38
The ITAM Review US Conference 2016 The ITAM Review US Conference 2016

Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

Embed Size (px)

Citation preview

Page 1: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016 The ITAM Review US Conference 2016

Page 2: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Page 3: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Richard Spithoven b.lay, the license management company

b.lay The license management company

Oracle LMS Europe South

Oracle EMEA

Director / Partner

20009 - 2013 Regional Director

2005 - 2009 Principal Licensing consultant

Page 4: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Common misunderstandings & issues

What is an Oracle Audit?

Best solution to tackle an Oracle Audit

Under an Oracle Audit

1. Start 2. Execution 3. Closure

- Things to consider - Tips & Tricks

AGENDA

Page 5: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Common Misunderstandings

& Issues

Not cooperating or delaying an

Oracle Audit is ok!?

COLS Business Review ≠ Oracle License Review

≠ Oracle Audit.

End –users being re- active in terms of managing Oracle

licenses

End- users becoming (too late) active/

pro-active at the start of an Audit.

We are now using an Oracle Verified Tool,

so we have full control?

Page 6: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Common Misunderstandings

& Issues

It’s all in the details: No clarity on the real license entitlements No clarity on the real license deployment and licensable usage

Page 7: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

What is an Oracle Audit?

Page 8: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Start of an Oracle Audit

Page 9: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Start of an Oracle Audit

Upon 45 days written notice, Oracle may audit your use of the programs. You agree to cooperate with Oracle’s audit and provide reasonable assistance and access to information. You agree to pay within 30 days of written notification any fees applicable to your use of the programs in excess of your license rights. If you do not pay, Oracle can end your technical support, licenses and/or this agreement. You agree that Oracle shall not be responsible for any of your costs incurred in cooperating with the audit.

A closer look at Oracle’s Standard Audit Clause

Page 10: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Start of an Oracle Audit Oracle License Management Services (LMS)

Oracle LMS Oracle Sales Historical metrics, purchase date,

etc.

Events like Mergers &

acquisitions

License Compliance Risk analysis includes multiple parameters

ORACLE LICENSE MANAGEMENT SERVICES

Page 11: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Start of an Oracle Audit

Notification letter to your CIO and/ or CFO

Oracle License review = Oracle license audit!

Single point of contact 4. Contact 2. Oracle License review

1. Notification Letter Objective to determine

compliance issues ($) and cross / upsell opportunities

Kick off meeting or call 3. Determine issues 5. Kickoff meeting

Page 12: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Oracle Database, Options, Mgmt Packs

Oracle Application Server

Oracle Weblogic Server

Oracle SOA Suite

Oracle JD Edwards Oracle Siebel

Oracle E-Business Suite

Oracle PeopleSoft

Execution of an Oracle Audit Product Scope

Page 13: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Execution of an Oracle Audit License Inventory Report

License Inventory Report

Page 14: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Execution of an Oracle Audit

www.oracle.com

2016 2015 2014 2013 2012 20111 2010 2009

License Inventory

SP1 PD10G BP

SR SR SR SR SR

SP2 PD11G

OF OLSA SR

Page 15: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Execution of an Oracle Audit License Inventory

._ Oracle Server Worksheet (*.xls)

._ CPU queries (OS Commends)

._ Screenshot of Virtual (VMware) Client

Hardware Discovery

1. Hardware Discovery

Page 16: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Execution of an Oracle Audit License Inventory

._ Oracle Fingerprints

._ Oracle Discovery Tool (OMT)

Software Inventory

1. Hardware Discovery

2. Software Inventory

Page 17: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Execution of an Oracle Audit License Inventory

Oracle Product Specific Queries: ._ Review Lite (Database, DB Options) ._ FMW Script (Weblogic, OAS) ._ Siebel Extraction Scripts (Siebel) ._ Audit Trail (E-Business Suite) ._ Remote Review tool (JD Edwards)

Software Configuration

1. Hardware Discovery

2. Software Inventory

3. Software Configuration

Page 18: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Execution of an Oracle Audit License Inventory

Oracle Product Specific Queries ._ Application Record Form (Database & Middleware) ._ Siebel Usage Tracking feature (Siebel) ._ Usage Based.sql (E-Business Suite)

Usage Determination

1. Hardware Discovery

2. Software Inventory

3. Software Configuration

4. Usage Determination

Page 19: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Execution of an Oracle Audit License Inventory

._ company file

._ hosting or not

._ $ metrics

._ geographical

._ etc.

Other Items

1. Hardware Discovery

2. Software Inventory

3. Software Configuration

4. Usage Determination

5. Non-System Data

Page 20: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Execution of an Oracle Audit License Inventory

Manual data gathering & Analysis

1. Hardware Discovery

2. Software Inventory

3. Software Configuration

4. Usage Determination

5. Non-System Data

Tooling / Scripts Con

trac

t Ana

lysi

s

Page 21: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Full details of Oracle’s Compliance Policy can be found through: http://www.oracle.com/us/corporate/license-management-services/policy/index.html

Closure of an Oracle Audit

-  Oracle Compliance Policy ( 30 days policy) -  Back Support Fees

Commercial Resolution

Oracle LMS - Final Report

Oracle Sales

Page 22: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Why you should care! The cost of even ONE Processor license,

out of compliance?

