《甲骨文公司瞬息萬變的審計格局:在甲骨文Java審計中生存.pptx》由會員分享,可在線閱讀,更多相關《甲骨文公司瞬息萬變的審計格局:在甲骨文Java審計中生存.pptx(27頁珍藏版)》請在三個皮匠報告上搜索。
1、Changing Landscape of Oracle AuditingSurviving an Oracle Java Audit1Michael CoreyDean BoltonDean BoltonDean BoltonCofounderCofounderDean Bolton launched his IT career in 2000 after completing his masters degree in computer science and engineering at the Massachusetts Institute of Technology.He start
2、ed working with Oracle databases at an internet systems and applications design firm early in his career.Since then,he has continued working as an Oracle developer,database administrator,architect,consultant,and evangelist.Today,Dean is the Chief Executive Officer of LicenseFortress,Inc.,a leading O
3、racle,Microsoft,IBM,and VMware SAM managed services provider.He also serves as the Chief Architect with a focus on Oracle software licensing.2Among Deans accolades and certifications include:Oracle DBA Certified MasterExadata SpecialistSQL Certified ExpertOracle ACE alumVMware vExpertDean is renowne
4、d as an Oracle licensing expert,having showcased his expertise at industry events such as:VMworldIOUG CollaborateUKOUGOpenWorldDr.Michael CoreyDr.Michael CoreyCofounderCofounder3Cloud:Top 100 Influencers for 2015/2017BLOG:http:/ Working with Oracle Version 3.0 Beta Tested Oracle 5,6,6.2,7,8.X,9.X.Pr
5、esented on Technology&Business Topics from Brazil to Australia Worked with Oracle on UNIX,Linux,Windows,MVS,VM,VMS,.Books Include:Virtualizing SQL Server with VMware Doing IT RightOracle Database 12c:Install,Configure&Maintain like a ProfessionalOracle 11g A Beginner s GuideOracle 10g A Beginner s G
6、uideOracle 9i-A Beginners GuideSQL Server 7 Data Warehousing Oracle8i-Data WarehousingOracle8i-A Beginners Guide Oracle8-Data Warehousing Oracle8 Tuning Oracle8-A Beginners Guide Oracle-Data Warehousing Oracle-A Beginners Guide Tuning OracleKey Past/Current AffiliationsPast President of the Independ
7、ent Oracle Users Group Founding Board IOUG Virtualization SIG&IOUG VMware SIGBoard Member International Association of Cloud and Managed Service ProvidersFounding Board Member Professional Association of SQL ServerPast Member IOUG Board of DirectorsTalkinCloud Top 200 Channel Partner Experts CloudPa
8、st Member Microsoft Data Warehouse CouncilPast Member Oracle Educational Advisory CouncilPast Director of Conferences IOUG AlivePast Executive Board Massachusetts Robert H.Goddard Council on Science,Technology,Engineering&Mathematics2014-20192012-20242012-2024Regular Columnist Big Data Quarterlyhttp
9、:/ and revenue-motivated audits are increasing for organizations of all sizes and industries”.Source:https:/ Software Audits Velocity to IncreaseAudits are on the rise,and theyre getting more expensive.According to Gartner,68 percent of enterprises get at least one audit request each year,a number t
10、hat hasclimbed steadily each year since 2009.The most frequent requests come from the usual suspects:Microsoft,Oracle,Adobe,IBM,and SAP.https:/ vendors are increasing license audits as necessary compliance checks to ensure fair Compensation.75 percent of software vendors believe their software is be
11、ing overused in violation of the licensing agreements”August 20206Expect Software Audits Velocity to IncreaseExpect Software Audits Velocity to Increasehttps:/ Do an Java Audit,Bet they are out of ComplianceIn a nutshell?In our observation,over the past year software license audits(and Oracle audits
12、 in particular)have been:(1)increasing in frequency;(2)more prone to prickly interim conflict;yet(3)have been more amenable to hurried resolution.https:/ a 2018 study,an astonishing“seventy-five percent of small organizations(500-1,500 users)reported between 1 to 3 audits in the past 3 years,an incr
13、ease of almost 40 percent since 2015”.Further,“40 percent of large companies report 4 to 10 audits in the past 3 years,an increase of 25 percent”https:/ Over the Last Three Years By Company Size8“Sweet Spot”“Big Enough to Have MoneySmall Enough to not haveResources to fight off the Audit”https:/ of
14、being Audited by Oracle41%Chance of being Audited by OracleWithin Next 3 YearsWithin Next 3 Years#Oracle is the#2 Most Likely Vendor to Audit You1 in 5 Oracle Java Users Can Expect be Audited Next 3 1 in 5 Oracle Java Users Can Expect be Audited Next 3 Years Years 10https:/ Gartner has also warned t
