Cost Control
Licensing optimization, vendor spend, and budget alignment checks
This is the library that makes the rest of the programme easy to justify. Unused licences, duplicate tooling, auto-renewals nobody diarised and subscriptions still billing for staff who left. It is rarely a large single number and it is almost always a meaningful annual one.
It also matters for compliance in its own right, because over-licensing and under-licensing are both findings.
What this library checks
- Licence assignment against active staff, by product
- Unassigned and unused subscriptions
- Duplicate or overlapping tooling doing the same job
- Renewal dates, notice periods and auto-renewal terms
- Vendor spend against budget and against the prior period
- Shadow IT and departmental subscriptions purchased outside IT
- Consumption-based services and cost anomaly alerting
Evidence you will be asked for
Every check in Spectra Core carries its own evidence. These are the artefacts an auditor, insurer or board most often wants to see for this area.
- Licence count against headcount by product
- Renewal calendar with notice periods marked
- Spend summary for the review period
Where this usually goes wrong
Licence reconciliation is the one audit finding that arrives with a refund attached, which is why it is a useful place to start a compliance programme that has to win internal support.
Run this library against your environment
Every check comes with a risk level, a review frequency, an assignee and a plain-language rationale, so the output reads for leadership as well as for engineers.
Other libraries
Remote Monitoring & Management
Alerting, patching, agent health, and endpoint visibility standards
Network Environment
Switching, routing, Wi-Fi, DNS, and network segmentation checks
Active Directory Configuration
GPOs, OU structure, password policies, and domain hygiene
Network Security
Identity, access management, and endpoint protection / EDR standards
Microsoft 365 Security
Identity threat detection and response, conditional access, and tenant hardening
Backup & Disaster Recovery
On-premise DR systems and Microsoft 365 backup configuration checks