IT Service Delivery And Support Week Five

penredheadΔιαχείριση

18 Νοε 2013 (πριν από 3 χρόνια και 11 μήνες)

72 εμφανίσεις

IT Service Delivery And Support

Week Five

IT Auditing and Cyber Security

Spring 2013


Instructor: Liang Yao (MBA MS CIA CISA CISSP)

1


Potential Benefits


Challenges


Steps to SLM


Elements of SLM Solution


Effective Software Asset Repository


Emerging issues


Software license audit program


Software
License Management



Prevent illegal use of software


Reduce software purchase costs


Leverage exiting software license investments more
effectively


Reduce software maintenance costs


Identify potential security risks


Reduce risk associate planned changes


Reduce incidents associated with unapproved software
conflicts


Increase supportability of the environment


Improved internal cost allocation based on actual usage


Potential
Benefits



Array of licensing models and definitions


Identification of installed software


Use of browsers and generic clients


Comply with the agreement


Leverage of the software asset repository


Audit and coverage


Lock down


User resistance


Entitlement chains



Challenges



Define policy


Develop and public policies and procedure


Purchasing policy


Vendor management


IT service management tools to support SLM


Model standard


Software Asset Repository and Data collection


Review process


Review contract agreement


Reconciliation


Correction/remediation plan


User education






Steps
to SLM



Archive initial license compliance status


Proactive monitoring


Identify license errors


Reporting


Periodical review


Communication Channel


Projection


Disposal procedure






Steps
to SLM (Cont.)



Discovery tool


Usage monitoring tool


Software Asset Repository tool


Software Deployment tool






Elements
of SLM Solution



License lifecycle support


Contract management


Discovered vs. authorized reconciliation


Proactive management of license


Inventory management


Cost tracking


Request management and self service


Purchasing


Reporting solution


Integration with other systems





Effective
Software Asset Repository



Effective IT Asset Management


License Maintenance


Compliance/Reputational/Legal Risk


Do
-
it
-
early Than Later (expiration and renew)




SLM
Audit
Concerns



Policies and Procedures


Inventory Maintenance


Verify Assets Records Regularly


Inventory After M&A


Tools for Software Licensing Tracking


Procurement/sourcing


Centralized Procurement


Software license agreement






Recommendations


ISACA Sample Software License Audit Program





Audit Program