Mitigating risks of license non-compliance How our forensic technology and IP compliance team can help

Mitigating risks of license non-compliance How our forensic technology and IP compliance team can help

1 Mitigating risks of license non-compliance

Addressing the inherent risk of software license non-compliance

Organizations are finding it increasingly difficult to manage their software licenses.

The challenges originate from the inherent characteristics of an intangible asset such as software, which is very difficult to track and quantify. Furthermore, licensing rules change dynamically from publisher to publisher and product to product. Our team can help you obtain knowledge on licensing rules by preparing an accurate inventory of your usage/purchases, and also use forensic tools to uncover misuse of software.

What you require• Exhaustive inventories of licenses capturing what is used, how much is used and who is using it

• Identification of all license purchases till date in various forms and through different channels

• Forensic analysis of license misuse in the form of cracks and pirated keys

• Detailed report quantifying overall exposure and usage on the basis of specific product-/brand- licensing rules

• Tools and processes to proactively manage software assets in future

• Elimination of wastage, financial/legal/InfoSec risks due to unauthorized software usage

Addressing “pain” areas relating to software license life cycle

Procurement

Deployment

Utilization

Maintenance

Retirement

Mitigating risks of license non-compliance 2

Benefits to you • Accurate and up-to-date knowledge

relating to your utilization and investment in software

• Avoidance of reputation risk and unpleasant surprises during settlement of license audits by software publishers by complying with licensing terms and agreements

• Implementation of industry standard best practices relating to software asset management and compliance

• Identification of pirated cracks and license keys to help you avoid huge fines during license audits, so that you can take preventive action immediately

• Increased awareness pertaining to the do’s and don’ts to help you manage your software contracts and processes to avoid risks, e.g., the risk of procuring counterfeit software that looks genuine

What can go wrongIncreased costs and exposure• Increased procurement costs due to unavailability of accurate inventory of purchases

• Increased financial exposure during publisher-driven spot audits due to over-usage of licenses

• Increased cost of maintenance/support due to non-standard version of product used

Increased risk to reputation• Software publishers drive license audits aggressively, and any exposure, even if it is unintended, can result in loss of reputation.

Increased threat to information security• The presence of pirated cracks and keys, installed by a rogue employee, can circulate across the network and cause stability issues.

Lack of control and productivity• The absence of automated tools and processes makes it difficult for an organization to exercise control over its software assets,

which results in incorrect accounting and reporting.

• Additional support FTEs are wasted while tracking and supporting software manually.

3 Mitigating risks of license non-compliance

Compliance

Financial benefits

Resource planning and utilization

Corporate value

People

Proc

ess

Technology

Assets

Acquisi

tion

manag

emen

t Deployment

management

Retirement

managementLife

cycle

support

Mitigating risks of license non-compliance 4

Area Your need Pain areas Our suggested solution

Software deployment management

Accurate reporting of software inventory

• Lack of product- specific licensing

• Unavailability of efficient reporting tools

• Significant asset base

• Prepare accurate software deployment summary

• Provide product/publisher-specific licensing view

• Ensure maximum coverage of 90%+

Software entitlement management

Accurate entitlement statement (procured licenses)

• No single view of what has been procured by the organization

• No view of software publisher partnership licenses

• Provide accurate listing of software license entitlements

• Provide access to online automated dashboards for regular review

Process and Automation Is there a presence of malicious code e.g. crack in the organization

• Cracks bypassing normal licensing mechanism and being hard to detect

• Software publishers levying huge fines due to identification of cracks during license audits

• Provide an accurate GAP analysis of what is deployed vs. what is the entitlement

• Develop a maturity model that can be tracked by stakeholders in the future

Malicious Codes Is there a presence of malicious code e.g. crack in the organization

• Cracks bypassing normal licensing mechanism and being hard to detect

• Software publishers levying huge fines due to identification of cracks during license audits

Identify presence of malicious codes, cracks, illegitimate license keys, counterfeit software, etc., helping the organization take informed decisions prior to license audits

Team credentials• ► Instrumental in establishing software license

compliance programs for software publishers such as IBM, Microsoft, Attachmate, Quest, Oracle, BEA Systems and Hewlett-Packard

• ► Hands-on and project management experience of 1000+ enterprise and SMB reviews

• ► Certified resources for publishers such as Microsoft, IBM and BEA Systems

• ► Customized tools and scripts developed to assist in review processes

• ► Assistance in international practice; carrying out license compliance reviews in software publishers’ regions

• ► Instrumental in formulating software asset management best practices in their regions

• ► Wide experience in helping various software publishers understand licensing terms and conditions of partnership licenses

*These are team credentials and may not be firm credentials entirely

Have questions about a specific EY service? Whatever your inquiry, we’ll help direct you to the right place.www.ey.com

The choice is yours!Go to www.ey.com/india

More ways to stay connected to Ernst & Young

Assurance, Tax, Transactions, Advisory We provide services to help you retain confidence of investors, manage your risk, strengthen your control and achieve your potential.

Center of excellence for key sectorsWe have specialized teams that bring sector knowledge to you.

