Now here's a standard that should have been in place decades ago. An international standard for software tagging and identification.

Even the best of discovery tools can't identify software if it doesn't want to be identified. How many companies have been fined because of this? How many hours have gone into trying to identify miss-tagged or non-tagged software?

ISO/IEC 19770-2 is still in draft form. It will be a great help to SAMs if it gets off the ground, and if software companies follow it. There is a timetable for its development. It will be a while, and very welcome when it arrives if software companies will follow it.