1. Acquisition Management Strong procurement controls via the Sourcing Team and documented vendor reviews
2. Asset Identification Managed through Xensam, with ongoing efforts to align catalogue and discovery
3. Compliance Management Robust internal audit processes and enforcement policies are in place
4. Communication & Education Identified as a foundational KPA; training and awareness are part of remediation
5. Disposal Management Mentioned in policy documents, but less detail on execution or metrics
6. Documentation Management Extensive documentation exists, including catalogues and usage standards
7. Financial Management Cost avoidance and savings tracked in optimisation projects (e.g., SQL, Adobe)
8. Legislation Management Policies reference legal compliance (e.g., HIPAA, SOX), but implementation detail is sparse
9. Policy Management Clearly defined and enforced through multiple policy documents
10. Program Management Centralised SAM governance with strategic alignment to IT goals
11. Project Management Evident in structured initiatives and optimisation projects
12. Vendor Management Active engagement with vendors like Microsoft, Adobe, Oracle, and Xensam