Glue or Hudu documentation

File the SOC 2 / HIPAA evidence artifact

Sign off on the cycle

View Workflow Use Workflow

Business Continuity Plan Checklist

Business Impact Analysis

Refresh the critical systems inventory

Set RTO and RPO per Tier 0 system

Map upstream and downstream dependencies

Identify single points of failure

Backup and Recovery Posture

Verify 3-2-1 with an immutable copy

Open a remediation ticket for immutability gaps

Review backup job success rates over 90 days

Validate offsite replication lag

DR Test Execution

Schedule the isolated restore drill

Restore a Tier 0 system end-to-end

Record the actual recovery time and data loss

File a P1 remediation plan for missed RTO

Incident Response Readiness

Update the on-call rotation in PagerDuty

Refresh the incident commander runbook

Verify the break-glass account works

Run a tabletop exercise with the IR team

Alternate Site and Workforce Continuity

Confirm VPN and ZTNA capacity for full remote

Validate the alternate communication channel

Review vendor and SaaS escalation contacts

Plan Sign-Off and Maintenance

Capture lessons learned from the drill

Schedule the next quarterly restore drill

Director of IT signs off on the BCP

View Workflow Use Workflow

Capacity Planning Checklist

Current Resource Assessment

Pull asset inventory from RMM and CMDB

Pull 90-day utilization from monitoring

Identify saturated and underutilized hosts

Review SAN and backup repository headroom

Document the current-state baseline

Forecasting Future Demand

Trend 12-month growth from historical metrics

Interview business units on upcoming initiatives

Flag pending platform or vendor changes

Build best, expected, and worst-case scenarios

Capacity Plan and Thresholds

Draft the quarterly capacity plan

Set scaling thresholds in the monitoring platform

Plan expansion procurement and lead times

Document scale-up and scale-down runbooks

Risk and Continuity

Verify RPO and RTO against current capacity

Confirm 3-2-1 immutable backup posture

Review license true-up exposure

Schedule the next DR failover drill

Approval and Communication

Present the plan at CAB and capture decision

Revise the plan per CAB feedback

Publish the plan to the documentation system

Brief stakeholders and the helpdesk team

View Workflow Use Workflow

Change Management Checklist

Change Request Initiation

Open the RFC in the ITSM tool

Classify the change type

Capture scope, systems, and business justification

Assign the change owner and implementer

Risk Assessment and Planning

Score impact and likelihood on the risk matrix

Document the implementation runbook

Write the rollback and backout plan

Verify the maintenance window respects freezes

Run a test-ring deployment for patches

Approval and CAB Review

Submit the RFC to the CAB queue

Present the change at CAB

Address CAB conditions before scheduling

Notify affected users and downstream teams

Implementation Window

Take the pre-change snapshot or backup

Open a war-room bridge for high-risk changes

Execute the runbook step by step

Run validation checks against acceptance criteria

Execute the rollback plan

Post-Implementation Review

Monitor the affected services for 24 hours

Collect feedback from the service desk

Run the post-implementation review meeting

Update the CMDB and documentation

Close the RFC with evidence attached

View Workflow Use Workflow

Cloud Cost Management Checklist

Resource Inventory and Tagging

Pull the current resource inventory per account

Audit tag coverage against the tagging policy

Remediate untagged or mistagged resources

Flag orphaned resources for owner confirmation

Update the resource inventory of record

Cost Allocation and Budgeting

Reconcile cost-allocation tags to cost centers

Compare budget versus actual per cost center

Investigate budget overruns with the owner

Refresh the showback report for finance

Adjust next-period budgets from trend

Resource Optimization

Review right-sizing recommendations

Decommission idle compute flagged 14+ days

Audit storage class assignments

Review commitment utilization and coverage

Adjust commitments based on the forecast

Tune auto-scaling on stateless workloads

Cost Monitoring and Reporting

Verify billing export pipelines

Triage cost anomaly alerts from the period

Investigate anomalies with the owning team

Refresh the executive cost dashboard

Distribute the monthly cost report

Vendor Management and Negotiation

