Home / The Audit Brief / Effective License Position
Effective License Position

Quarterly ELP Reviews as Governance

PUBLISHED OCTOBER 31, 2025 · UPDATED DECEMBER 27, 2025

An Effective License Position you build once goes stale within a quarter. Run it on a schedule and audit defense becomes a routine you control rather than a fire drill the auditor sets.

Most organizations treat the Effective License Position as a one time exercise, something they assemble in a hurry when an audit letter lands. The result is a number that is always behind the estate it describes. The stronger posture is governance: a quarterly review that keeps your position current, surfaces drift before it becomes exposure, and means you never meet your own ELP for the first time on the auditor's terms. This article sets out how a quarterly review works and why finance and IT leadership should own it.

Why a static ELP cannot hold

An Effective License Position reconciles what you have deployed against what you are entitled to use. Both sides of that equation move every week. New virtual machines spin up, Microsoft 365 license assignments change as people join and leave, Azure consumption grows, and product use rights shift as agreements renew. An ELP built in January describes an estate that no longer exists by April. When Microsoft selects a target, it uses its own counting methodology and its own data from Azure, Microsoft 365, and management tooling, and that calculation governs. A position that is three quarters old gives you nothing to answer with.

What a quarterly review covers

A useful review is not a full reinventory every time. It is a disciplined refresh of the parts of the estate that move and a check on the parts that should not. Each quarter the review should cover the following.

The 5 percent line is the number that matters

The reason a quarterly cadence pays for itself is the contract clause. If unlicensed use reaches 5 percent or more of total use, the customer reimburses Microsoft's verification costs and acquires the missing licenses at 125 percent of the current price. A shortfall caught at 3 percent in a quarterly review can be closed at normal price on your own schedule. The same shortfall left to grow to 6 percent and discovered by an auditor is closed at a premium with costs attached. Governance turns a penalty into a planned purchase.

Review cadenceDrift caught atHow it is closed
Quarterly3 percent, internallyNormal price, on your timeline
Annual5 percent, lateAt or near the threshold, less room
Only at audit6 percent or more, by the auditor125 percent pricing plus reimbursed costs

These figures are indicative, but the pattern holds across estates of every size. The earlier you see drift, the cheaper it is to correct.

Who should own the review

A quarterly ELP review works only when it has a clear owner and a fixed place on the calendar. In practice the strongest model pairs IT asset management, which holds the deployment data, with procurement or finance, which holds the agreements and the budget to close gaps. Legal stays informed because the 5 percent clause and the audit clause are contractual, not technical. The review produces a short standing report: current position, movement since last quarter, gaps and surpluses, and the exposure number against the threshold. That report is what leadership reads, and it is what you hand to advisors if a formal demand ever arrives.

Turning the review into a board level metric

Once the cadence is established, the headline exposure number becomes a metric leadership can track over time, the same way they track any other risk. A position that stays comfortably below the threshold every quarter is evidence of control. A position that creeps toward the line is an early warning that buys time to act. Either way, the organization is making decisions from data rather than reacting to an auditor's draft.

From governance to defense

The organizations that settle audits quickly and cheaply are almost always the ones that already knew their position. When the auditor presents an Effective License Position, they meet it with a current, evidenced position of their own and challenge the method line by line rather than accepting a number built from unfamiliar data. Quarterly review is what makes that possible. It is the difference between defending your position and discovering it.

Build the review into your governance

Book a Strategy Call and we will help you stand up a quarterly ELP review that keeps your Microsoft exposure under control between audits.

Book a Strategy Call

When the numbers start to look serious, our ELP exposure modeling team stress tests every line the auditor will count.

Talk to the defense

Get a Quote

The Audit Brief

Weekly intelligence on Microsoft and SPLA audit moves and the buyer side defenses that work. Prefer to talk first? Ask us to Book a Strategy Call in your message above.

Get a Quote · Book a Strategy Call · The Audit Brief · About · Pricing · Blog · Contact · Privacy · Terms · New York · London Not affiliated with Microsoft Corporation. Independent buyer side advisory only.