Software Taxonomy

A. Business Application Portfolio

Business Apps – core business capability and line-of-business systems

  • ERP – e.g. SAP S/4HANA, Oracle ERP Cloud, Microsoft Dynamics Finance, Unit4 Business World
  • CRM – e.g. Salesforce, Microsoft Dynamics CRM, SAP CX
  • HR/HCM – e.g. Workday, SAP SuccessFactors, Oracle HCM, Youforce
  • Finance – e.g. Oracle Financials, SAP Finance, Unit4 Financials
  • Procurement – e.g. SAP Ariba, Coupa, Ivalua
  • Industry Apps – e.g. nCino, FIS
  • Reporting/Analytics – e.g. Power BI, Tableau, Qlik

UX / Experience Layer – frontends, portals and interaction channels

  • Portals – e.g. ServiceNow Portal, Liferay
  • Web Frontends – e.g. React, Angular, Vue
  • Mobile Frontends – e.g. native iOS/Android, low-code mobile
  • Case UI – e.g. ServiceNow Workspace
  • Engagement – e.g. Dialogflow, Cognigy, Microsoft Copilot

B. Technical Application Portfolio

Technical Platforms – shared platforms enabling integration, data, identity and delivery

Integration – data movement and cross-system connectivity

  • ETL/ELT – e.g. Informatica, Talend, Matillion
  • iPaaS – e.g. MuleSoft, Boomi, Workato

API Mgmt – expose, secure and manage APIs

  • Gateways – e.g. Apigee, Kong, IBM API Connect
  • Portals – e.g. Postman, SwaggerHub

Messaging – asynchronous messaging and event streaming

  • MQ – e.g. IBM MQ
  • Events/Streams – e.g. Kafka, AWS SNS/SQS, Azure Event Hub

Low-Code – workflow, forms and low-code applications

  • Low-Code Platforms – e.g. Power Platform, ServiceNow App Engine, Mendix

Data Platforms – data storage, analytics and governance

  • Lakes – e.g. Databricks, Snowflake
  • BI – e.g. Power BI, Tableau
  • Catalogs – e.g. Collibra, Alation, Azure Purview

AI/ML – model development, training and serving

  • ML Tooling – e.g. Azure ML, SageMaker, Vertex AI
  • Model Serving – e.g. Vertex AI, SageMaker
  • Feature Stores – e.g. Tecton, AWS Feature Store

Identity – authentication, authorization and privileged access

  • SSO/MFA – e.g. Entra ID, Okta, Ping Identity
  • PAM – e.g. CyberArk, BeyondTrust, One Identity Safeguard

DevOps – software lifecycle, pipelines and Agile delivery

  • Source Control – e.g. GitHub, GitLab
  • CI/CD – e.g. GitHub Actions, GitLab CI, Azure DevOps, Jenkins
  • IaC – e.g. Terraform, Pulumi
  • DevSecOps – e.g. Snyk, Checkmarx, GitHub Advanced Security
  • Agile / Work Mgmt – e.g. Jira, Azure DevOps, ServiceNow DevOps

Observability – monitoring, logging, metrics and tracing

  • Observability Tools – e.g. Elastic, Splunk, Prometheus, Dynatrace, Datadog, New Relic, ServiceNow

Cloud Mgmt – govern, monitor and inventory public cloud footprints

  • Config/State – e.g. AWS Config, Azure Resource Graph
  • Policy – e.g. Azure Policy, AWS SCP
  • Inventory – e.g. GCP Asset Inventory

Infrastructure Software – runtime and foundational execution environment

Compute – servers, virtualisation, containers and orchestration

  • OS – e.g. RHEL, Windows Server
  • Virtualisation – e.g. VMware vSphere
  • Containers – e.g. Docker, CRI-O
  • Orchestration – e.g. Kubernetes, OpenShift, Rancher

Storage – enterprise storage, backup and analytics

  • Management – e.g. NetApp ONTAP, Dell PowerStore
  • Backup – e.g. Veeam, Commvault, Rubrik
  • Analytics – e.g. Dell CloudIQ, NetApp Cloud Insights

Database – operational and analytical database engines

  • Engines – e.g. PostgreSQL, SQL Server, Oracle DB, MySQL, MongoDB, MariaDB, Sybase
  • Utilities – e.g. Debezium, pgBackRest
  • Data Foundations – e.g. schema/metadata tools

Network – connectivity, routing, SDN and traffic management

  • Control – e.g. Infoblox
  • SDN – e.g. VMware NSX, Cisco ACI
  • Traffic – e.g. F5 BIG-IP, Citrix ADC
  • Network Security – e.g. Palo Alto, Check Point, Zscaler

Security – threat detection, prevention and security operations

  • Threat Detection – e.g. CrowdStrike Falcon, Defender XDR, SentinelOne
  • VR – e.g. Qualys VMDR, Rapid7 InsightVM, Tenable Nessus
  • Hardening/CSPM – e.g. Prisma Cloud, Wiz, CloudGuard
  • IGA – e.g. SailPoint, Saviynt, One Identity Manager
  • SecOps (SIEM/SOAR) – e.g. Microsoft Sentinel, Splunk ES, IBM QRadar, Cortex XSOAR

IT Management – IT service, operations, portfolio and risk management

  • ITSM/ESM – e.g. ServiceNow ITSM, BMC Helix
  • ITOM/CMDB – e.g. ServiceNow ITOM Discovery/Mapping
  • ITAM/SAM/FinOps – e.g. Snow, ServiceNow ITAM, Flexera, Apptio Cloudability
  • EA/APM/TPM – e.g. LeanIX, Apptio, ServiceNow EA, BlueDolphin
  • PPM/SPM – e.g. ServiceNow PPM/SPM, Planview, Miro
  • GRC/IRM/BCM/DR/TPRM – e.g. Cerix, ServiceNow IRM, MetricStream, RSA Archer

C. EUC Portfolio

OS Stack (Built-In) – components delivered as part of the OS baseline

  • OS Core – e.g. Windows, macOS
  • Built-In Apps – e.g. Notepad, Safari, Edge, Terminal
  • OS Services – e.g. Defender Core, Spotlight, Windows Update
  • Drivers & Firmware – GPU/NIC drivers, firmware packages

Deployable EUC Packages – installable software distributed via endpoint management

  • Productivity Packages – e.g. Office MSI/Click-to-Run, Adobe Acrobat MSI
  • Security Clients – e.g. Defender Agent, CrowdStrike, Zscaler Client Connector
  • Utility Tools – e.g. Notepad++, 7-Zip, Postman
  • Custom Enterprise Apps – e.g. internal MSI/PKG/IntuneWin packages
  • Browser Extensions (Managed) – e.g. LastPass extension, Grammarly extension
  • VDI Clients – e.g. Citrix Workspace, Horizon Client

SaaS EUC Applications – cloud-hosted applications accessed via browser or lightweight client

  • Office SaaS – e.g. O365 Online (Word Online, Excel Online, PowerPoint Online), Google Docs, Google Sheets, Google Slides, Office.com Hub, Microsoft Loop, OneNote Online
  • Collaboration SaaS – e.g. Teams, Slack, Zoom, Miro, SharePoint Online
  • Creativity SaaS – e.g. Adobe Creative Cloud Web, Canva
  • Communication SaaS – e.g. Outlook Web, Gmail, Google Meet
  • EUC Engagement SaaS – e.g. ServiceNow Virtual Agent, Microsoft Copilot, Dialogflow, Cognigy