b lay oracle audit are you ready?
TRANSCRIPT
Presentation Richard Spithoven
Richard Spithoven2013 – presentDirector / Partnerb.lay, the license management company
2009 – 2013 REGINAL DIRECTORLMS Europe South
2005 – 2009 PRINCIPAL LICENSING CONSULTANTOracle EMEA
"Understanding the facts, enables you to make informed business decissions"
Presentation Richard Spithoven
Common misunderstandings & issues
What is an Oracle Audit1. Start2. Execution3. Closure
Under an Oracle Audit?- Things to consider- Tips & Tricks
Best solution to tackle an Oracle Audit
Agenda
Presentation Richard Spithoven
Common Misunderstandings & issues …
Not cooperating or delaying an Oracle Audit is ok !?
COLS Business Review ≠ Oracle License Review ≠ Oracle Audit.
End –users being re-active in terms of managing Oracle licenses en becoming (too late) active/ pro-active at the start of an Audit.
We are now using an Oracle Verified Tool, so we have full control?
It’s all in the details: - No clarity on the
real license entitlements
- No clarity on the real license deployment and licensable usage
Presentation Richard Spithoven
Start of an Oracle AuditA closer look at Oracle’s Standard Audit Clause
Upon 45 days written notice, Oracle may audit your use of the programs. You agree to cooperate with Oracle’s audit and provide reasonable assistance and access to information. You agree to pay within 30 days of written notification any fees applicable to your use of the programs in excess of your license rights. If you do not pay, Oracle can end your technical support, licenses and/or this agreement. You agree that Oracle shall not be responsible for any of your costs incurred in cooperating with the audit.
Presentation Richard Spithoven
Oracle License Management Services (LMS)
Organizations are selected for an audit by either:
. Oracle LMS
. Oracle Sales
License Compliance Risk analysis includes multiple parameters
(e.g. historical metrics, purchase date, mergers/acquisitions etc.)
Start of an Oracle Audit
Presentation Richard Spithoven
• “Notification Letter” to your CIO and/or CFO.
TWO• Oracle License
Review = Oracle License Audit!
THREE• Objective to
determine compliance issues ($) and cross/upsell opportunities ($)
FOUR• Single Point of
Contact
Start of an Oracle Audit
ONE FIVE
• Kick Off Meeting / Call
Presentation Richard Spithoven
Execution of an Oracle Audit Product Scope
JD Edwards
Siebel
E-Business Suite
DatabaseDatabase options
Database management packs
Application Server
Weblogic Server
SOA Suite PeopleSoft
Presentation Richard Spithoven
Execution of an Oracle Audit
._ Oracle software programs
._ Order Nr’s/Order Dates
._ Support Start Date, End Date
._ License Metric
._ License Level
._ License Status
._ other
License
Invento
ry
Presentation Richard Spithoven
Execution of an Oracle Audit
License
Invento
ry
OF OLSA
SR
SP1 PD10g BP
SR SR
SP2 PD11g
SR SR
Time
Presentation Richard Spithoven
Execution of an Oracle Audit
License
Invento
ry
Hardware Discovery1
._ Oracle Server Worksheet (*.xls)
._ CPU queries (OS Commands)
._ Screenshot of Virtual (VMware) Infrastructure Client
Presentation Richard Spithoven
Execution of an Oracle Audit
License
Invento
ry
Hardware Discovery1
Software Inventory2
._ Oracle Fingerprints
._ Oracle Discovery Tool (OMT)
Presentation Richard Spithoven
Execution of an Oracle Audit
License
Invento
ry
Hardware Discovery1
Software Inventory2
Software Configuration3
Oracle Product Specific Queries:
._ Review Lite (Database, DB Options, DB Packs) ._ FMW Script (Weblogic, OAS) ._ Siebel Extraction Scripts (Siebel) ._ Audit Trail (E-Business Suite) ._ Remote Review Tool (JD Edwards)
Presentation Richard Spithoven
Execution of an Oracle Audit
License
Invento
ry
Hardware Discovery1
Software Inventory2
Software Configuration3
Usage Determination4
Oracle Product Specific Queries:
._ Application Record Form (Database & Middleware)._ Siebel Usage Tracking feature (Siebel)._ Usage Based.sql (E-Business Suite)
Presentation Richard Spithoven
Execution of an Oracle Audit
License
Invento
ry
Hardware Discovery1
Software Inventory2
Software Configuration3
Usage Determination4
Non-system data5
Other items:
._ company file
._ hosting or not?