15、hat Oracle is ready to test whether users comply with Java licensing terms as it sees them.One in five Java users can expect an Oracle audit in the next three years,Gartner said.January 17,2024Oracle Announces You Must License Java for Oracle Announces You Must License Java for Commercial Use June 2
16、1,2018Commercial Use June 21,201811An Oracle customer purchasing a Java subscription at this time had two choices.Purchase a desktop subscription for$30 a year or a server subscription for$300 per processor,per annum.If the customer made a large purchase,typical volume purchase discounts were expect
17、ed.Typical Company Response12Why would I purchase a Java License?Its been free for the last 25 years!Year 2022,Oracle turns to Weapon Of Choice The AuditYear 2022,Oracle turns to Weapon Of Choice The Audit13“Like the Balloons in the Picture,Java was Everywhere”Weapon of Choice,The Audit Not Working1
18、4January 23,2023,Oracle Moves to Employee Based January 23,2023,Oracle Moves to Employee Based Licensing Model(Only Option Moving Forward)Licensing Model(Only Option Moving Forward)Moves away from the processor and named user plus license model.Moved to an Employee based Licensing model,“Employee fo
19、r Java SE Universal Subscription.”This means you license for the number of“employees”you have is not based on the number of users that actually use the product.15Employee is defined on the Oracle Subscription Global Price List as“(i)all of Your full-time,part-time,temporary employees,and(ii)all of t
20、he full-time employees,part-time employees and temporary employees of Your agents,contractors,outsourcers,and consultants that support Your internal business operations.”“Galaxy Licensing Oracle Java Style”Cost under the New“Employee Based”Model16Oracle Oracle willwill Seek Payment for Past Java Usa
21、ge Seek Payment for Past Java Usage17May1995January2019January 2019,Java SE 8 public updates will no longer be available for Business,Commercial or Production use without a commercial license.Oracle Announces You Must License Java for Commercial Use June 21,2018June2018January2023Sun Microsystems Re
22、leases JavaJune 23,2023,Oracle moved away from Processor and Named User Plus License Model.Oracle moved to Employee Based Licensing Model,“Employee for Java SE Universal Subscription:”Soft Audit/Submarine Audit Audit Du Jour18Answer one Question Wrong.A Torpedo launches,and before you know it,you ar
23、e sinking.Soft Audits Can Be More Dangerous Throws the Audit Word Out,Without Giving Official Audit Notice Official Audits Come with Obligations and Protections Without Official Notice,Protections are not in Place Soft Audit The vendor is Fishing for compliance issues This is a shakedown for Revenue
24、 You are under no Obligation to Answer Questions19Soft Audit is allowing Auditor to take free shots on the netSoft Audits Answer Wrong Vendor Sees Dollars signs and Pursues you Harder Vendors can and will ask Questions Beyond what is allowed during the audit.20 Providing dataoverwhatisrequiredmakesi
25、teasierforthevendortobuildamisleading caseofunder-licensing Only Provide Information Needed to Fulfil your Legal Obligation How You Answer Questions Matters/Prevents Scope Creep“Wrong Answer Moves Vendor Goal Post to More Expensive Location”Dont Go into a Gun Fight with A Knife21Remember VendorsHave
26、 a ConstantlyChanging Audit PlaybookSeek Professional Help During Vendor Audits During Vendor Audit Single Point Contact Insert Vendor Name will not hesitate to use information gathered from any means to expand the scope of audit Disclosure by an employee may waive your future rights inadvertently 2
27、2Single Point of ContactI only had 1 DrinkJava Is Everywhere The Reality You Need Java23Determine How to ProceedDetermine where Oracle Java is Installed Is the Installation of Oracle Java needed?Does a Limited Use License cover the needed usage Some Oracle Products include“Limited Use”Licenses Some Third-Party Products Include“Limited Use”Licenses Third-Party Products Request Alternatives to Oracle Java Determine What Was Owed for Past Usage Make a Business Decision On How to move Forward24This is not a complete List:2526https:/ Resources-https:/