A leading university system cut its IBM audit exposure by 85 percent. Decentralized IT had created the gap on paper; entitlement reconciliation and ILMT repair closed it.
A leading university system received an IBM audit notification covering an estate spread across dozens of faculties and research units. Decentralized purchasing meant nobody held a complete entitlement picture.
The defense settled at an 85 percent reduction against the opening claim. The gap was mostly paperwork, not deployment.
The university settled its IBM audit at 85 percent below the opening exposure figure. Most of the reduction came from entitlement reconciliation across decentralized purchases and ILMT evidence repair on research clusters.
The estate ran Db2, WebSphere, SPSS, and Tivoli products across central IT and faculty managed infrastructure. The audit firm's calculation assumed the central entitlement file was complete. It was not close.
The notification went to central IT, but the exposure sat largely in systems central IT did not manage. The first move was an internal freeze: no department was to answer auditor questions directly.
Deployment was broadly consistent with what the institution had actually bought over two decades. The claim was driven by missing paper, not missing licenses.
Entitlements surfaced from faculty purchase records, grant funded procurements, and education program agreements under Passport Advantage. Mapping legacy education SKUs to current product names recovered another tranche the auditor's file treated as unlicensed.
Research clusters ran virtualized workloads outside ILMT coverage. Under sub capacity rules those hosts price at full capacity until coverage and history are repaired. Agents were deployed, history reconstructed where eligible, and the full capacity blocks reversed.
The reconciliation pass worked through four sources:
Three levers produced most of the reduction: entitlement reconciliation, ILMT repair, and scope discipline on what the audit could actually examine.
Exposure reduction by lever
| Lever | What it corrected | Effect |
|---|---|---|
| Entitlement reconciliation | Decentralized purchases consolidated | Largest single reduction |
| ILMT repair | Research clusters brought into coverage | Full capacity claims reversed |
| SKU mapping | Legacy education SKUs mapped to current products | Recovered ignored entitlements |
| Scope discipline | Audit held to contracted entities and products | Out of scope claims removed |
| Commercial close | Residual gap settled with forward terms | No back maintenance framing |
The common advice is that a large compliance gap means buying your way out quickly before penalties grow. We disagree. In roughly 20 to 30 engagements Morten Andersen advised across 2024 and 2025, the opening gap bore little relation to the settled one; in decentralized estates most of the claim was missing paperwork, not missing licenses. The buyer side move is to reconcile entitlements fully before conceding any number, because money spent settling a paper gap is simply wasted. Speed serves the auditor, accuracy serves the institution.
Each reversal was documented against IBM sub capacity licensing terms and the ILMT documentation, which is what made the corrected position stick.
Source: Redress Compliance advisory engagement file, 2024 to 2025.
Process discipline mattered as much as the evidence itself.
More IBM analysis lives in the IBM knowledge hub and the IBM practice.
The university settled at 85 percent below the opening claim. Entitlement reconciliation across decentralized purchases and ILMT repair on research clusters produced most of the reduction.
Decentralized purchasing scatters entitlement records across faculties, grants, and education programs, so auditor files dramatically understate real holdings. The apparent gap is usually paperwork, not unlicensed deployment.
Yes. Education program purchases and grant funded licenses are real entitlements once mapped to current SKUs. They are also the records most often missing from the auditor’s file.
Research clusters outside ILMT coverage were priced at full physical capacity in the opening claim. Deploying agents and reconstructing eligible history reversed those blocks under IBM sub capacity rules.
A single central team with authority over every department’s communication. Contradictory departmental answers are one of the fastest ways an audit exposure grows.
The eleven move framework, the PVU framework, the VPC framework, the ILMT sub capacity framework, and the buyer side moves at every step of the IBM audit cycle.
Used across more than five hundred IBM engagements. Independent. Buyer side.
IBM framed the audit as the immediate uplift across the broader PVU framework. Redress reframed the audit around the ILMT sub capacity framework. 85 percent reduction across the IBM audit exposure.
We have run 500+ enterprise clients across 11 publishers. Every engagement starts with one conversation.
Audit framework signals, PVU framework signals, VPC framework signals, ILMT sub capacity framework signals, and the broader IBM licensing leverage signals.
Once a month. Audit patterns, renewal benchmarks, vendor commercial signals across Oracle, Microsoft, SAP, Salesforce, IBM, Broadcom, AWS, Google Cloud, ServiceNow, Workday, Cisco, and the GenAI vendors. No follow up sales pressure.
Free providers (Gmail, Yahoo, Outlook) cannot subscribe. Work email only. Unsubscribe in one click.