._ $ metrics
._ geographical
._ etc.
Presentation Richard Spithoven
Execution of an Oracle Audit
Hardware Discovery1
Software Inventory2
Software Configuration3
Usage Determination4
Contra
ct A
naly
sis
Non-system data5
Manual Data Gathering & Analysis
Tooling / scripts
Presentation Richard Spithoven
Oracle LMS – Final Report
• Oracle Compliance Policy ( 30 days policy
• Back Support Fees
Oracle Sales – Commercial Resolution
Full details of Oracle’s Compliance Policy can be found through:http://www.oracle.com/us/corporate/license-management-services/policy/index.html
Closure of an Oracle Audit
Presentation Richard Spithoven
Example:End-user has 2 Processor licenses Oracle Database Enterprise Edition but is found to make use of 3 Processor licenses Oracle Database Enterprise Edition for a period of 6 years:
List License: $ 47,500
List Support: $ 10,450
Standard Discount: 10%
Net License: $ 42,750
Net Support: $ 9,405
Back Support ( 6 years) 6 years x $ 9,405 = $ 56,430
Total Fees: $42,750 + $9,405 + $56,430 = $108,585
Why you should care, the cost of even ONE Processor license, out of compliance?
Presentation Richard Spithoven
Under Audit? Things to consider…
IRM involvement (sensitive, confidential
data)?
Can data gathered leave your premises?
Which results are shared when, and with whom from Oracle
Sales?
What is the performance impact of the Oracle Audit
tools proposed?
Presentation Richard Spithoven
Under Audit? Things to consider…
Make sure that you understand before the data is collected
How will this databe used?
Why is this data collected?
What data will be collected?
Whereis this data collected from?
Presentation Richard Spithoven
Enforce you know what will happen with the data before you share it:
• What will Oracle do with the data collected?
• Where will Oracle store the data collected?
• Who can access the data collected by Oracle?
Under Audit? Things to consider…
Presentation Richard Spithoven
Quick Risk Assessment
• Share and manage the expectations towards C-level
Internal Governance, Communication and Escalation Model
• Oracle Project Team
• SPOC (Project Manager)
• Legal, Purchasing/Vendor Management, IT Depts, Outsourcer
• Steering Committee
• C-level / Members of the Board
Data sharing within your company (leaking results externally)
Do your own research before (and during) the audit!
What to do to let things run smooth?
Presentation Richard Spithoven
Best Solution to tackle an Oracle Audit?
How?
Be pro-active and take the control
yourself
don’t wait until you get audited by
Oracle!
Perform regular internal license
reviews
determine your license compliance
position
&mitigate financial, operational and
legal risks.
Presentation Richard Spithoven
Some take-aways…
Create an internal software license management team of multiple disciplines (procurement, legal, DBA, Infrastructure Managers, Business Application Mangers, Outsourcers) with C-level sponsorship and review on a regular basis:
Make software license management a priority at C-level and budget for the proper software license management practice, tailored to the specific needs of your organization.
• your real license entitlements (incl. OD, OLSA, SR, SP, PD, BP)
• your real deployment and (licensable) usage of the software
• reconcile your license entitlements with your license deployment and usage in order to identify and address software license compliance issues proactively!
Presentation Richard Spithoven
① Oracle License Review or License Audit Answers to your Top 20 Questions
② Oracle Licensing Guide:Your quick Oracle Licensing Guide
③ Oracle Unlimited License Agreements (ULA):An overview of the major risks you should be aware of
④ Oracle Pool of Funds Agreements:An overview of the ins & outs of this type of agreement
⑤ Oracle E-Business Suite:An overview of the most common license compliance issues
Further reading on www.b-lay.com