Mitigating risks of license non-compliance How our forensic technology and IP compliance team can help
Mitigating risks of license non-compliance How our forensic technology and IP compliance team can help
1 Mitigating risks of license non-compliance
Addressing the inherent risk of software license non-compliance
Organizations are finding it increasingly difficult to manage their software licenses.
The challenges originate from the inherent characteristics of an intangible asset such as software, which is very difficult to track and quantify. Furthermore, licensing rules change dynamically from publisher to publisher and product to product. Our team can help you obtain knowledge on licensing rules by preparing an accurate inventory of your usage/purchases, and also use forensic tools to uncover misuse of software.
What you require• Exhaustive inventories of licenses capturing what is used, how much is used and who is using it
• Identification of all license purchases till date in various forms and through different channels
• Forensic analysis of license misuse in the form of cracks and pirated keys
• Detailed report quantifying overall exposure and usage on the basis of specific product-/brand- licensing rules
• Tools and processes to proactively manage software assets in future
• Elimination of wastage, financial/legal/InfoSec risks due to unauthorized software usage
Addressing “pain” areas relating to software license life cycle
Procurement
Deployment
Utilization
Maintenance
Retirement
Mitigating risks of license non-compliance 2
Benefits to you • Accurate and up-to-date knowledge
relating to your utilization and investment in software
• Avoidance of reputation risk and unpleasant surprises during settlement of license audits by software publishers by complying with licensing terms and agreements
• Implementation of industry standard best practices relating to software asset management and compliance
• Identification of pirated cracks and license keys to help you avoid huge fines during license audits, so that you can take preventive action immediately
• Increased awareness pertaining to the do’s and don’ts to help you manage your software contracts and processes to avoid risks, e.g., the risk of procuring counterfeit software that looks genuine
What can go wrongIncreased costs and exposure• Increased procurement costs due to unavailability of accurate inventory of purchases
• Increased financial exposure during publisher-driven spot audits due to over-usage of licenses
• Increased cost of maintenance/support due to non-standard version of product used
Increased risk to reputation• Software publishers drive license audits aggressively, and any exposure, even if it is unintended, can result in loss of reputation.
Increased threat to information security• The presence of pirated cracks and keys, installed by a rogue employee, can circulate across the network and cause stability issues.
Lack of control and productivity• The absence of automated tools and processes makes it difficult for an organization to exercise control over its software assets,
which results in incorrect accounting and reporting.
• Additional support FTEs are wasted while tracking and supporting software manually.
3 Mitigating risks of license non-compliance
Compliance
Financial benefits
Resource planning and utilization
Corporate value
People
Proc
ess
Technology
Assets
Acquisi
tion
manag
emen
t Deployment
management
Retirement
managementLife
cycle
support
Mitigating risks of license non-compliance 4
Area Your need Pain areas Our suggested solution
Software deployment management
Accurate reporting of software inventory
• Lack of product- specific licensing
• Unavailability of efficient reporting tools
• Significant asset base
• Prepare accurate software deployment summary
• Provide product/publisher-specific licensing view
• Ensure maximum coverage of 90%+
Software entitlement management
Accurate entitlement statement (procured licenses)
• No single view of what has been procured by the organization
• No view of software publisher partnership licenses
• Provide accurate listing of software license entitlements
• Provide access to online automated dashboards for regular review
Process and Automation Is there a presence of malicious code e.g. crack in the organization
• Cracks bypassing normal licensing mechanism and being hard to detect
• Software publishers levying huge fines due to identification of cracks during license audits
• Provide an accurate GAP analysis of what is deployed vs. what is the entitlement
• Develop a maturity model that can be tracked by stakeholders in the future
Malicious Codes Is there a presence of malicious code e.g. crack in the organization
• Cracks bypassing normal licensing mechanism and being hard to detect
• Software publishers levying huge fines due to identification of cracks during license audits
Identify presence of malicious codes, cracks, illegitimate license keys, counterfeit software, etc., helping the organization take informed decisions prior to license audits
Team credentials• ► Instrumental in establishing software license
compliance programs for software publishers such as IBM, Microsoft, Attachmate, Quest, Oracle, BEA Systems and Hewlett-Packard
• ► Hands-on and project management experience of 1000+ enterprise and SMB reviews
• ► Certified resources for publishers such as Microsoft, IBM and BEA Systems
• ► Customized tools and scripts developed to assist in review processes
• ► Assistance in international practice; carrying out license compliance reviews in software publishers’ regions
• ► Instrumental in formulating software asset management best practices in their regions
• ► Wide experience in helping various software publishers understand licensing terms and conditions of partnership licenses
*These are team credentials and may not be firm credentials entirely
Have questions about a specific EY service? Whatever your inquiry, we’ll help direct you to the right place.www.ey.com
The choice is yours!Go to www.ey.com/india
More ways to stay connected to Ernst & Young
Assurance, Tax, Transactions, Advisory We provide services to help you retain confidence of investors, manage your risk, strengthen your control and achieve your potential.