Review upcoming EDP and EA renewal dates

Benchmark current pricing against published rates

Compile usage data for the QBR

Pursue private pricing or discount programs

Archive negotiated terms in the contract repository

View Workflow Use Workflow

Cloud Deployment Checklist

Pre-Deployment Planning

Define scope, region, and workload owner

Confirm CAB approval and change window

Build the deployment runbook and rollback plan

Inventory dependencies and IaC modules

Confirm budget and committed-use reservations

Security and Compliance

Classify the workload's data sensitivity

Run a threat model against the architecture

Configure IAM roles with least-privilege boundaries

Enable encryption at rest and TLS in transit

Wire activity logs into the SIEM

Schedule penetration test before go-live

Infrastructure Setup

Provision the landing zone via Terraform

Configure VPC, subnets, and route tables

Deploy load balancers and auto-scaling groups

Apply security groups and WAF rules

Validate DNS records and TLS certificates

Application Deployment

Tag the release artifact and freeze dependencies

Run the CI/CD pipeline to staging

Execute smoke and load tests in staging

File a remediation ticket for failed staging tests

Promote the release to production

Execute the rollback playbook

Post-Deployment Management

Confirm monitoring alerts and dashboards

Validate auto-scaling and failover behavior

Run a backup and restore drill

Right-size resources from one-week telemetry

Hold the post-deployment review

View Workflow Use Workflow

Cloud Migration Checklist

Discovery and Assessment

Inventory servers, VMs, and dependencies

Classify workloads by migration strategy

Map compliance and data-residency requirements

Build the TCO model

Landing Zone and Network Design

Provision the landing zone and account structure

Design VPC, subnets, and connectivity

Configure identity federation and SSO

Codify infrastructure with Terraform or Bicep

Pilot and Cutover Preparation

Run a pilot migration of a non-critical workload

Verify backups and snapshot baseline

Document the rollback plan

Submit the change request to CAB

Train operations staff on the target platform

Cutover Execution

Replicate data to the target environment

Execute the cutover during the change window

Validate application functionality and data integrity

Execute rollback if validation fails

Post-Migration Operations

Right-size instances and apply savings plans

Enable cloud-native monitoring and alerting

Apply security baselines and run a vulnerability scan

Decommission on-premises systems

Hold the post-migration review

View Workflow Use Workflow

Cloud Monitoring Checklist

Infrastructure Monitoring

Audit CloudWatch and Datadog agent coverage

Tune CPU, memory, and disk thresholds

Review network latency and packet loss

Verify uptime SLOs across critical services

Test alert routing to PagerDuty

Repair broken alert routing keys

Application Performance

Review APM response times and throughput

Triage open Sentry error groups

Map application dependency health

Audit Core Web Vitals on customer-facing apps

Flag slow database queries for optimization

Security and Compliance

Review SIEM alerts for anomalous logins

Investigate unauthorized access attempts

Activate the incident response playbook

Reconcile patching against CVE advisories

Verify SOC 2 evidence collection is current

Review CloudTrail logs for privileged actions

Cost Management

Review FinOps dashboard for cost anomalies

Validate budget alert thresholds

Identify underutilized EC2 and RDS instances

Schedule a rightsizing change request

Reconcile monthly billing against forecast

Backup and Recovery

Verify backup job success in Veeam and AWS Backup

Confirm immutable and air-gapped copies exist

Run a restore drill into an isolated VPC

File a remediation ticket for the failed restore

Update RPO and RTO targets per service tier

View Workflow Use Workflow

Cloud Security Checklist

Identity and Access Management

Verify MFA enforcement on all human accounts

Block legacy authentication protocols

Audit privileged role assignments

Review SCIM provisioning and federation health

Disable stale and orphaned accounts

Data Protection and Encryption

Verify encryption at rest across storage services

Confirm TLS 1.2+ on all public endpoints

Test backup restoration into an isolated account

File a remediation plan for restore failure

Audit DLP rules for sensitive data classes

Network and Perimeter Security

