Building internal IBM license governance.
An audit is a test of records you should already keep. Governance is the practice of keeping them continuously, so the answer is ready before IBM asks the question. The estate that governs its own licensing is the estate that walks into an audit already reconciled.
Most companies meet IBM licensing only twice: at purchase and at audit. In between, the estate drifts. New servers come online, virtual hosts move, a product gets switched on for a project, headcount on a tool licensed per user grows quietly. None of that is tracked against entitlement until an audit forces the reconciliation all at once, under a deadline, with IBM controlling the framing. Internal license governance closes that gap. It is the ongoing discipline of knowing what you own, what you have deployed, and how the two reconcile, before anyone outside the company asks.
Governance is not a tool you buy or a project you finish. It is a small set of responsibilities, assigned to named owners, run on a fixed cadence. Done well, it turns the audit from an investigation into a confirmation: IBM reviews records you already maintain, against a position you already hold, and the room for surprise findings shrinks to almost nothing.
Assign ownership first
The single most common governance failure is that no one owns IBM licensing. Procurement holds the contracts, infrastructure runs the deployments, and finance pays the bills, but no one reconciles the three. Governance starts by naming an owner accountable for the IBM estate end to end, with a clear line into both procurement and infrastructure. That owner does not need to be a licensing specialist. They need the authority to see entitlement records, deployment data, and change activity in one place, and the mandate to keep them aligned.
The records governance keeps
A governed estate maintains a living view of a handful of artifacts, refreshed on a cycle rather than reconstructed in a panic.
- An entitlement register: every Passport Advantage part number, quantity, and metric you are licensed for, with version and upgrade rights noted
- A deployment inventory: where each product runs, on which hosts, under which metric, mapped to the entitlement that covers it
- ILMT health: agents deployed and reporting, products correctly classified, quarterly reports generated and retained for two years
- A change log: new installs, decommissions, virtualization moves, and capacity changes, captured as they happen rather than discovered later
- An offsets file: shelfware, prior version rights, and decommissioned capacity that reduce any future true-up or audit number
Make ILMT a standing process
Sub-capacity licensing rests entirely on ILMT, and ILMT is where governed estates and ungoverned ones diverge most sharply. To hold a sub-capacity position, the IBM License Metric Tool must be installed within ninety days of first sub-capacity deployment, run continuously, and produce quarterly reports kept for at least two years. A tool that was set up once and never checked drifts into the same noncompliance as no tool at all: missing agents, products bundled under the wrong metric, gaps in the report history. Governance treats ILMT as a service that is monitored, not a box that was ticked. Where it lapses, the fallback is full-capacity charging across the environment, which is exactly the exposure governance exists to prevent.
Run it on a cadence
The work is light when it is continuous and crushing when it is not. A quarterly reconciliation that checks deployment against entitlement, confirms ILMT health, and updates the change log keeps the estate audit ready year round. The same review surfaces optimization opportunities along the way: shelfware to redeploy, over-deployments to correct before they compound, metrics that no longer fit how a product is used. Governance pays for itself twice, once by shrinking audit exposure and once by trimming spend that drifted out of alignment.
An audit asks you to prove what you deployed against what you own. A governed estate already has that proof on file: a current entitlement register, a mapped deployment inventory, healthy ILMT, and a clean change log. The audit becomes a review of your records instead of a reconstruction under deadline, and that is the difference between confirming a position and defending a surprise.
Want your estate audit ready before the letter arrives?
Our Audit Negotiation engagement starts from a documented compliance position, the same governance discipline that keeps a buyer reconciled and ready to negotiate from a number they built.
See Audit Negotiation →The IBM Audit Brief
Audit triggers, ILMT pitfalls, and settlement tactics for IBM software buyers.
Independent, buyer side IBM software audit defense and negotiation. Not affiliated with IBM Corporation.