Any tips for planning a (self-inflicted) software audit? [closed]

Start by expecting the worst (ugh)...

You obviously need to have a full inventory of everything you SHOULD have in order to (in)validate what you actually DO have. This means having copies of all license certificates / agreements / etc. on hand. Good license management is soooo worth the time in order to maintain your business integrity in this area!

Depending on how anal you want to get, a good software inventory package will help you immensely. Something like what Altiris (now owned by Symantec) offers. CONFIGURE IT WELL before running your inventory or your inventory will be garbage.

Know what you're going to do with any violations that you find during the audit and communicate that clearly to the organization PRIOR to starting the audit. Many violations will magically disappear when this happens and you won't have to inventory them :)

Be prepared to shell out some cash to come into compliance when you find violations.


Don't run software that has per-seat or per-installation licences. Simplifies life immensely.