Mitigating risks of license non-compliance. How our forensic technology and IP compliance team can help

Transcription

1 Mitigating risks of license non-compliance How our forensic technology and IP compliance team can help

2 Addressing the inherent risk of software license non-compliance Organizations are finding it increasingly difficult to manage their software licenses. Addressing pain areas relating to software license life cycle The challenges originate from the inherent characteristics of an intangible asset such as software, which is very difficult to track and quantify. Furthermore, licensing rules change dynamically from publisher to publisher and product to product. Our team can help you obtain knowledge on licensing rules by preparing an accurate inventory of your usage/purchases, and also use forensic tools to uncover misuse of software. Retirement Procurement Deployment Maintenance Utilization What you require Exhaustive inventories of licenses capturing what is used, how much is used and who is using it Identification of all license purchases till date in various forms and through different channels Forensic analysis of license misuse in the form of cracks and pirated keys Detailed report quantifying overall exposure and usage on the basis of specific product-/brand- licensing rules Tools and processes to proactively manage software assets in future Elimination of wastage, financial/legal/infosec risks due to unauthorized software usage 1 Mitigating risks of license non-compliance

3 Benefits to you Accurate and up-to-date knowledge relating to your utilization and investment in software Avoidance of reputation risk and unpleasant surprises during settlement of license audits by software publishers by complying with licensing terms and agreements Implementation of industry standard best practices relating to software asset and compliance Identification of pirated cracks and license keys to help you avoid huge fines during license audits, so that you can take preventive action immediately Increased awareness pertaining to the do s and don ts to help you manage your software contracts and processes to avoid risks, e.g., the risk of procuring counterfeit software that looks genuine What can go wrong Increased costs and exposure Increased procurement costs due to unavailability of accurate inventory of purchases Increased financial exposure during publisher-driven spot audits due to over-usage of licenses Increased cost of maintenance/support due to non-standard version of product used Increased risk to reputation Software publishers drive license audits aggressively, and any exposure, even if it is unintended, can result in loss of reputation. Increased threat to information security The presence of pirated cracks and keys, installed by a rogue employee, can circulate across the network and cause stability issues. Lack of control and productivity The absence of automated tools and processes makes it difficult for an organization to exercise control over its software assets, which results in incorrect accounting and reporting. Additional support FTEs are wasted while tracking and supporting software manually. Mitigating risks of license non-compliance 2

4 People Process Acquisition Retirement Assets Deployment Lifecycle support Technology Compliance Financial benefits Resource planning and utilization Corporate value 3 Mitigating risks of license non-compliance

5 Area Your need Pain areas Our suggested solution Software deployment Accurate reporting of software inventory Lack of product- specific licensing Prepare accurate software deployment summary Unavailability of efficient reporting tools Provide product/publisherspecific licensing view Significant asset base Ensure maximum coverage of 90%+ Software entitlement Accurate entitlement statement (procured licenses) No single view of what has been procured by the organization No view of software publisher partnership licenses Provide accurate listing of software license entitlements Provide access to online automated dashboards for regular review Process and Automation Is there a presence of malicious code e.g. crack in the organization Cracks bypassing normal licensing mechanism and being hard to detect Provide an accurate GAP analysis of what is deployed vs. what is the entitlement Software publishers levying huge fines due to identification of cracks during license audits Develop a maturity model that can be tracked by stakeholders in the future Malicious Codes Is there a presence of malicious code e.g. crack in the organization Cracks bypassing normal licensing mechanism and being hard to detect Software publishers levying huge fines due to identification of cracks during license audits Identify presence of malicious codes, cracks, illegitimate license keys, counterfeit software, etc., helping the organization take informed decisions prior to license audits Team credentials Instrumental in establishing software license compliance programs for software publishers such as IBM, Microsoft, Attachmate, Quest, Oracle, BEA Systems and Hewlett-Packard Hands-on and project experience of enterprise and SMB reviews Certified resources for publishers such as Microsoft, IBM and BEA Systems Customized tools and scripts developed to assist in review processes Assistance in international practice; carrying out license compliance reviews in software publishers regions Instrumental in formulating software asset best practices in their regions Wide experience in helping various software publishers understand licensing terms and conditions of partnership licenses *These are team credentials and may not be firm credentials entirely Mitigating risks of license non-compliance 4

