Three real scenarios. Concrete answers. Directly applicable.

September 30, 2026
3:00 – 4:00 PM

Why this webinar is relevant

Audits are no longer an edge case. Most organizations that get audited end up facing additional financial claims, exposure typically runs to multiples of annual spend, and the process drags on for months—all while the SAM team is trying to assemble a defensible answer from data that lives in six different places.

In this session, Mitchell Anderson of USU and Craig Guarente of Palisade Compliance take the problem from both ends. Mitchell covers the foundation: what trustworthy data actually means under ISO 19770-1, why siloed discovery across Security, ITAM, IT Ops, the CMDB, IAM and Architecture collapses the moment it's tested and how to build and measure a data set that holds up.

Craig covers what happens when the letter arrives: how vendors run audits, where they build their advantage in, and how a compliance claim gets turned into a commercial negotiation rather than an invoice.

If you can't see it, you can't manage it—and if you can't manage it, you certainly can't defend it.

What you will take away

Trustworthy data is a standard, not a feeling.

Accurate, complete, relevant, understood, available — plus the practical measures that tell you whether you're there: data age, coverage, cross-tool confidence and consistency.

Fragmented discovery is an audit liability.

Six teams running six tools produces six numbers and no defensible position. Consolidation is the work that has to happen before the notice arrives.

Audit defense is part science, part art.

The science is the contract, the data, and the license math—a position you can reproduce line by line. The art is tempo, channel, and which assumption to challenge first. Tools deliver the first. Neither half wins alone.

An audit is a negotiation, not a verdict.

The vendor's opening number is a position. Recognizing the trigger early, controlling scope and pace, and owning your own numbers is what moves it.

Handled well, an audit can leave you better off.

Scope releases, corrected contract language, and reclaimed entitlements are all on the table—if you're prepared to ask.

Speaker

Mitchell Anderson

Mitchell Anderson

Professional Services Manager, USU
Craig Guarente

Craig Guarente

Founder Palisade Compliance