1. Pioneers in Software Asset Management since 1989 ISO/IEC SAM Standards 19770-2 and 19770-3 John Tomeny IAITAM Fellow Convener, ISO/IEC 19770-3 OWG - Software Entitlements Tag VP, Business Development Sassafras Software Inc. Acknowledgements to Steven Klos, TagVault.org for some of the content.

2. Pioneers in Software Asset Management since 1989 ISO/IEC SAM Standards ✓ ISO – International Organization for Standardization Trivia – ISO based on Greek word ἴσος (isos) which means equal Trivia – ISO based on Greek word ἴσος (isos) which means equal Largest developer and publisher of International Standards Largest developer and publisher of International Standards Development done by members & volunteers Development done by members & volunteers ✓ IEC – International Electrotechnical Commission ✓ JTC 1 – Joint Technical Committee ISO/IEC JTC1 Information TechnologyInformation Technology ISO/IEC JTC1 Information TechnologyInformation TechnologySC7 Software and Systems EngineeringSoftware and Systems EngineeringSC7 WG21 Software Asset ManagementSoftware Asset ManagementWG21 It’s all Greek to me

3. Pioneers in Software Asset Management since 1989 ISO/IEC SAM Standards ✓ ISO/IEC 19770-0: Overview and Vocabulary New work item New work item Overview and Vocabulary for other 19770 standards Overview and Vocabulary for other 19770 standards ✓ ISO/IEC 19770-1: 2006 – SAM Process Outcomes focused Best Practices for Software Asset management (SAM) Outcomes focused Best Practices for Software Asset management (SAM) Designed to satisfy corporate governance requirements Designed to satisfy corporate governance requirements ✓ ISO/IEC 19770-4: Staged Adoption of SAM processes New work item New work item 4 Tiers 4 Tiers - Trustworthy Data - Practical Management - Operational Integration - Full ISO Conformance What the numbers mean

4. Pioneers in Software Asset Management since 1989 ISO/IEC SAM Standards ✓ ISO/IEC 19770-2: 2009 – Software Identification Tags Authoritative identification of software installations Authoritative identification of software installations Supports software publishers, software purchasers and tool vendors Supports software publishers, software purchasers and tool vendors ✓ ISO/IEC 19770-3: In Development – Software Entitlement Tags Currently under development – defines software entitlements Currently under development – defines software entitlements Works in concert with 19770-2 Works in concert with 19770-2 Specifies Metrics to track entitlement consumption Specifies Metrics to track entitlement consumption Provided through purchasing process - similar to today’s entitlements Provided through purchasing process - similar to today’s entitlements ✓ Futures Adaptability Tagging (towards open source) Adaptability Tagging (towards open source) Embedded Systems Tagging Embedded Systems Tagging What the numbers mean

5. Pioneers in Software Asset Management since 1989 ISO/IEC SAM Standards Focus on 19770-2 & 19770-3 19770-2 tag 19770-3 tag ISO/IEC 19770-2: Software Identification Tags ISO/IEC 19770-2: Software Identification Tags Establishes specifications for tagging software to optimize its identification and management. Establishes specifications for tagging software to optimize its identification and management. Provided through installers Provided through installers ISO/IEC 19770-3: Software Entitlement Tags ISO/IEC 19770-3: Software Entitlement Tags Provides a framework and criterion of measurement for creating unambiguous definitions of entitlements. Provides a framework and criterion of measurement for creating unambiguous definitions of entitlements. Provided through purchasing Provided through purchasing

6. Pioneers in Software Asset Management since 1989 ISO/IEC SAM Standards Detail review of 19770-2 & 19770-3 ISO/IEC 19770-2: Software Identification Tags ISO/IEC 19770-2: Software Identification Tags Cross platform Cross platform Cross publisher Cross publisher Application lineage Application lineage Application footprint Application footprint Standard structure Standard structure XML based data XML based data Easily discovered Easily discovered Authoritative and accurate Authoritative and accurate ISO/IEC 19770-3: Software Entitlement Tags ISO/IEC 19770-3: Software Entitlement Tags Cross platform Cross platform Cross publisher Cross publisher Direct link to S/W ID tags Direct link to S/W ID tags License metrics defined License metrics defined Standard structure Standard structure XML based data XML based data Easily incorporated into tools Easily incorporated into tools Automates compliance Automates compliance