Read more on www.ey.com/Services

Read more on www.ey.com/industries

Publications — easy to use subscription form

http://webcast.ey.com/thoughtcenter/

Webcasts and podcasts

www.ey.com/subscription-form

Subscribe to our...

Services for you...

Sector knowledge

Mitigating risks of license non-compliance 6

Contact us

Our officesAhmedabad2nd floor, Shivalik IshaanNear. C.N Vidhyalaya Ambawadi, Ahmedabad – 380015 Tel: +91 79 6608 3800Fax: +91 79 6608 3900

Bangaluru12th & 13th floor “U B City” Canberra Block No.24, Vittal Mallya Road Bangaluru – 560 001 Tel: +91 80 4027 5000 +91 80 6727 5000Fax: +91 80 2210 6000 (12th floor)Fax: +91 80 2224 0695 (13th floor)

Chandigarh1st Floor SCO: 166-167Sector 9-C, Madhya MargChandigarh – 160 009 Tel: +91 172 671 7800Fax: +91 172 671 7888

ChennaiTidel Park, 6th & 7th Floor A Block (Module 601,701-702)No.4, Rajiv Gandhi Salai Taramani Chennai – 600113Tel: +91 44 6654 8100Fax: +91 44 2254 0120

Hyderabad Oval Office 18, iLabs Centre,Hitech City, Madhapur,Hyderabad – 500081Tel: +91 40 6736 2000Fax: +91 40 6736 2200

Kochi9th Floor “ABAD Nucleus”NH-49, Maradu PO, Kochi – 682 304 Tel: +91 484 3044000Fax: +91 484 2705393

Kolkata22, Camac Street 3rd Floor, Block C” Kolkata –700 016 Tel: +91 33 6615 3400 Fax: +91 33 2281 7750 Mumbai 6th Floor Express Towers Nariman Point Mumbai – 400021 Tel: +91 22 6192 0000 Fax: +91 22 6192 2000

14th Floor, The Ruby29 Senapati Bapat MargDadar (west)Mumbai – 400 028, IndiaTel: +91 22 6192 0000Fax: +91 22 6192 1000

5th Floor Block B-2, Nirlon Knowledge ParkOff. Western Express HighwayGoregaon (E)Mumbai – 400 063, IndiaTel: +91 22 6192 0000 Fax: +91 22 6192 3000

NCRGolf View Corporate Tower – BNear DLF Golf Course, Sector 42Gurgaon – 122 002Tel: +91 124 464 4000Fax: +91 124 464 4050

6th floor, HT House18-20 Kasturba Gandhi MargNew Delhi – 110 001Tel: +91 11 4363 3000Fax: +91 11 4363 3200

4th & 5th Floor, Plot No 2B,Tower 2, Sector 126,NOIDA – 201 304Gautam Budh Nagar, U.P. IndiaTel: +91 120 671 7000Fax: +91 120 671 7171

PuneC—401, 4th floorPanchshil Tech ParkYerwada (Near Don Bosco School)Pune – 411 006Tel: +91 20 6603 6000Fax: +91 20 6601 5900

Sandeep BaldavaPartnerDirect Tel: +91 40 67362121Email: Sandeep.Baldava@in.ey.com

Mukul ShrivastavaExecutive DirectorDirect Tel: +91 22 61922777mukul.shrivastava@in.ey.com

Vivek AggarwalExecutive DirectorDirect Tel: +91 124 464 4551vivek.aggarwal@in.ey.com

Anurag KashyapDirectorDirect Tel: +91 22 67498064anurag.kashyap@in.ey.com

Jagdeep SinghDirectorDirect Tel: +91 20 6603 6119Email: jagdeep.singh@in.ey.com

50%

Ernst & Young Pvt. Ltd.

Assurance | Tax | Transactions | Advisory

About Ernst & YoungErnst & Young is a global leader in assurance, tax, transaction and advisory services. Worldwide, our 144,000 people are united by our shared values and an unwavering commitment to quality. We make a difference by helping our people, our clients and our wider communities achieve their potential.

Ernst & Young refers to the global organization of member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. Ernst & Young Pvt. Ltd. is one of the Indian client serving member firms of EYGM Limited. For more information about our organization, please visit www.ey.com.

Ernst & Young Pvt. Ltd. is a company registered under the Companies Act, 1956 having its registered office at 22 Camac Street, 3rd Floor, Block C, Kolkata - 700016

© 2010 Ernst & Young Pvt. Ltd. All Rights Reserved.

This publication contains information in summary form and is therefore intended for general guidance only. It is not intended to be a substitute for detailed research or the exercise of professional judgment. Neither EYGM Limited nor any other member of the global Ernst & Young organization can accept any responsibility for loss occasioned to any person acting or refraining from action as a result of any material in this publication. On any specific matter, reference should be made to the appropriate advisor.

In line with Ernst & Young’s commitment to minimize its impact on the environment, this document has been printed on paper with a high recycled content.

www.ey.com/india

EYIN1009-104 Mitigating risks of license non-compliance (India). Artwork by Rashi Sinha.