Some interesting research here from Ernst & Young.
Their recent SAM survey looked at both vendors and clients to assess attitudes towards vendor audits and SAM adoption.
The research highlights room for improvement on both sides of vendor audit activity; vendors feel compliance is not high enough on customer’s agenda and users expressed dissatisfaction over the quality of work and time taken.
“Faced with the challenge of doing more audits, vendors need to establish formal programmes which are conducted efficiently and in a transparent manner which does not damage the relationship. End users need to get a grip on their software estate so as to minimise the time and resources dedicated to audits and any subsequent penalties for non-compliance”
The paper also states that only 12% have responsibility for monitoring the usage of cloud bad products.