7. Pioneers in Software Asset Management since 1989 New Insights into Entitlements ✓ Emerging from an industry that has been mired for 20 years in the conventional wisdom of “asset/installation-centric” SAM. ✓ ISO/IEC 19770-3 OWG’s job is to break that mold, to demonstrate that effective software license management is “entitlement-centric”. “Asset/installation-centric” = a predisposition with file existence as a software licensing metric. “Asset/installation-centric” = a predisposition with file existence as a software licensing metric. “Entitlement-centric” = a focus on measuring and managing usage rights in software licensing. “Entitlement-centric” = a focus on measuring and managing usage rights in software licensing. The work of 19770-3 OWG

8. Pioneers in Software Asset Management since 1989 Finding the Language of Entitlements ✓ We are not defining software license models “Per-device”, “Concurrent-use”, Client Access License “Per-device”, “Concurrent-use”, Client Access License ✓ We are translating usage rights into machine- readable meta-data ✓ Each entitlement permits the licensee to exercise certain measurable actions with the software ✓ We are seeking a minimalist set of measurable actions that can be supported by a single framework

9. Pioneers in Software Asset Management since 1989 Finding the Language of Entitlements ✓ We are not defining software license models “Per-device”, “Concurrent-use”, Client Access License “Per-device”, “Concurrent-use”, Client Access License ✓ We are translating usage rights into machine- readable meta-data ✓ Each entitlement permits the licensee to exercise certain measurable actions with the software ✓ We are seeking a minimalist set of measurable actions that can be supported by a single framework

10. Pioneers in Software Asset Management since 1989 Applying 19770-3 Standard ✓ Each entitlement permits the licensee to exercise certain measurable actions with the software. Per-device licensing = maximum number of installed copies. Per-device licensing = maximum number of installed copies. Concurrent-use licensing = maximum number of current product launches. Concurrent-use licensing = maximum number of current product launches. Capacity-based licensing = maximum clock speed (MIPS). Capacity-based licensing = maximum clock speed (MIPS). Client-access licensing (CAL) = not clearly defined: sometimes Per-device and sometimes Per-seat (concurrent logons). Client-access licensing (CAL) = not clearly defined: sometimes Per-device and sometimes Per-seat (concurrent logons). Measurable Actions (“Usage Metrics”)

11. Pioneers in Software Asset Management since 1989 Proposed 19770-3 Tag Details ✓ A framework for human/machine-readable elements Per-device installed instances 1500 software installed device Per-device installed instances 1500 software installed device Concurrent-use maximum launched at once 250 software launched device thin-client sessions Concurrent-use maximum launched at once 250 software launched device thin-client sessions Both machine-readable & human-readable data

12. Pioneers in Software Asset Management since 1989 Industry Adoption Prospects ✓ Major Software Manufacturers Adopting 19770-2 Microsoft: API’s in Vista & Windows 7 to support tags Microsoft: API’s in Vista & Windows 7 to support tags Adobe: 19770-2 tags in Acrobat 9, CS4, and CS5 Adobe: 19770-2 tags in Acrobat 9, CS4, and CS5 TagVault: tag issuer/clearinghouse assists with adoption TagVault: tag issuer/clearinghouse assists with adoption Other Software Manufacturers will announce soon Other Software Manufacturers will announce soon ✓ Volume buyers negotiating adoption requirements ✓ Not critical for all software manufacturers to adopt A few majors create success and draw others’ interest A few majors create success and draw others’ interest Both tags designed for full implementation by others Both tags designed for full implementation by others

13. Pioneers in Software Asset Management since 1989 Participation is Open ✓ Use-cases - Define and describe use-cases to drive generation of Taxonomy. ✓ Alignment - Describe alignment with and relationships to existing SAM, service management and other standards. ✓ Elements definition - Define the elements, interfaces, etc., that will be part of the standard. ✓ Entitlements definition - Define the requirements to identify and prove compliance for common licensing models. ✓ Implementation - Describe what must be implemented, and how to implement, at a minimum to claim ISO/IEC 19770-3 compatibility. ✓ Evangelism - Describe market demand, benefits, relationships to existing standards, and other public relations tasks. ✓ XML Editors - XML editors. ✓ Review & Edit - Document editors (both technical and editorial).

14. Pioneers in Software Asset Management since 1989 19770-3 Resources ✓ Convener of WG21: David Bicket, Deloitte Enterprise Risk Svcs – dpb@19770.org dpb@19770.org ✓ Convener of 19770-3 OWG: John Tomeny, Sassafras Software Inc. – johnt@sassafras.com johnt@sassafras.com ✓ Additional information on SAM standards: www.19770.org www.19770.org ✓ Additional details about ISO/IEC 19770-3 OWG: www.samstandards.com/ www.samstandards.com/ ✓ 19770-3 OWG On-line Working Forum: www.sassafras.com/iso/forum/index.php www.sassafras.com/iso/forum/index.php