PART 1 OF A SERIES ON MID-MARKET IT ASSET MANAGEMENT
Nobody was driving. The meter was running.
I. The room
The room always looks the same. Different city, different industry, different decade, the same room. A screen open somewhere. A request hanging in the air. And a silence; a particular, room-temperature silence that arrives before anyone speaks and tells you, with complete precision, everything you need to know.
I have sat in that room as an auditor. As a public accountant. As an IT director. As a COO. Four seats, same silence. What differs, across fifteen years and more engagements than I care to number, is only what the silence costs.
The first time I truly understood its price, I was the engagement manager on a routine audit. Tech company, a hundred people, real revenue, a product with customers, a team deep in the consuming, disciplined work of building software.
When my team asked for the fixed asset register, or at minimum access to the PPE module in their accounting system, what came back after considerable pressing was a folder of purchase receipts. Not a register. Receipts. The implicit request was remarkable: here is our evidence of acquisition; kindly construct our financial history for us.
We did. We were good at our jobs.
The more important discovery came earlier, not in the audit, but in the archaeology that preceded it. The IT manager was talented and perpetually firefighting; somewhere along the way he had quietly outsourced asset history to finance. Finance was one person; part-time; doing six jobs with grace and without complaint. The asset register was nobody’s job, which, in practice, meant it was everybody’s assumption. Someone, surely, was tracking this. Someone always is.
No one was.
The board heard. What followed was something closer to a forensic investigation than an audit, more scrutiny, more cost, handsome fees for our firm. What the company lost was not billable. They lost the board’s belief in management’s grip on reality; that quiet, foundational trust, never spoken until it is violated, that leadership knows what the company owns. Once that belief exits the room, no adjusting entry can recall it.
A missing asset register is never just an accounting problem. It is an organizational confession.
And that company had a hundred people. I want to talk about what happens at five hundred.
II. The rig
Years earlier, near the beginning of my audit life, on a different engagement, I had stood in an entirely different kind of room.
Not an office. A store’s facility on an oilfield services rig, remote, humid, desolate in the way only industrial outposts in the middle of nowhere can be. I was there for a fixed asset and inventory audit, and I arrived, if I am honest with myself, expecting that distance from headquarters meant distance from discipline. That the further you travel from the boardroom, the further you travel from rigor.
I was comprehensively wrong.
The sheets the store clerk handed me, physical, handwritten in parts, matched, line by line, what our SunSystems access showed at the head office hundreds of miles away. Every asset. Every movement. Every reconciliation. A process so deeply embedded it survived geography, heat, and isolation without supervision; without anyone from headquarters watching.
I think, now, of my tech client. A hundred people in a climate-controlled office. One overextended IT manager. A folder of receipts.
The difference was not resources. It was not sophistication. It was not even discipline in the abstract. It was consequence clarity, the visceral, unambiguous understanding that not knowing what you own on a rig can shut down operations, endanger lives, and trigger liability before lunch. The cost of ignorance is immediate and existential. Process, in that environment, is not overhead. It is survival infrastructure.
The mid-market technology company never felt that urgency, not until the auditor arrived, or the acquirer, or the breach investigator. The lean-startup gospel told a generation of founders that process was the enemy of speed, and they believed it; which was right, for a season.
The problem is that many of them never noticed when the season changed. They scaled to five hundred people, still maintaining the mentality of a fifteen-person garage. Lean startup culture, applied past its expiry date, is not agility. It is an expensive, self-flattering excuse for not building what should have been built two years ago.
The store clerk on a desolate rig had a better asset register than your technology company in its air-conditioned city office. Sit with that for a moment.

III. The spreadsheet that loves you back
If your fixed asset register lives in a spreadsheet, you are not managing your assets. You have decided, consciously or otherwise, that the consequences are someone else’s problem. Probably your successor’s.
