Java license risk assessment

 

Since 2019, Oracle has been charging license fees for its commercial Java Platform. These are exclusively available as a subscription. Since then, Oracle has "adjusted" the license terms several times. This leads to uncertainty for many companies.

Basically, every company must decide strategically which way to go:

  1. Stay on Java versions dated before April 16, 2019 (ask your security team what they think about this option).

  2. Remove Oracle Java from all instances, or replace it with Open Java

  3. License Oracle Java

But no matter which way you choose here, there is always a "residual risk" of overlooking one or the other installation. And that is precisely what may not be a small problem. A single installation on a virtual server that escapes the SAM process can represent a business risk of several hundred thousand Swiss Francs (Euros or Dollars).

After three (3) years of "grace period", Oracle has started since the beginning of 2022 to integrate Java, on the one hand, into the usual LMS (License Management Services) process, but also to perform targeted Java audits at their customers.

 

Goals of the Java license risk assessment

Identify potential business risks related to Java

✔️ Where are which Java editions in use in your corporate network?
✔️ Analysis of existing contracts
✔️ Quantitative assessment of risks or avoidable costs

Risk Mitigation Plan:

✔️ Proposal for the necessary "adjustments" to avoid the identified risks and unnecessary costs.

 

Procedure

Prepare, define scope, establish timeframe and resources, provide contract documents

✅ Scanning of the IT areas defined in the scope (together with our partner Octosoft)

✅ Conduct joint evaluation and risk assessment

✅ Joint creation of a possible roadmap for the necessary implementation measures

✅ Prepare final documentation

We generally offer this service at a definitive fixed price ("Fixed Time - Fixed Price").