Australian Software Asset Management Association

Rule

 

 

Software Asset Management Product Life Cycle

       

        ASAMA

The requirements for managing software products as part of the Software Asset Management (SAM) lifecycle can be defined into a number of complex and intertwined issues. The approach and the timing of the required actions to address these issues will depend on dependencies on other actions being completed or commenced; thereby some actions need to be executed in a pre-defined order, whilst other actions should run in parallel with others. Some issues or parts of issues may well be managed or decided upon by other areas within your organisation, if this occurs there is extra emphasis on your communication and coordination skills in keeping all of the lifecycle categories aligned.

Software should be procured based on a business requirement. Often in IT we have people aligned to technologies and their consideration of available software products is limited to a vendor or a small subset of vendors. The reason for this is that due to the highly specialised nature of IT, people learn a particular technology platform and a range of similar technologies and in the majority remain with these technologies. At times some people can forget who they are employed by, this is noticeable when they undertake actions on behalf of vendors, which they should not be doing. The vendors also seek out the people aligned to their technologies, to push forward the vendors argument on why their product should be purchased over another vendors product. As a Software Asset Management professional you should have no such alignment to any vendor, your role is to be totally independent and to represent your organisation to the best of your ability.

Architects, application and infrastructure solution designers should be seeking advice on the  software licensing costs, over the software lifecycle. Virtualisation solutions have become one of the major issues facing software licensing in cost and compliance management. Too often architects, application and infrastructure solution designers seem to be in total denial of the costs of software in a virtualised environment. They continue to have the simplistic view that it’s cheaper because less hardware is required, without considering the software cost. Hardware in itself has very low margins and is these days assigned as a commodity item. The flow-on cost reductions in computer rooms floor space, utility costs and operations that is usually attributed to virtualisation, could also be achieved if architects, application and infrastructure solution designers, co-hosted systems rather than run them independently. Unless the IT department in your organisation is a highly well tuned machine where the architects, application and infrastructure solution designers do seek the guidance of the costs of software licensing over the software lifecycle, you will have to be pro-active to implement the necessary policies, processes and procedures for Software Asset Management.

You should undertake a scan of your IT Department and understand what are the processes and procedures that already exist for the architects, application and infrastructure solution designers, your purpose should be to imbed software licensing as one of the key decision items in their considerations. The use of policy will always corral the people that do not want to involve software licensing in the decision making process.

In imbedding software licensing requirements into policy, process and procedures, your role is to provide information that includes the costs, the terms and conditions of the licence and the possible licensing models for the various options under consideration. One of the main goals of a software asset management team should be to continually attempt to achieve product standardisation.  Any reduction in; complexity, the number of licensing models, the number of vendors and variations in the terms and conditions will improve the Software Asset Management capability in your organisation.

Software that is required for projects should have funds identified in the project.  Good project managers will have these software costs included in the projects budget. Unfortunately there are many bad project managers that would not have done this and the most dangerous ones of all, are the project managers that have not provided the full costs of the projects, in order to gain business signoff at project initiation stage. Usually when software funding hasn't been budgeted for, there is an attempt by some project managers to shift the issue to you. The ownership of these funding issues remain with the project manager, they do not belong to software asset management team.

The software asset management team role of providing costs, licensing models and the terms and conditions for the various options under consideration, also includes the responsibility that the software asset management team actually have the capability to undertake this advisory role. It is extremely important that your team does not fail at this point; otherwise the whole Software Asset Management program could be placed at risk through non-performance. If your team is not at this level of capability then you should be considering how can the skills, knowledge and experience be acquired quickly. Usually a short term and long term approach is undertaken. In the short term external people who have the required skills, knowledge and experience are bought into the organisation to quickly provide the required capability. The longer term approach is to use these external people to provide knowledge transfer to the existing organisation staff over a period of time. This will enable the organisations staff to be self-sufficient and to provide the required capability to the organisation. 

When the architecture has been determined but the solution design is reliant on industry proposals, this is an advantageous position to be in. With vendors competing against each other, the use of market tenders can place your organisation in a good negotiation position. Whether these market approaches are very broad or limited to just a few vendors, your bargaining power on the terms and conditions, and the cost of licences is greatly enhanced.

One of the conditions for purchase that you place on the vendor is the responsibility that the vendor provides the products identification signatures for your software asset management tool and/or the management processes and procedures that their software requires to ensure effective compliance management. These management processes and procedures cannot be burdensome on your software asset management team and if they appear they would be, then different arrangements should be negotiated. You do not want to expose your organisation to a high risk, if the software cannot be managed that ensures compliance to the licensing terms and conditions.

Usually software licensing is purchased with maintenance and support costs each year, which usually ranges from 18% to 24% of the licence purchase cost. This payment entitles your organisation to version upgrades and support for the software product. The issue your software asset management team will need to manage throughout the software lifecycle is the licensing requirements for the version upgrades. The yearly cost of maintenance and support should have been identified in the budget, therefore this should be a straight forwarded payment process. The terms and conditions of the EULA, which can change between software versions, needs to be closely managed. Prior to implementing a version upgrade, a review of the EULA that applies to the new software version being implemented needs to be undertaken. The whole process of review and follow-on actions from the review can take quite some time to complete, as you will find that you are either negotiating with the vendor on changes to the EULA or a change in the management approach of the software. In order to give your software asset management team the time it needs to undertake its various roles, you will need to be well aware of the work plan for the infrastructure and application teams to identify software version upgrade plans. For software licensing that was purchased without maintenance and support, this introduces additional management responsibilities for your software asset management team, as they now need to manage multiple versions of software, that usually means multiple versions of software EULA’s. If you have software without maintenance and support, then your organisation does not have the rights to upgrade that software to a later version to the original purchased version.