Audit security groups for 0.0.0.0/0 ingress

Validate VPC and subnet segmentation

Patch network appliances and gateway services

Review WAF rule effectiveness

Tune IDS/IPS alerts in the SIEM

Logging, Monitoring, and Incident Response

Verify CloudTrail and audit log coverage

Run a tabletop exercise on a cloud breach scenario

Open remediation tickets for tabletop gaps

Confirm on-call rotation and escalation paths

Compliance and Governance Review

Map controls to active compliance frameworks

Review CSPM findings against risk thresholds

Reconcile SaaS and cloud licenses

Sign off on the quarterly review

View Workflow Use Workflow

Compliance Audit Checklist

Audit Scoping & Kickoff

Confirm the in-scope frameworks for this audit

Identify the in-scope systems and data stores

Notify control owners of evidence requests

Access Control Review

Export the active user roster from Entra ID

Verify MFA enforcement and block legacy auth

Run the quarterly user access review

Audit privileged and service accounts

Confirm offboarding ran clean for departures this period

Remediate access control findings

Data Protection & Backup

Confirm encryption at rest on endpoints and servers

Verify TLS configuration on external services

Run the quarterly restore drill

Confirm immutable / air-gapped backup copy

Review DLP alerts and data retention enforcement

Network Security & Vulnerability Management

Review firewall rule base for stale entries

Run authenticated vulnerability scan

Confirm patch compliance across the fleet

Validate network segmentation between zones

Review SIEM coverage and alert tuning

Incident Response Readiness

Confirm IR plan reflects current tooling and contacts

Run a tabletop exercise against a relevant scenario

Review incident tickets from the audit period

Verify breach notification timelines are documented

Policy & Awareness

Confirm policy set is current and approved

Verify security awareness training completion

Review vendor risk and SOC reports on file

Findings & Sign-Off

Compile findings register with severity and owner

Determine whether remediation extends past audit window

Escalate open findings to leadership for sign-off

Sign off on the audit readiness package

View Workflow Use Workflow

Containerization Rollout Checklist

Runtime and Registry Setup

Confirm host kernel and OS support

Install the container runtime

Harden the runtime daemon configuration

Connect to the container registry

Run a smoke-test container

Image Security and Compliance

Scan base images for CVEs

Document the CVE exception

Enable image signing and verification

Apply RBAC for cluster operations

Define network policies between namespaces

Forward container logs to the SIEM

Resource Governance

Set CPU and memory requests and limits

Configure horizontal pod autoscaling

Enforce namespace ResourceQuotas

Wire Prometheus and Grafana dashboards

Trim image size with multi-stage builds

Persistent Storage and Backup

Provision storage classes via the CSI driver

Confirm backups follow 3-2-1 with immutability

Remediate the backup gap

Mount secrets via a Secrets Store CSI driver

Enable encryption at rest for etcd and PVs

Run a quarterly restore drill

View Workflow Use Workflow

Customer Support Ticket Workflow

Ticket Intake and Triage

Verify the caller against the PSA contact record

Capture scope and affected assets

Set priority against the SLA matrix

Check the NOC dashboard for active incidents

Open the ticket with asset linkage

Diagnosis and Investigation

Reproduce the issue on the affected endpoint

Pull recent change history from the RMM

Review EDR and Defender alerts for the device

Search IT Glue for the client-specific runbook

Decide whether to escalate to Tier 2

Resolution

Hand off to Tier 2 with diagnostic notes

Apply the fix via remote session

Verify the fix with the end user

Confirm no regression in monitoring

Document the resolution in the PSA ticket

Closure and Follow-Up

Send the resolution summary to the requester

Reopen and reassign for further diagnosis

Send the CSAT survey

Reconcile time entries against the SLA

Update IT Glue with new findings

Close the ticket with sign-off

View Workflow Use Workflow

Database Backup Checklist

Pre-Backup Preparations

Confirm free space on the backup target

Verify the database is in a consistent state

Notify stakeholders of the backup window

Check for conflicting maintenance jobs

Review backup scripts and retention policy

