Re: Audit Questions
If you install it, you owe for it. Any installation creates a constructive liability.
Copyright Law - Title 17 of U.S. Code.
Organizations should, therefore, consider the business risks of uncontrolled installation of software, and the resulting, perhaps unplanned, liabilities. And, create controls appropriate to the risk.
We see companies that have gotten a single true-up settlement, with a single supplier, of 23% of the total IT budget. And, then, the other suppliers also seem to find out. If in an industry with high IT costs, say 7% - 8% of revenue, this can result in a unplanned liability in the 3% to 4% of overall revenue. Close to a reportable event on annual report. And, certainly, a huge unplanned expenditure.
Where companies are most at risk seems, these days, to be the uncontrolled use of "Cloud" and copies of platforms to the "Cloud" that create significant liability. A single Virtual platform can contain $30k or more of software - for which the company is instantly liable, most often without preventative controls.