IBM audit defense in Australia

How IBM audits unfold in Australia

IBM audits are usually run by an appointed third party (commonly Deloitte or KPMG) and turn on the Processor Value Unit (PVU) metric. Sub-capacity licensing — paying for the cores a workload actually uses rather than the whole machine — is only allowed if ILMT was installed and reporting within 90 days; miss that and IBM charges full capacity. Treat the first figure as an opening position, not a settled bill.

What typically happens

• An audit notice arrives, often naming Deloitte or KPMG as the appointed reviewer under the Passport Advantage terms.
• ILMT reports, deployment data and entitlements are requested and reconciled against PVU consumption.
• Where ILMT was missing, stale or misconfigured, IBM asserts full-capacity licensing across eligible cores.
• A settlement or Passport Advantage / ESA renewal proposal follows, frequently bundling the shortfall into a new deal.

Why Australia matters

Australia is a common-law federation, so the governing-law clause (often New South Wales or Victoria) and the relevant state Limitation Act matter — six years for contract claims in most states, including under the Limitation Act 1969 (NSW). The Competition and Consumer Act 2010 and Australian Consumer Law frame unfair-terms arguments, while the Privacy Act 1988 and the Australian Privacy Principles — notably APP 8 on cross-border disclosure — constrain what deployment and personal data can be sent offshore to an auditor. Disputes resolve in the Federal Court or state Supreme Courts, or by arbitration under ACICA rules, and government and regulated buyers weigh data-residency and IRAP considerations. This is information, not legal advice.

How to read this directory

The firms above are listed alphabetically, not ranked. Read the pros and cons, and weigh independence against a vendor relationship for yourself: a buyer-side independent has no incentive to expand your spend, while a firm that also resells, runs vendor-side audits, or sits inside a sales motion carries a potential conflict of interest with buyer-side defense.

How IBM findings resolve in Australia

IBM findings in Australia resolve the way they do elsewhere: the headline full-capacity number is an opening position. They are typically reduced by reconstructing sub-capacity eligibility, correcting ILMT configuration, challenging the back-claim period, and folding any genuine shortfall into a Passport Advantage or ESA renewal rather than paying it as a penalty.

Independent advisers report that the gap between the initial claim and the final settlement is frequently substantial, but every figure is case-specific and self-reported — treat any percentage as indicative until independently verified. Around 62% of companies reported a major-vendor audit in the last 12 months, and roughly 52% of buyers now bring in outside help (2025 surveys). Vendor-specific audit rates are survey-reported (IBM ~42% (2025 surveys)).

Frequently asked questions

What happens if ILMT was not installed in time in Australia?

If ILMT was not deployed and reporting within 90 days of sub-capacity-eligible deployment, IBM's default position is to charge full capacity on every eligible core. In practice the figure is often reduced by reconstructing deployment history and reconciling actual PVU consumption — but the count you accept tends to set the baseline, so it is worth contesting before settling.

Who conducts IBM audits in Australia?

IBM commonly appoints a third party such as Deloitte or KPMG under the Passport Advantage agreement. Because those same firms also offer buyer-side advisory, organisations often bring in an independent defender with no IBM audit relationship to manage the reconciliation.

How far back can IBM claim in Australia?

The contractual audit clause and the relevant state limitation period both bear on the back-claim window — six years for contract claims in most Australian states. The reviewable period is frequently narrower than IBM's opening position; this is information, not legal advice.

Does Red Hat now fall under IBM audits?

Since IBM's acquisition of Red Hat, RHEL and OpenShift subscription compliance can be examined alongside IBM products, so an Australian estate running both should reconcile subscribed-versus-deployed systems on the Red Hat side as well.

Is the directory free for Australian buyers?

Yes. The directory and matching are free for buyers, including in Australia. We take no money from software publishers, add no markup, and no vendor ever sees your brief. We publish no prices; fees are agreed directly with the firm.