There are many changes to a software product during its lifecycle. Most products will be affected by a vendors decision to rename a software product, bundling a software product with other software products, breaking the software products into parts and creating new software products and retiring the software product. All of these changes need to be managed by your software asset management team. The key issues that need to be managed are software licence entitlements, terms and conditions, software packaging and record keeping.

At a minimum your organisations software licence entitlements should allow you to continue to use the software in its renamed state. Whether the vendor bundled the software with other software or broke it down to a range of new products is immaterial. Access to the software to continue to use the capability that it was originally purchased for, is a right you should not give up. Prior to purchasing the software, you should have negotiated the right to access the software capability even if its been re-bundled or broken down into several new software products. If this wasn't previously negotiated, you can still negotiate with the vendor after you have bought the software, its just more difficult to do so. The vendor will make an argument that this is not possible, the new features go well beyond what you paid for and other similar statements, however it’s not your problem that the vendor has undertaken these actions with the software products you have software licensing entitlement to. The issue remains with the vendor.

Another issue that arises from the preceding paragraph is changes to the EULA terms and conditions. Unless your organisation is upgrading the software version, you do not have to accept a new EULA from the software vendor. Stand your ground as outlined in the previous paragraph. The new EULA's terms and conditions is the vendors issue. Compliance is also affected by the changes to the vendors software product. This issue should be raised with the vendor on how they are going to ensure that you remain compliant with the new software changes. This could lead to renegotiation on the vendor providing access to the full software bundle in order to access the existing licensed capability or in the vendor having to supply the software product that your organisation has entitlement, in an unbundled state.

When changes have been made with software products, this usually means that the distribution of the software has changed, particularly with software products that are now bundled with other software products. If your negotiations with the vendor have not resulted in you having entitlement with the full bundle of products, then this may cause a compliance risk. The risk is if the new software bundle is installed for the purposes of using the existing software, the IT staff start to use the rest of the bundled software capability, that your organisation is not licensed for.

Record keeping of all the changes is an extremely important action to undertake. All correspondence with the vendor, including meeting notes should be captured and stored on your organisations record management system. These records will become quite valuable if there is ever a future disagreement between the vendor and your organisation on software entitlements and the associated terms and conditions. Changes to the software products discussed above need to be mapped within your software asset management tool or your software entitlements register to ensure the day to day management of this software can continue and there is a full line of sight of the software since it was first purchased and implemented into your IT environment.

Service management is an important control mechanism for the deployment of software to the approved solution design. A mature service management function in the IT Operations will make the life of the software asset management team just that little bit easier. Most organisations based their service management capability on the ITIL framework. Whilst this framework is only part of the overall requirement for a successful Software Asset Management program, none-the-less it is an important part of Software Asset Management.  

Software received from a vendor should go through a standard process of being checked for malicious code, accepted into inventory, assigned to an owner, the software asset management tool configured and all the accompanied paperwork filed, where it can be retrieved at a latter date. The use of the corporate record management system is important, so that the required reocrds can be found by other authorised people in your organisation. Some records potentially could be required for more than 10 years. During such a long time period it is quite likely that the person who managed the software receipt from the vendor has left the organisation, moved to another role or would not be able to recall by memory any necessary details of the software receipt process. A robust, standardised and repeatable process on software receipting will address these shortfalls over an extended period.

It is quite common that  a software library is available to store and catalog the software. Usually software is downloaded from the vendors web site, however some vendors will still supply software on DVD media. Due to cyber security precautions, software should be checked and tested for malicious code. If the software is found to contain malicious code, the contract with the vendor should include liability clauses against the vendor, to address this situation.

As the software is being deployed into the environment, the software asset management tool should be used to verify the deployment. If the licence model cannot be monitored by the software asset management tool, then processes need to be implemented to make up for this capability shortfall. Either the software asset management tool or the new procedures and/or a combination of both are required to manage the software whilst it is installed in the environment.

All software has a finite useful life and it will need to be removed from the environment when it is no longer contributing to achieving the organisations outcomes. There may be a requirement to write down the software from the financial books. The contract or licence agreement will need to be analysed to determine if any special conditions exist when the software is no longer required. All records that have been acquired during the life of the software need to be centralised and filed for possible use in the future.

The requirements for managing software products as part of the Software Asset Management lifecycle are quite complex, ever changing and need to be undertaken over many years, whilst ever the software is installed in your IT environment. This article has touched on some of the issues that need consideration and what actions need to be undertaken. The requirements for effectively managing the complexity and the depth of issues that these actions will encounter, are not addressed here. The information that addresses these types of requirements will be included in the topic specific articles and in-depth insights articles.  

(IE Printing: - There are known IE printing problems that affect certain printer brands and printer types; Chrome and Firefox have no reported issues.)