AI system inventory work starts with an uncomfortable question nobody can answer: which AI tools are we actually using? This guide gives you the register that answers it — a field-by-field template, the five places shadow AI genuinely hides, seven discovery methods that surface tools nobody declared, a two-week sweep plan, a four-tier triage scale, and a clean mapping to ISO/IEC 42001, the NIST AI RMF and the EU AI Act.
Disabling an account is not offboarding. This guide walks the full sequence for a departing employee — revoking live sessions rather than just resetting the password, converting the mailbox to a licence-free shared mailbox, rescuing OneDrive before the deletion clock runs, reassigning ownerless Teams, reclaiming licences and add-ons, retiring devices in Intune, and keeping the compliance evidence that proves it all happened.
Licences get bought in a hurry, assigned to people who later leave, layered with add-ons that duplicate what the base plan already includes, and renewed automatically on a date nobody has in their diary. This guide sets out how to reconcile what you are billed for against what is assigned and what is genuinely used, where the waste consistently hides, the six-step process for running the audit, how to read the admin centre reports without misclassifying mobile-only and quarterly users, how to right-size plans without silently removing security controls, what the exercise typically saves a UK business, why renewal timing decides when you actually bank it, and the mistakes that turn a cost exercise into a security incident.
A complete joiners, movers and leavers process for UK businesses — from offer acceptance and day-one access through role changes, the first four hours after notice, forgotten SaaS logins and the audit evidence that proves it all ran.
A practical guide to physical data erasure, hardware asset decommissioning, NIST 800-88 sanitization, chain of custody, vendor controls, audit evidence, and compliance penalties.
A practical executive guide to rebuilding control over fragmented corporate and BYOD device fleets with unified endpoint management governance.
