Most software asset management programs look healthy right up to the moment a real Microsoft audit arrives, and then they fold. A program that holds is built around the position the vendor will actually argue, not the tidy inventory on a dashboard. Here is what the difference looks like.
A typical software asset management program produces a clean internal inventory and a dashboard that shows compliance. The trouble is that this is not the document the auditor works from. Microsoft uses its own counting methodology and its own data from Azure, Microsoft 365, and management tooling, and it reconciles deployment against entitlement to produce an Effective License Position that can differ sharply from your tidy inventory. When the two disagree, Microsoft's calculation governs.
So a program optimized to look good on a dashboard can collapse the instant a formal audit, run by a third party accounting firm under the audit clause, applies the vendor's methodology to the vendor's telemetry. A program that holds is built the other way around: it anticipates the position the vendor will argue and keeps the evidence to defend against it.
The first foundation is an entitlement record that is complete and reconciled, not just a list of purchases. Every agreement, transfer, and right such as license mobility and downgrade must be traceable to the deployment it covers. The second is deployment data that matches the vendor's view, including the cloud telemetry the vendor can read, so that you are never surprised by your own data. The third is the rights and exemptions library, the documented basis for every line where your count is lower than a naive reading would suggest. The fourth is an owned, current Effective License Position that you maintain continuously rather than reconstruct in a panic.
| Foundation | What it holds | Why it matters |
|---|---|---|
| Entitlement record | Agreements and rights | Traceable to deployment |
| Deployment data | Vendor view and telemetry | No surprise from own data |
| Rights library | Mobility, downgrade, passive | Defends every low count |
| Owned ELP | Current real position | Ready, not reconstructed |
A common and expensive error is to treat tooling as the program. A SAM tool produces output, but SAM tool output is not audit defense, because the vendor counts its own way and governs the result. Tools help you gather data, but the program that holds is the discipline around the data: who owns the reconciliation, how often it runs, how rights are documented, and how the position is kept current. Discipline is what survives contact with an auditor, not a license to a tool.
This is also why declining an initial SAM review and running your own internal assessment first is a recognized defensive move. A controlled internal assessment, built on a program that holds, gives you a position you trust before the vendor sets one you do not.
The output of a program that holds is a defensible Effective License Position you can produce on demand. That is the single most valuable thing to have when an audit letter arrives, because it lets you contest the vendor's opening number from a prepared position rather than scramble. The mechanics of building and defending that position are set out in the Effective License Position guide.
A program is also what carries you through structural change. When estates combine, the program is what reconciles them, which we cover in audit readiness after a merger and in how a merger raises your audit profile. Readiness is not a one time project, it is a standing capability.
We build the program around the position the vendor will argue, and we keep it current so it holds when it is tested. We sit between you and Microsoft and its appointed auditor, on your side of the table, and we never take vendor money. We work on a Fixed Fee from $18,000, or on Gainshare, a share of verified savings or avoided penalty with zero retainer and no risk to you. Our guarantee is plain: we reduce your exposure or we reimburse our service fee.
Download the Effective License Position guide to see what a defensible position looks like, then talk to us about building the program that keeps yours ready.
If you want a second set of eyes first, our SAM engagement response team runs your internal assessment before Microsoft sees a single number.
Download the guide and own a position you can produce on demand.
Download guideWeekly intelligence on Microsoft and SPLA audit moves and the buyer side defenses that work.