Software Licensing How good is your SAM ? are you prepared for a Software Audit?

1. Michael Cooper, West Virginia University Software LicensingHow good is your SAM ?are you prepared for a Software Audit?

2. West Virginia University • Public, land-grant institution, founded in 1867. Located in Morgantown, West Virginia • Sixteen colleges and schools offering 185 bachelor's, master's, doctoral, and professional degree programs • Main campus: 29,500 students 21,500 undergraduate • 8000 faculty/staff • Four regional campuses • WVU Extension Offices in all 55 counties

3. POLL Recently received Compliance Audit notice Ongoing Compliance Audit Completed Compliance Audit Never been audited

4. What is SAM? Software asset management(SAM) is a process • managing and optimizing the purchase • deployment • maintenance • utilization • disposal

5. ITIL defines SAM as “…all of the infrastructure and processes necessary for the effective management, control and protection of the software assets…throughout all stages of their lifecycle.”

6. Goals of SAM • Reduce costs • Limit risk related to the ownership and use • Maximize responsiveness and productivity

7. Capabilities • A single interface to deploy all hardware/software inventory and IT asset management processes • Asset data audit, tracking • Tracking of all hardware/software assets within a single database • Asset tracking throughout the lifecycle including move, add, change and delete activities • Service and maintenance contracts ensuring accurate tracking of financial and service impacts of asset changes • Software metering functionality providing accurate monitoring of application usage • Details on discovered software applications

8. Levels of SAM • Post graduation employment • Meaningful sense of inclusion • Sensitivity and flexibility • Fun place to work

9. The future is “CLOUD” • SaaS – Software as a Service • PaaS – Platform as a Service • IaaS – Infrastructure as a Service

10. SAAS • most hype/focus • USD $12bn in 2011/$22bn by 2015. • Salesforce.com and Office365. • The SaaS providers bill monthly • systems and processes can cope with monitoring SaaS spend

11. PaaS • relatively uninteresting to the enterprise. • Azure and Cloudbees are examples of PaaS. • USD $0.5bn in 2011 / 2015 $1.7bn, • PaaS is mainly used by SaaS companies as a platform for their offerings and to interconnect data.

12. IaaS • Where your focus as an enterprise SAM practitioner needs to be. • The phrases “Internal Cloud”, “External Cloud” and “Hybrid Cloud” typically refer to IaaS clouds. • Moving from physical servers to an internal, shared services cloud of VM’s is what IaaS is all about. • Migrating from internal VM’s to externally hosted VM’s in Amazon AWS or Rackspace is also IaaS. • USD $4.2bn in 2011. / $19.6bn by 2015 – • IaaS is the game changer for enterprise/corporate IT.

13. Take on Too Much • Prioritize the events and vendors • Go for quick wins!! • CRAWL, WALK, RUN • 80% software spend = 20% supplier portfolio

14. Just A tool won’t Do IT!! • People • Processes • Tools • = Savings and compliance

15. Define Success • Define metrics and dashboards • Measure • Not just back office function • = Savings and compliance

16. Resources 1. ISACA audit program ‘Software Licensing’ www.isaca.org 2. COBIT 5: a) APO10.02 Select suppliers b) BAI03.04 Procure solution components c) BAI09.05 Manage licenses 3. TechRepublic’s Software license compliance in 6 easy steps: http://www.techrepublic.com/article/get-it-done-software-license-compliance-in-six-easy-steps/5034304 4. Business Software Alliance http://www.bsa.org/country.aspx?sc_lang=en 5. Business Software Alliance: Software Audit Tools http://www.bsa.org/country/Tools%20and%20Resources.aspx 6. Business Software Alliance: Government Guide for Software Management http://www.bsa.org/~/media/C72B329D6F7E4B46A7467DE0151210A1.ashx 7. eHow’s Prepare for Software Licensing Audit: http://www.ehow.com/how_2102721_prepare-software-licensing-audit.html 8. Sassafras KeyServer http://www.sassafras.com/auditing.html

17. Can you answer these questions? How does your institution track software? How many resources are deployed for SAM? Have you used Engagement Services such as SoftAID or CDW? How are your resellers helping you with SAM? Does your Internal Audit office understand the risks? Are all your Software agreements reviewed by General Counsel?

18. Poll Audited by Microsoft Adobe Oracle Novell Other

19. DISCUSSION

20. Adobe Changes - Concurrency After your CLP expires, you no longer can use concurrent licenses in non-classroom/library installations. This impacts those who are using concurrent licenses to deliver Adobe products to staff and faculty in their administrative offices or laptop computers. Concurrent licenses can be used to install the product on a single user PC.

21. Adobe Maintenance As of Jan 1, 2013 not available on: Design Standard Design and Web Premium Production PremiumMaster Collection Photoshop CS6 Photoshop CS6 Extended Illustrator CS6 InDesign CS6 Flash Pro CS6Dreamweaver CS6 Fireworks CS6 Premiere Pro CS6 After Effects CS6 Audition CS6 SpeedGrade CS6Prelude CS6 InCopy CS6

22. Adobe Options Individual products – perpetual license Enterprise Term Licensing Agreement Creative Cloud - Future

23. DISCUSSION

24. Audit Process