6 More ways to stay connected to Ernst & Young Services for you... Assurance, Tax, Transactions, Advisory We provide services to help you retain confidence of investors, manage your risk, strengthen your control and achieve your potential. Read more on Sector knowledge Center of excellence for key sectors We have specialized teams that bring sector knowledge to you. Read more on Subscribe to our... Publications easy to use subscription form Webcasts and podcasts The choice is yours! Go to Have questions about a specific EY service? Whatever your inquiry, we ll help direct you to the right place.

7 Contact us Sandeep Baldava Partner Direct Tel: Vivek Aggarwal Executive Director Direct Tel: Jagdeep Singh Director Direct Tel: Mukul Shrivastava Executive Director Direct Tel: Anurag Kashyap Director Direct Tel: Our offices Ahmedabad 2nd floor, Shivalik Ishaan Near. C.N Vidhyalaya Ambawadi, Ahmedabad Tel: Fax: Bangaluru 12th & 13th floor U B City Canberra Block No.24, Vittal Mallya Road Bangaluru Tel: Fax: (12th floor) Fax: (13th floor) Chandigarh 1 st Floor SCO: Sector 9-C, Madhya Marg Chandigarh Tel: Fax: Chennai Tidel Park, 6th & 7th Floor A Block (Module 601, ) No.4, Rajiv Gandhi Salai Taramani Chennai Tel: Fax: Hyderabad Oval Office 18, ilabs Centre, Hitech City, Madhapur, Hyderabad Tel: Fax: Kochi 9th Floor ABAD Nucleus NH-49, Maradu PO, Kochi Tel: Fax: Kolkata 22, Camac Street 3 rd Floor, Block C Kolkata Tel: Fax: Mumbai 6 th Floor Express Towers Nariman Point Mumbai Tel: Fax: th Floor, The Ruby 29 Senapati Bapat Marg Dadar (west) Mumbai , India Tel: Fax: th Floor Block B-2, Nirlon Knowledge Park Off. Western Express Highway Goregaon (E) Mumbai , India Tel: Fax: NCR Golf View Corporate Tower B Near DLF Golf Course, Sector 42 Gurgaon Tel: Fax: th floor, HT House Kasturba Gandhi Marg New Delhi Tel: Fax: th & 5th Floor, Plot No 2B, Tower 2, Sector 126, NOIDA Gautam Budh Nagar, U.P. India Tel: Fax: Pune C 401, 4th floor Panchshil Tech Park Yerwada (Near Don Bosco School) Pune Tel: Fax: Mitigating risks of license non-compliance 6

8 Ernst & Young Pvt. Ltd. Assurance Tax Transactions Advisory About Ernst & Young Ernst & Young is a global leader in assurance, tax, transaction and advisory services. Worldwide, our 144,000 people are united by our shared values and an unwavering commitment to quality. We make a difference by helping our people, our clients and our wider communities achieve their potential. Ernst & Young refers to the global organization of member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. Ernst & Young Pvt. Ltd. is one of the Indian client serving member firms of EYGM Limited. For more information about our organization, please visit Ernst & Young Pvt. Ltd. is a company registered under the Companies Act, 1956 having its registered office at 22 Camac Street, 3rd Floor, Block C, Kolkata Ernst & Young Pvt. Ltd. All Rights Reserved. This publication contains information in summary form and is therefore intended for general guidance only. It is not intended to be a substitute for detailed research or the exercise of professional judgment. Neither EYGM Limited nor any other member of the global Ernst & Young organization can accept any responsibility for loss occasioned to any person acting or refraining from action as a result of any material in this publication. On any specific matter, reference should be made to the appropriate advisor. 50% In line with Ernst & Young s commitment to minimize its impact on the environment, this document has been printed on paper with a high recycled content. EYIN Mitigating risks of license non-compliance (India). Artwork by Rashi Sinha.