Backup Execution

Initiate the backup job

Monitor throughput and error counters

Confirm transaction logs are captured

Verify files landed at the expected target

Record run timing and outcome

Post-Backup Verification

Run the tool's integrity check on the backup set

Perform a test restore into the isolated lab

Open an incident ticket for the failed restore

Review backup logs for warnings

Update the backup register and DR runbook

Notify stakeholders the backup is verified

View Workflow Use Workflow

Database Installation Checklist

Pre-Installation Preparation

Confirm DBMS version against vendor support matrix

Validate sizing against vendor capacity guide

Provision separate volumes for data, logs, and tempdb

Open firewall ports for the listener and replication

Submit the RFC to the change advisory board

Snapshot any existing instance before cutover

Software Installation

Download the installer from the vendor portal

Verify the SHA-256 checksum against the vendor advisory

Run the installer under a dedicated service account

Select edition and features per license entitlement

Apply the latest cumulative update or patch bundle

Post-Installation Configuration

Configure memory, parallelism, and tempdb settings

Create role-based logins from AD security groups

Schedule full, differential, and log backups

Set retention and immutable copy in the backup target

Document the build sheet in IT Glue or Hudu

Security Hardening

Rename or disable the default sa account

Restrict listener access to required subnets

Enable TDE or column-level encryption at rest

Log the encryption exception with the security officer

Forward audit logs to the SIEM

Run a Nessus or Qualys scan on the host

Remediate the critical findings before go-live

Operational Verification

Run smoke-test queries against the new instance

Connect from a client application as a test user

Restore the most recent backup to a sandbox

Escalate the restore failure to vendor support

Confirm SIEM is receiving the audit feed

Sign off the database go-live with operations

View Workflow Use Workflow

Database Migration Checklist

Pre-Migration Discovery

Inventory source database version and edition

Map upstream and downstream dependencies

Confirm regulatory scope for the dataset

Define RPO and RTO with the application owner

Select cutover strategy

Target Infrastructure Build

Provision target instance per sizing baseline

Configure VPC, subnets, and security groups

Enable encryption at rest and TLS in transit

Configure backups and point-in-time recovery

Wire up monitoring and alerting

Backup and Restore Drill

Take a verified full backup of source

Restore the backup into an isolated environment

Confirm row counts and checksums match source

Document the rollback procedure

Cutover Execution

Submit the change request to CAB

Notify stakeholders 72 hours before cutover

Stop writes and drain connections on source

Run final delta sync to target

Repoint application connection strings

Confirm cutover health and decide go / no-go

Rollback Path

Repoint application back to source

Capture forensic state of failed target

Schedule post-mortem and reschedule cutover

Post-Cutover Verification

Reconcile row counts and key checksums

Verify application end-to-end functionality

Compare query performance against baseline

Decommission source after retention window

Sign off the migration record

View Workflow Use Workflow

Database Security Checklist

Scope and Instance Inventory

Inventory all production database instances

Classify each database by sensitivity tier

Confirm DBA and business owner per instance

Access Control and Authentication

Audit privileged accounts in the PAM vault

Verify MFA enforcement on DBA jump hosts

Reconcile RBAC roles against the HR roster

Rotate service account passwords past SLA

Disable shared sa and SYSDBA logins

Remediate access exceptions with manager approval

Encryption and Key Management

Confirm TDE enabled on Tier 1 instances

Verify TLS 1.2+ on database listeners

Rotate column-level encryption keys per policy

Validate KMS key policies and grants

Configuration Hardening and Patching

Run CIS Benchmark scan on each instance

Apply the latest vendor CPU and security patches

Disable xp_cmdshell and risky stored procedures

Restrict listener access via firewall and VPC ACLs

Remove sample schemas and demo accounts

Monitoring, Logging, and Audit

Confirm database audit logs forward to SIEM

Tune alerts for failed-login bursts