Center of excellence for key sectorsWe have specialized teams that bring sector knowledge to you.
Read more on www.ey.com/Services
Read more on www.ey.com/industries
Publications — easy to use subscription form
http://webcast.ey.com/thoughtcenter/
Webcasts and podcasts
www.ey.com/subscription-form
Subscribe to our...
Services for you...
Sector knowledge
Mitigating risks of license non-compliance 6
Contact us
Our officesAhmedabad2nd floor, Shivalik IshaanNear. C.N Vidhyalaya Ambawadi, Ahmedabad – 380015 Tel: +91 79 6608 3800Fax: +91 79 6608 3900
Bangaluru12th & 13th floor “U B City” Canberra Block No.24, Vittal Mallya Road Bangaluru – 560 001 Tel: +91 80 4027 5000 +91 80 6727 5000Fax: +91 80 2210 6000 (12th floor)Fax: +91 80 2224 0695 (13th floor)
Chandigarh1st Floor SCO: 166-167Sector 9-C, Madhya MargChandigarh – 160 009 Tel: +91 172 671 7800Fax: +91 172 671 7888
ChennaiTidel Park, 6th & 7th Floor A Block (Module 601,701-702)No.4, Rajiv Gandhi Salai Taramani Chennai – 600113Tel: +91 44 6654 8100Fax: +91 44 2254 0120
Hyderabad Oval Office 18, iLabs Centre,Hitech City, Madhapur,Hyderabad – 500081Tel: +91 40 6736 2000Fax: +91 40 6736 2200
Kochi9th Floor “ABAD Nucleus”NH-49, Maradu PO, Kochi – 682 304 Tel: +91 484 3044000Fax: +91 484 2705393
Kolkata22, Camac Street 3rd Floor, Block C” Kolkata –700 016 Tel: +91 33 6615 3400 Fax: +91 33 2281 7750 Mumbai 6th Floor Express Towers Nariman Point Mumbai – 400021 Tel: +91 22 6192 0000 Fax: +91 22 6192 2000
14th Floor, The Ruby29 Senapati Bapat MargDadar (west)Mumbai – 400 028, IndiaTel: +91 22 6192 0000Fax: +91 22 6192 1000
5th Floor Block B-2, Nirlon Knowledge ParkOff. Western Express HighwayGoregaon (E)Mumbai – 400 063, IndiaTel: +91 22 6192 0000 Fax: +91 22 6192 3000
NCRGolf View Corporate Tower – BNear DLF Golf Course, Sector 42Gurgaon – 122 002Tel: +91 124 464 4000Fax: +91 124 464 4050
6th floor, HT House18-20 Kasturba Gandhi MargNew Delhi – 110 001Tel: +91 11 4363 3000Fax: +91 11 4363 3200
4th & 5th Floor, Plot No 2B,Tower 2, Sector 126,NOIDA – 201 304Gautam Budh Nagar, U.P. IndiaTel: +91 120 671 7000Fax: +91 120 671 7171
PuneC—401, 4th floorPanchshil Tech ParkYerwada (Near Don Bosco School)Pune – 411 006Tel: +91 20 6603 6000Fax: +91 20 6601 5900
Sandeep BaldavaPartnerDirect Tel: +91 40 67362121Email: [email protected]
Mukul ShrivastavaExecutive DirectorDirect Tel: +91 22 [email protected]
Vivek AggarwalExecutive DirectorDirect Tel: +91 124 464 [email protected]
Anurag KashyapDirectorDirect Tel: +91 22 [email protected]
Jagdeep SinghDirectorDirect Tel: +91 20 6603 6119Email: [email protected]
50%
Ernst & Young Pvt. Ltd.
Assurance | Tax | Transactions | Advisory
About Ernst & YoungErnst & Young is a global leader in assurance, tax, transaction and advisory services. Worldwide, our 144,000 people are united by our shared values and an unwavering commitment to quality. We make a difference by helping our people, our clients and our wider communities achieve their potential.
Ernst & Young refers to the global organization of member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. Ernst & Young Pvt. Ltd. is one of the Indian client serving member firms of EYGM Limited. For more information about our organization, please visit www.ey.com.
Ernst & Young Pvt. Ltd. is a company registered under the Companies Act, 1956 having its registered office at 22 Camac Street, 3rd Floor, Block C, Kolkata - 700016
© 2010 Ernst & Young Pvt. Ltd. All Rights Reserved.
This publication contains information in summary form and is therefore intended for general guidance only. It is not intended to be a substitute for detailed research or the exercise of professional judgment. Neither EYGM Limited nor any other member of the global Ernst & Young organization can accept any responsibility for loss occasioned to any person acting or refraining from action as a result of any material in this publication. On any specific matter, reference should be made to the appropriate advisor.
In line with Ernst & Young’s commitment to minimize its impact on the environment, this document has been printed on paper with a high recycled content.
www.ey.com/india
EYIN1009-104 Mitigating risks of license non-compliance (India). Artwork by Rashi Sinha.