Software Audit Risk Checklist

Software audits are considered an unpleasant and inevitable factor of business. Once, it may have been possible for a company to remain compliant with their software vendors with only a few spreadsheets managed by someone extremely organized. Now, however, software deployments and contracts have become so complex that this is simply not practical.

As technology has evolved, the way that software is used and deployed has become more complicated. Software publishers themselves have not made it any easier with their perplexing software contracts that are convoluted and difficult to read. The temptation to skip over the entire document, agree to the terms and conditions, and move on with our days can be irresistible.

Despite how the software vendors may be stacking the situation in their favor, preparation is your greatest tool of defense. In this document we’ll discuss how you can prepare for a software audit.

Understanding the Risks of a Software Audit

Are You Inviting a Software Audit?

Some software vendors will send audit and Software Asset Management (SAM) review requests at random or on an annual basis; such events are unavoidable. While most software vendors will provide little to no criteria for initiating audits, the fact that there are different kinds of audits should be an indicator that not every audit is born from the same kind of evidence or circumstance.

Vendors have discovered that software audits are an excellent source of revenue, especially if their customer’s compliance gap is large enough to force them to cover the cost of the software audit. Software audits can have a high return on investment, making it well worth the software vendor’s time and money. It is towards these safe ROIs that the software vendors will turn their interest.

Therefore, if there are indicators that a company is out of compliance enough to yield a profit, they can risk their vendor initiating the audit. If you are concerned about your company’s exposure to a software audit, below are the risk factors that increase the likelihood of an audit occurring.

Factors to Attract an Audit

You haven’t been audited in three years or more.

This factor is simply outside of your control, but most software companies will wait anywhere from three to five years between audits. This is due to the fact that if you were audited more frequently, there’s a chance that your software estate will still be organized and within compliance as a result of your last audit.

You are a sizable company with international branches.

Start-up businesses with five laptops and barely a penny of profit between them will not be worth the software publisher’s time and money.

Your license profile incorporates multiple big-name software vendors that are notorious for their audits.

This includes vendors like Microsoft, Oracle, IBM, and SAP.

Your company has experienced substantial growth.

However, you have yet to purchase more licenses with a vendor to accommodate that growth.

Your company has undergone a merger or acquisition.

During such a transition, the combining of licenses from different businesses can leave you disorganized and exposed.

Your software environment is complex, and you have yet to demonstrate to the software vendor that you have a system in place to manage it.

Perhaps the methods you have demonstrated are insufficient in their opinion. This will leave the software vendors confident in the fact that you have probably missed something.

Get Your Software Audit Risk Assessment

Software audits are considered an unpleasant and inevitable factor of business. Once, it may have been possible for a company to remain compliant with their software vendors with only a few spreadsheets managed by someone extremely organized. Now, however, software deployments and contracts have become so complex that this is simply not practical.

As technology has evolved, the way that software is used and deployed has become more complicated. Software publishers themselves have not made it any easier with their perplexing software contracts that are convoluted and difficult to read. The temptation to skip over the entire document, agree to the terms and conditions, and move on with our days can be irresistible.

Despite how the software vendors may be stacking the situation in their favor, preparation is your greatest tool of defense. In this document we’ll discuss how you can prepare for a software audit.

Understanding the Risks of a Software Audit

Are You Inviting a Software Audit?

Some software vendors will send audit and Software Asset Management (SAM) review requests at random or on an annual basis; such events are unavoidable. While most software vendors will provide little to no criteria for initiating audits, the fact that there are different kinds of audits should be an indicator that not every audit is born from the same kind of evidence or circumstance.

Vendors have discovered that software audits are an excellent source of revenue, especially if their customer’s compliance gap is large enough to force them to cover the cost of the software audit. Software audits can have a high return on investment, making it well worth the software vendor’s time and money. It is towards these safe ROIs that the software vendors will turn their interest.

Therefore, if there are indicators that a company is out of compliance enough to yield a profit, they can risk their vendor initiating the audit. If you are concerned about your company’s exposure to a software audit, below are the risk factors that increase the likelihood of an audit occurring.

Get Your Software Audit Risk Assessment

Factors to Attract an Audit

You haven’t been audited in three years or more.

This factor is simply outside of your control, but most software companies will wait anywhere from three to five years between audits. This is due to the fact that if you were audited more frequently, there’s a chance that your software estate will still be organized and within compliance as a result of your last audit.

You are a sizable company with international branches.

Start-up businesses with five laptops and barely a penny of profit between them will not be worth the software publisher’s time and money.

Your license profile incorporates multiple big-name software vendors that are notorious for their audits.

This includes vendors like Microsoft, Oracle, IBM, and SAP.

Your company has experienced substantial growth.

However, you have yet to purchase more licenses with a vendor to accommodate that growth.

Your company has undergone a merger or acquisition.

During such a transition, the combining of licenses from different businesses can leave you disorganized and exposed.

Your software environment is complex, and you have yet to demonstrate to the software vendor that you have a system in place to manage it.

Perhaps the methods you have demonstrated are insufficient in their opinion. This will leave the software vendors confident in the fact that you have probably missed something.