Forensics & fraud blog

Interesting publication from the UK Serious Fraud Office providing comments on the impact of anti-fraud and anti-corruption legislation. It provides insights into current international legislation and related implications. Additionally it provides hands-on information regarding the management of forensic investigations and the implementation of preventive measures.

Serious Economic Crime: A boardroom guide to prevention and compliance

Granted, an audit is usually not perceived as a pleasant thing, but it doesn’t have to be a painful experience either.

Let’s imagine, for a moment, that you feel you have a rough idea what software is being used in your company. You have a robust security policy and more or less good guidelines on how software should be installed and used. But, you haven’t actually ever counted and verified against the contracts. Should you worry?

I am afraid the answer will be yes. Users often easily install software on corporate machines without giving it much thought. The company, however, can be held liable for this. But, the larger issues often lie within the server environment rather than the pc-environment. Due to the very nature of the software contracts and the rapid developments in IT, you can become heavily out of compliance by simple actions such as upgrading or changing a processor. As a result, a potential compliance audit by a software publisher may cause more disruption than desired and the findings may cause a small financial hangover. And if it doesn’t, you could worry that perhaps you have been spending too much on software.

For readers that just want to avoid worrying all together, maybe you want to think about a software asset management function. I will pick that up next time.

Cheers,
Sally