Back to Insights

Insight

When ISO 55001 Becomes a Software Project

ISO 55001 asks for an asset management system, not a new CMMS. Why programmes confuse the two, and how to reset the narrative.

By Robert Carew
Cover image — When ISO 55001 Becomes a Software Project
AnalysisISO 55001Asset Management SystemEAM StrategyChange Management

ISO 55001 defines requirements for an asset management system: leadership, planning, controlled processes, and evidence that you improve with intent. Yet many organisations still launch their “ISO 55001 programme” as if the standard were a specification for enterprise software. The result is predictable: glossy roadmaps, frustrated operations teams, and auditors who find strong project management but weak management system behaviour.

This article takes a deliberately uncomfortable position. If your ISO 55001 initiative is primarily expressed as an EAM replacement, a cloud migration, or a sequence of configuration workshops, you have inverted the standard’s logic. You may still produce useful technology outcomes. You will struggle to demonstrate an asset management system that survives the next reorganisation.

The Standard Is a Management System, Not a Product

ISO 55001 does not tell you which CMMS to buy, how many preventive maintenance programmes to run, or whether predictive analytics belongs in year two or year five. It asks whether policies, roles, objectives, risks, and performance evaluation connect in a coherent loop. Software appears as support for processes and records, not as the proof of conformity by itself.

That distinction matters because boards and programme sponsors often anchor funding narratives in tangible deliverables. A named platform, a go-live date, and a trained user population are easy to photograph in a steering pack. By contrast, “management review,” “context of the organisation,” and “continual improvement” sound abstract until an incident or an audit forces them into view.

There is nothing wrong with modernising technology in parallel with an ISO 55001 journey. The error is treating the licence and the upgrade as the spine of the management system. When that happens, the “asset management system” becomes whatever the application can display on a dashboard, and the softer obligations (genuine leadership commitment, competent people, documented decision rights) get deprioritised whenever budgets tighten.

For a plain-language unpack of what the standard actually expects, see our earlier piece on what an asset management system really means under ISO 55001. The analytical point here is narrower: certification is a test of organisational behaviour repeated over time, not a milestone on an IT timeline.

Why Programmes Drift Toward the Tool

Three forces pull well-meaning teams toward a software-led story.

Procurement gravity. Enterprise EAM selections are expensive, politically visible, and tightly governed. They attract executive attention. Management system work, unless it is tied to regulation with explicit teeth, often competes as “process overhead.” The path of least resistance is to let the EAM programme absorb the ISO narrative, not the other way around.

Consulting and vendor language. Implementation partners (MaxIron included) live in milestones, environments, integrations, and cutover. It is natural to mirror that vocabulary in programme communications. Without a counterweight, stakeholders start to believe that “ready for certification” equals “Go-Live + 90 days,” which ISO 55001 simply does not promise.

The comfort of artefacts over habits. Screenshots, configuration documents, and test scripts are easier to file than evidence that engineers actually challenge deferrals when risk thresholds are breached. Auditors know this; good ones probe whether behaviour matches procedure. A management system that exists only in workflow definitions has shallow roots.

What Goes Wrong When Certification Chases Screens

When ISO 55001 is interpreted through software delivery, several failure modes recur.

Governance narrows to IT governance. Change advisory boards dominate while asset risk forums starve for attendance. Decisions about master data ownership, escalation when critical spares are missing, and how maintenance interacts with capital projects stay informal. The CMMS ends up faithfully recording confusion.

Roles stay fuzzy. ISO 55001 expects competent people and clear accountability. If the “system” is perceived as IBM Maximo Application Suite or another platform, informal ownership persists: everyone assumes the application team owns asset data quality, while the application team assumes the business funds stewards who never quite appear.

Evidence becomes transactional instead of systemic. Work orders and closed PMs matter, but they are outputs. Conformity also rests on showing that leadership reviews performance, that objectives cascade sensibly, and that corrective actions from audits actually change practice. A programme optimised for UAT sign-off rarely budgets time for that organisational wiring.

Improvement becomes upgrade planning. A mature asset management system learns from failures, near misses, and efficiency metrics. If the roadmap is dominated by vendor release cycles and AppPoint discussions, continual improvement sounds like “next year’s phase 2,” not “how we decided to change our threshold for emergency work last quarter.”

None of this argues against strong EAM technology. It argues for sequencing clarity. Buy and build the platform because the management system demands reliable records and controlled change, not because you mistook the standard for a shopping list.

A Better Framing for Boards and Programme Teams

A credible ISO 55001 narrative starts with outcomes and risks the organisation already owns: safety, service levels, regulatory duties, capital efficiency. The management system explains how asset decisions support those outcomes. Technology is one enabler among several (competence, contracting, supply chain, data governance).

Practically, that means a few shifts in how you charter work.

Name a single system owner for the asset management system, distinct from the IT product owner. They do not need a grand title, but they do need authority to convene engineering, finance, operations, and IT on the same risk and performance story. Without that role, ISO becomes a rotating project with no memory.

Write the management system storyline before you finalise wave plans. If the first wave cannot point to how it strengthens leadership commitment, planning, or performance evaluation as defined in ISO 55001, pause and ask whether you are funding digital transformation with a standards label.

Treat data and integration as extensions of governance, not as appendix work. Clause 7.6 of ISO 55001:2024 sets requirements for data and information needed for the asset management system; that connects naturally to disciplined asset registers and integration design, topics that belong in programme scope rather than afterthought tickets.

Keep external knowledge in view. Professional bodies such as the Institute of Asset Management publish guidance that reinforces the same separation between asset management practice and IT delivery. Use those materials in steering conversations so the dialogue is not only vendor-led.

Practical Implications for IBM MAS Estates

IBM’s market direction makes the discipline above more important, not less. IBM has been progressively shifting investment from classic Maximo to Maximo Application Suite. MAS is a suite that includes Maximo Manage (the core asset and work management capability) alongside optional applications such as Health, Monitor, and Predict; deployment aligns to Red Hat OpenShift. That stack is powerful, but it amplifies integration, identity, and operational complexity at the boundaries of your estate.

If your ISO 55001 programme is folded into an MAS migration, insist on parallel tracks. One track delivers a stable, well-governed management system with clear accountabilities. The other delivers platform and integration outcomes that the management system can rely on for evidence. Conflating the two blurs accountability when something fails in production or when audit samples show that policies and practice diverge.

Technical reference and product structure should always be checked against IBM’s own documentation rather than hearsay; the IBM Maximo Application Suite technical overview remains the authoritative starting point. For how delivery choices interact with hosting, support, and sequencing decisions in real programmes, our services overview outlines the capability areas most teams need alongside the licence.

If you are unsure whether your initiative is balanced, ask a blunt question in the next steering meeting: “If we froze the product version for eighteen months, could we still credibly claim an improving asset management system?” If the honest answer is no, you are running a software project with an ISO 55001 sticker, not the other way around.

Sources