Review audit logs for unauthorized DDL

Validate DAM rules against the threat model

Schedule penetration test of the database tier

Backup, Recovery, and DR

Verify nightly backups completed and checksummed

Confirm an immutable offsite copy in a separate account

Run the quarterly restore drill into an isolated environment

Document RPO and RTO results from the drill

Open a P1 incident for the failed restore drill

Quarterly Review Sign-Off

Sign off on the quarterly database security review

View Workflow Use Workflow

Data Recovery Checklist

Backup Job Verification

Confirm backup scope against the asset inventory

Review last 7 days of backup job logs

Open a ticket for failed or warning jobs

Verify the offsite and immutable copy

Check encryption keys and recovery credentials

Restore Plan and Scope

Select the restore scenario for this drill

Identify the recovery point to restore from

Stand up an isolated recovery network

Confirm dependencies are available in the sandbox

Execute the Restore

Start the restore and capture the start timestamp

Monitor restore progress against the RTO

Record the restore completion time

Post-Restoration Validation

Boot the restored system and verify services start

Run an application-level smoke test

Open a remediation ticket for the failed restore

Verify ACLs and group memberships on restored data

Tear down the sandbox and reclaim resources

Drill Reporting and Sign-Off

Update the runbook with lessons learned

Sign off on the drill report

View Workflow Use Workflow

Disaster Recovery Plan Checklist

Preparation and Planning

Inventory tier-1 systems with RTO and RPO

Confirm the DR team roster and on-call rotation

Refresh the out-of-band communication tree

Update the business impact analysis

Verify vendor support contracts and escalation SLAs

Backup and Recovery Verification

Verify nightly backup jobs in the backup console

Confirm 3-2-1 with an immutable offsite copy

Run a restore drill into an isolated VLAN

Open a P1 with the backup vendor

Reconcile hardware, software, and license inventory

Emergency Response Readiness

Distribute the emergency response card to staff

Test the out-of-band communication channel

Run a ransomware tabletop exercise

Schedule remediation training for tabletop gaps

Confirm coordination with local emergency services

Business Continuity

Document failover procedures for tier-1 apps

Load-test remote access via VPN and ZTNA

Validate alternate-site readiness and connectivity

Distribute the stakeholder status template

Hold the quarterly DR review with the vCIO

Post-Incident Recovery

Classify the incident severity and document scope

Activate full DR site failover

Prioritize recovery work by RTO tier

Send recovery status updates on the cadence

Capture lessons learned and update the runbook

View Workflow Use Workflow

Employee Onboarding Checklist

Pre-Day-1 Provisioning Intake

Confirm role and start date with HR

Capture work location and shipping address

Reserve username per naming standard

Identity and Account Setup

Create Entra ID account in target OU

Assign role-based security groups

Enroll MFA with FIDO2 or Authenticator

Enroll in PAM with JIT elevation

Endpoint and Hardware Deployment

Image laptop via Autopilot or JAMF zero-touch

Archive BitLocker or FileVault recovery key

Enroll device in Intune or JAMF MDM

Ship laptop to remote home address

Application and Access Provisioning

Provision SSO app assignments via SCIM

Configure VPN or ZTNA access profile

Grant shared-drive permissions per RBAC matrix

Enroll new hire in password manager vault

Security Training and Acceptable Use

Assign KnowBe4 cybersecurity awareness module

Capture signed acceptable use policy

Walk through phishing-report and incident playbook

Day-1 Orientation and IT Sign-Off

Verify login and MFA on Day 1

Introduce helpdesk and on-call escalation paths

Complete IT provisioning sign-off

View Workflow Use Workflow

Employee Training Checklist

Onboarding and Account Provisioning

Confirm role tier and access scope

Provision Entra ID account and group memberships

Enroll the laptop in Intune or JAMF

Walk through the M365 and Teams workspace

Complete I-9, W-4, and HR paperwork

Security Awareness Training

Review the acceptable use and data handling policy

Complete KnowBe4 phishing baseline assessment

Enroll FIDO2 key and Authenticator app

Set up the Keeper or Bitwarden vault

Brief on incident reporting and the SOC escalation path