A spreadsheet FAR is a single point of failure dressed as a filing system. One power interruption while an unsaved file is open. One accidental palm on a numpad (auditors call it the fat finger; the spreadsheet calls it nothing at all), the kind that moves a number by a digit and announces itself to no one. One formula dragged one row too far; one cell overwritten by someone who did not realize they were overwriting it. Excel has no custody trail. It has no validation enforcement. It has no memory of what the number used to be. It reflects the last thing someone did to it, and calls that the truth.
Human error is not the enemy in this architecture. Human error is the feature. You built it in, and then promoted the person who maintained it longest as proof that the system worked.
But fragility is not even the deepest problem. Fragility you can feel: the crash, the corrupted file, the number that looks wrong and sends someone on a two-hour reconciliation hunt. The deeper problem is buried intelligence: the data is present, organized, formatted, even beautiful, and utterly inert.
Your spreadsheet will not tell you that three assets have not moved in fourteen months and are likely ghost entries. It will not alert you that the laptop issued to an employee who resigned in February was never recovered. It will not surface the pattern that your highest-depreciation assets are concentrated in one department with zero documented custodians. The data to answer every one of these questions may be sitting in your cells right now; sitting there, formatted and color-coded and completely silent, waiting for someone to ask the right question in the right sequence on the right day.
At five hundred people, nobody asks. Not because they are negligent, because they do not have time, and the spreadsheet does not volunteer.
A spreadsheet records what someone entered. Reality does not ask permission. Assets move, depreciate, get repurposed, get lost, get quietly absorbed into someone’s home office, and the spreadsheet simply does not know. Not because it is wrong. Because it was designed to store, not to know.
Storing is not knowing. At fifteen people, the gap is manageable. At five hundred, it is a liability with your name on it.
IV. The losses nobody puts in the management letter
In my years as an auditor, I watched companies absorb a great many things. Qualified opinions. Restatements. Management letters of considerable thickness. Most absorbed these with the practiced composure of people who have survived difficulty before and expect to survive it again.
What I never saw anyone absorb gracefully was the adjusting entries.
Assets carried at values bearing no relationship to reality. Insurance coverage priced against a register that was unreconciled for three years (meaning the company was either overinsured on ghost assets or dangerously exposed on real ones, and frequently both at once). Depreciation schedules that were, in the most technical sense of the word, fiction.
And underneath all of it, occasionally, the quieter devastation: assets that had not been lost to poor record-keeping at all, but helped out the door, incrementally, in small quantities, by people who had correctly understood that nobody was watching. Accessories. Small parts. Consumables moving in volumes that individually mean nothing and collectively mean a great deal.
Where there is no tracking, there is pilferage. Not always malicious. Rarely dramatic. But consistent, cumulative, and entirely enabled by the gap between what the spreadsheet records and what actually exists on the shelf.
And still, do not wait for the auditor to recognize yourself in this. The losses I am describing do not require an external trigger. They are happening today, in the unremarkable operations of your business.
Consider your last fifty offboardings. How many recovered every asset cleanly- laptop, monitor, accessories, peripherals- with a documented handover and a closed custody chain? How many ended with an HR manager asking a departing employee for equipment your records show they hold, which they insist they were never issued?Â
Or the reverse, someone leaving with assets your spreadsheet never captured because the procurement happened informally, outside the formal process, the way procurement always eventually does at five hundred people? Both scenarios are common. Both are expensive. Both are, in a company running on spreadsheets, invisible until someone decides to look; and at scale, nobody looks until something breaks loudly enough to force it.
Consider your procurement decisions. How many times has equipment been purchased because nobody could confirm with certainty whether existing assets were available, deployed, or idle? Somewhere in your estate right now, assets are sitting underutilized, untracked, unreported, effectively nonexistent to the people about to replace them.
All of this is recoverable. Expensive, humiliating, operationally disruptive, but recoverable. You restate. You adjust. You tighten. You survive.
What you do not recover is time.
Time is the loss that never appears in the management letter because it has neither a line item nor recoverable value. Every year your company ran on a spreadsheet FAR was a year your CFO made capital allocation decisions on incomplete information; a year your insurance broker priced your coverage against a fiction; a year your procurement team bought equipment that may have already existed, somewhere, untracked and idle; a year your IT director firefought without ever seeing the full estate he was mandated to manage. These decisions cannot be restated. The adjusting entries fix the books. Nothing — no entry, no restatement, no remediation exercise — fixes the decisions made on bad books.