Page 23: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Example Why you should care, the cost of even ONE Processor license, out of compliance

End-user has 2 Processor licenses Oracle Database Enterprise Edition but is found to make use of 3 Processor licenses Oracle Database Enterprise Edition for a period of 6 years.

List License:

Net License

Back Support ( 6 years) TOTAL FEES:

Net Support

Standard Discount List Support

$ 47,500

$ 10,450 10% $ 42,750 $ 9,405

6 years x $ 9,045 = $ 56,430 $ 42,750 + $ 9,405 + $ 56,430 = $ 108,585

%

Page 24: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Does IRM needs to be involved

Can data gathered leave your premises?

What is the performance impact of the Oracle Audit tools proposed?

Which results are shared when, and with whom?

Under Audit? Things to consider …

Page 25: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Make sure that you understand before

the data is collected:

WHY is this data collected

WHAT data will be collected

WHERE is this data collected

from?

HOW will this data be used?

Page 26: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Enforce you know what will happen with the data before you share it:

What will Oracle do with the data collected? Where will Oracle store the data collected? Who can access the data collected by Oracle?

Under Audit? Things to consider …

Page 27: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

What to do to let things run smooth

Quick Risk Assessment Internal Governance, Communication and Escalation Model

Data sharing within your company

Do your own research before (and during) the audit!

Page 28: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Best Solution to tackle an Oracle Audit

Regular internal reviews Pro Active

Mitigate Risk HOW?

Be pro-active and take the control yourself. Don’t wait until you get audited by Oracle.

Perform regular internal license reviews. Determine your license compliance position.

Mitigate financial operational and legal risk.

Page 29: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Time for a little Quiz….

Call out 5 different contractual documents, online documents as referred to in these contractual

documents and/or online licensing documentation, that should be understood

and maintained in order to

a) understand your real Oracle entitlement(s) and

b) understand how to license the Oracle software in specific scenario’s?

Page 30: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Time for the possible answer(s)

- Program Documentation - Application Licensing Table - Processor Core Factor Table

Online Documents as referred to in contractual documents:

Business Practice Documentation as not referred to in contractual documents: - Software Investment Guide - Server Partitioning Policy - Licensing Data Recovery Environments - Licensing Data Transfer Environments - Licensing Oracle Software in the Cloud Computing Environment - Oracle Technology Hosting

- Ordering Documents - License Agreements (SLSA, OLSA, OMA) - Support Maintenance Renewals

Contractual Documents:

!

Page 31: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Time for the winner(s)

Page 32: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Page 33: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Further reading on www.b-lay.com

Do you want to know more about different related license management topics? please read our white-papers: http://white-paper.b-lay.com/

Oracle License Compliance: •  Oracle Audit, Answers to your top 20 questions •  Oracle Database, The most common license compliance issues seen •  Oracle E-Business suite, The most common license compliance issues seen •  Oracle Siebel CRM, The most common license compliance issues seen •  Oracle JD Edwards, The most common license compliance issues seen Oracle License Agreements: •  Oracle Unlimited License Agreements (ULA), not that unlimited! •  Oracle Pool of Funds Agreements, An overview •  Oracle Enterprise License Agreements, This is how it works

Page 34: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

If you are in need of extra expertise and a structured approach, feel free to contact b.lay. We will help you make software compliance an exciting opportunity to improve your business!

Page 35: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

b.lay The License Management Company Effective use and management of software assets

b.lay was founded with the simple philosophy that at the core of the software asset management process there must be a consistent, well structured and reliable record of the facts. Our goal is to be innovative and to realize long term concepts that provide clarity and tangible benefits to our clients whilst keeping an open mind by learning from others and staying true to our personal beliefs.

Simplify License management

b.lay Solutions b.lay solutions help your business to discover the opportunities to be gained through the effective use and management of software assets. We offer a range of practical solutions and a logical combination of services and software that enable you to take control of your software assets. Our clear-cut and practical procedures are cost effective and benefit from rapid and agile implementation. We convert the fog of complexity into a few simple steps and can help you identify opportunities for consolidation and optimization.

Page 36: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

b.lay The License Management Company If you are in need of extra expertise and a structured approach, feel free to contact me!

www.b-lay.com

[email protected]

Follow me on LinkedIn

Follow b.lay on LinkedIn

Maliebaan 79, Utrecht

[email protected]

https://nl.linkedin.com/in/richard-spithoven-4553ba1

https://www.linkedin.com/company/b-lay

L  

L  

Page 37: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Thanks for Watching

Page 38: Are you the next sitting duck that will be moved to the Oracle Cloud as a result of an audit?: Richard Spithoven - b.lay (ITAM Review US Annual Conference 2016)

The ITAM Review US Conference 2016

Thanks for Watching