The reward for reporting software piracy to the BSA is "up to $1 Million". How much does the person reporting the piracy receive? Not the full amount. Not much at all. Is the person reporting a company for piracy really protected by whistle blower law? Not always. One employee was fired for reporting a security breach.
The BSA is only one of the 26 enforcement agencies in the United States. There are over 100 in the world. 2008 is off to a good start. It's only February and the BSA has announced collecting the following settlements: $72,053, $80,000, $92,500, $175,000, $135,750, $112,000. Remember, the actual costs involved in a settlement run three to six times the settlement figures shown.
Have you heard about the over $3,467,000 settlement that turned in to $10 M to $15 M for only four out of compliance software products, once all the costs were calculated? It isn't just about having the correct number of licenses. If your users are not in compliance with the usage "agreement", your company as guilty.
As has been mentioned before, once audited it isn't over. Companies and their friends can visit and revisit you. All these expenses are avoidable with a solid educational foundation and program. A good technology asset management program more than pays for itself, instead of incurring settlements and related costs that can run three to six times the settlement cost.