And that is the trap; the irreversible one: the trigger event does not arrive on a schedule you negotiate. The auditor, the acquirer in due diligence, the enterprise customer demanding SOC 2 evidence, the breach investigator asking for a custody trail, one of them is already walking toward you.
You do not know which one, nor their ETA. What you know is that when they arrive, they will not wait for you to reconstruct calmly. You will rebuild the asset register during due diligence, with a closing date on the calendar. You will explain the gaps to the auditor in real time, in the room, while they watch. You will answer the breach investigator’s questions about who had access to what, and when, with a spreadsheet that cannot tell you.
You are not doing archaeology yet. But you are building the site.

V. A word for the disciplined
Now, the reader whose spreadsheet is actually maintained. Reconciled quarterly. Backed up with religious consistency. Updated by someone who genuinely knows what they are doing.
You are not the cautionary tale. You are one resignation away from becoming it.
The spreadsheet’s deepest flaw is not inaccuracy. It is key-person dependency: the congenital fragility of a system whose integrity lives entirely within one person’s habits, one person’s institutional memory, one person’s understanding of every formula that looks standard but is not. When that person leaves, and they will leave, they always leave; what transfers is a file.
What does not transfer is the knowledge of every workaround, every exception, every cell that means something different from what it appears to mean. The next person inherits an artifact. Not a system. Not a truth. An artifact; and artifacts, as any archaeologist will confirm, require considerable interpretation before they yield anything reliable.
Automation in asset management is not sophistication. It is table stakes. Any organization generating more than a million dollars in revenue, and certainly any organization past its first hundred employees, has an asset estate sufficiently complex that manual tracking is an active, daily choice to accept preventable risk.Â
The question is no longer whether you can afford the tool. The question is whether you have honestly modeled what the alternative is costing you, in ghost assets, pilferage, insurance mispricing, procurement duplication, failed offboardings, and the compounding cost of reconstruction under maximum pressure.
Purpose-built asset tracking at this scale starts at a few hundred dollars a year. Against the losses I have described- the unrecovered assets at offboarding, the ghost entries nobody cleared, the insurance priced against a fiction, the pilferage that continued uninterrupted because nobody established a baseline to variance against- that is not a cost. It is an apology for not having done it sooner.
The asymmetry is not subtle. It is, frankly, an embarrassment.
The question you already know the answer to
The spreadsheet did not fail you. Your organization failed to ask whether it could ever be enough, and that is an entirely different failure, with an entirely different remedy.
I have sat in that room from every angle; as the auditor who asked the question, as the accountant who read the gap on the balance sheet, as the IT director who lived inside the problem and understood with the helpless precision of an insider exactly why good people could not fix it through effort alone, as the COO who watched decisions compound on a foundation nobody had verified in years.
Every seat, the same lesson: the cost of not knowing what you own is always higher than the cost of knowing. Always. Without exception. The gap between those two costs widens every quarter you defer the decision.
And if you want to know what Monday looks like, it is three unglamorous moves. Name one owner for the asset estate, a person, not a committee, end to end. Reconcile what you believe you own against what physically exists, once, properly, and date-stamp the result as your baseline. Then put the register in a system that records movement without being asked; because a register that depends on someone remembering is just the old silence, scheduled to return.
If your auditor walked in tomorrow and asked for a complete, verified, custody-traced record of every asset in your organization, how long would the silence last?
You already know. Build the register. Own the estate. Know yourself, before the auditor has to do it for you.
![[How-to] Automate Offboarding Workflows using Member Automations in AssetSonar](https://cdn.ezo.io/wp-content/uploads/2025/05/06122406/Member-Automations-in-scaled-1.webp)
![[How-to] Automate Software Tracking with Slack Integration in AssetSonar](https://cdn.ezo.io/wp-content/uploads/2025/01/20124914/Zoom-integration-scaled-1.webp)
