ID.AM-2

Software platforms and applications are inventoried

Identify · Asset Management

Semi-Automated

Compliance Score

65%

Partially Compliant

Documentation Maturity

3/ 5

Target: 2.5

Implementation Maturity

3/ 5

Target: 2.5

Control Description

The organization maintains an inventory of all software platforms, applications, and licenses in use across the organization.

Microsoft Graph API Endpoints Used

GET /deviceManagement/detectedAppsGET /deviceAppManagement/mobileApps

Required Permissions

DeviceManagementManagedDevices.Read.AllDeviceManagementApps.Read.All

Findings (1)

13/20 items compliant

Severity	Finding	Recommendation
medium	Improvement needed: Software platforms and applications are inventoried Current implementation does not fully meet the requirements of ID.AM-2.	Use Intune's discovered apps feature for managed devices. Maintain a register of all SaaS subscriptions and on-premises software. Review quarterly.

Severity

Finding

medium

Improvement needed: Software platforms and applications are inventoried

Current implementation does not fully meet the requirements of ID.AM-2.

Remediation Guidance

Use Intune's discovered apps feature for managed devices. Maintain a register of all SaaS subscriptions and on-premises software. Review quarterly.