Technical Skills Development

Shadow a senior tech on ticket triage

Walk through the RMM agent and remote support tools

Complete the network troubleshooting lab

Run a backup restore drill in the lab

Walk through the change management process

Compliance and Legal Training

Review applicable client compliance frameworks

Complete HIPAA training module

Review software licensing and asset management duties

Brief on the quarterly access review process

Helpdesk and Customer Support Readiness

Review the SLA matrix and ticket priorities

Practice ticket documentation in IT Glue or Hudu

Run mock calls for common end-user scenarios

Walk through the on-call escalation playbook

Sign off on 30-day onboarding review

View Workflow Use Workflow

Firewall Configuration Checklist

Initial Setup and Hardening

Confirm the firewall's role and topology placement

Update firmware to a vendor-supported release

Rotate default admin credentials

Harden the management plane

Export the baseline configuration backup

Access Control Policies

Define the inbound and outbound rule base

Restrict administrative access by source IP

Enable rule-hit logging on every policy

Apply least privilege to service accounts

Remove unused legacy rules

Network Segmentation

Define security zones by trust level

Map VLANs to firewall interfaces

Enforce inter-zone policies for east-west traffic

Verify segmentation against the PCI scope boundary

Monitoring and Logging

Enable traffic and threat logging

Forward syslog to the SIEM

Configure alerts for threat thresholds

Set log retention to the compliance baseline

Maintenance and Change Management

Test proposed changes in the lab firewall

Remediate lab findings before resubmitting

Submit the RFC to the change advisory board

Apply the change in the maintenance window

Validate post-change traffic flows

Roll back to the last known good config

Document the change in the runbook

View Workflow Use Workflow

Hardware Disposal Checklist

Intake and Chain of Custody

Pull the asset record from the CMDB

Classify the data sensitivity of the device

Verify the device is offboarded in identity systems

Log the device into the disposal queue

Data Sanitization

Capture any user data still needed

Identify the drive type and sanitization method

Run cryptographic or secure erase on the drive

Physically destroy the storage media

Verify sanitization with a second technician

Hardware Decommissioning

Remove asset tags and company identifiers

Inspect for hidden storage and removable media

Reconcile components against the CMDB record

Update the disposition record in the CMDB

Certified Disposal and Documentation

Confirm the recycler holds R2v3 or e-Stewards certification

Check state e-waste regulations for the device class

Schedule pickup with sealed-container handoff

File the certificate of destruction or recycling

Close the disposal record with final sign-off

View Workflow Use Workflow

Hardware Inventory Checklist

Scope and Preparation

Define the asset classes in scope

Confirm the asset attribute schema

Pull the prior audit baseline

Identify all sites and storage locations

Automated Discovery

Export the RMM agent roster

Export the Intune and JAMF device list

Run a network discovery scan

Pull the vCenter and Hyper-V VM inventory

Reconcile discovery sources into a master list

Physical Audit

Walk the data center and label each rack unit

Verify asset tags on each device

Inventory the spare-parts and staging closet

Confirm remote-worker laptop attestations

Reconciliation and Exceptions

Cross-reference against purchase and lease records

Flag end-of-life and out-of-warranty devices

Determine whether discrepancies were found

Investigate missing or unauthorized devices

CMDB Update and Sign-Off

Apply corrections to the CMDB

Tag decommissioned hardware for disposal

Publish the audit report and obtain sign-off

View Workflow Use Workflow

←
1
2
3
→

Ready to take control of your recurring tasks?

Start Free 14-Day Trial

Use Slack? Sign up with one click

With Slack

Company

About
Product Roadmap
API Reference
Privacy Policy
Terms
Contact Us
Blog

Resources

Help
Getting Started Guides
Video Center
Demos
Your Account
Use Cases
Pricing

©Manifestly 2026

When you visit or interact with our sites, services or tools, we or our authorised service providers may use cookies for storing information to help provide you with a better, faster and safer experience and for marketing purposes.