From IASP to CVA: a practical guide to discover the new features of the IBM program and what to pay attention to

How does it work? Once onboard, the data collection process begins. Under IASP, reports were sent as Excel sheets via email. With CVA, these same reports can be uploaded directly to the portal. New fields have been introduced for more accurate mapping of contracts and amendments, improving management effectiveness.

Reports are digitized and displayed on the portal with advanced features like versioning, trend forecasting, and more. While the report format is similar, the process is now digitized and compliant with local regulations. 

Meanwhile, IBM automatically uploads all contract information to avoid customers or partners having to do so manually. Since there are often numerous amendments and PDFs, IBM takes care of digitizing rights and amendments to make them available on the portal. Additionally, a dedicated administrator is provided to manage access.

At the moment, only some dashboards and reports can be exported as PDFs or Excel. IBM stated that it plans to expand these features to more sections of the portal.

A significant note pertains to reports for non-PVU products, namely software not measured or licensed based on the server’s processor number or type but under other licensing metrics, such as user or device count. Since these products require manual counting, the quarterly frequency stipulated in the agreement can be burdensome. For this reason, IBM has communicated that customized solutions will be explored with each client to adapt reporting frequency and methods to specific needs.

Transition to CVA: what to evaluate 

The transition to CVA for ITAM professionals is both an opportunity and a risk.

Although the audit exemption under the program might seem the primary benefit, CVA promotes a more proactive approach to software compliance and governance, bringing significant advantages across the organization. It enables useful insights into IBM software usage, recommendations and technical support from IBM experts, engagement of more business teams, and more collaborative software asset management.

Additionally, CVA integrates more deeply with IBM’s hybrid cloud, AI, and automation platforms, opening the path to modernization.

However, this raises new questions: 

• More involvement from other teams could require a greater commitment of internal resources. Indeed, to monitor business outcomes and ensure effective implementation of the new platform, more active participation from internal teams will be necessary. Are we prepared to support this effort?

• CVA will require tools capable of tracking usage trends, costs, hybrid infrastructures, and value metrics. It is crucial to verify that your ITAM, FinOps, and analytics platforms can support these new needs — and most importantly, that they meet security requirements. Will these new deployments increase the risk of vulnerabilities?

• The CVA portal will apply AI analyses on company data — are we sure that these analyses comply with our internal AI and data governance policies?

A crucial aspect to consider is data security. IBM, during the webinar mentioned above, confirmed that each customer will have a dedicated instance with data encrypted both in transit and at rest. It assured that data access will be fully under customer control, who can decide who can access it — including partners and other internal users.

Yet an important question arises: if IBM is the hosting platform, who watches the watcher? This raises concerns about data governance and the level of access that IBM, as the platform provider, might have. Even if encryption and access control are guaranteed, the question of how IBM could use this data remains key. Could it leverage the data in renewal negotiations or targeted sales activities, thereby giving IBM greater influence on future deals? While IASP was only about compliance data, under CVA you will grant IBM continuous access to data from your IT environment, and on a broader scope with a quarterly frequency.

We cannot fail to highlight that both programs place the burden of activity costs (such as audit and presales expenses) on customers — costs that would otherwise be borne by the vendor.

At WEGG we are expert consultants in IBM licensing, but we are not an ASP (Authorized SAM Provider), so we remain completely independent. Before deciding to switch to CVA, we suggest some precautions:

• Adopt a cautious contractual approach 

If you are already on IASP, review your existing agreements carefully. Check terms, deadlines, obligations, and coverage. Arrange a meeting with your IASP partner and the IBM team to understand if a transition to CVA will be proposed and to learn about timelines and conditions.

Se state sottoscrivendo un nuovo accordo CVA, richiedete di visionare la documentazione con attenzione prima di qualsiasi firma. È fondamentale cercare di comprendere ogni aspetto e non accettare ambiguità. Chiedete a IBM e ai partner dettagli su come IBM misurerà il successo degli ingaggi CVA (es. KPI, metriche di valore), informazioni sulle integrazioni, sulla governance e sui controlli. 

Deeply understand how usage trends, costs, hybrid infrastructures, and value metrics will be tracked, and what tools will be used. Check that your ITAM, FinOps, and analytics platforms are equipped to support these new requirements.

• Assess the need for additional resources 

CVA requires more cross-functional involvement than IASP. You may need to involve architecture, cloud, sustainability, finance teams as well as ITAM. Identify key people and understand their commitment in terms of goals, risks, and resources.  

Also keep in mind the report frequency: especially for non-PVU products, quarterly reporting can be burdensome and it is important to evaluate the costs and feasibility of a customized solution with IBM and its partners.

• Also consider the possibility of staying compliant independently 

Clearly, CVA brings into play other factors: teams, tools, and usage data. It’s no longer just about avoiding audits; it opens the door to new challenges while also granting IBM greater visibility — and potentially more power — in the contractual relationship.  

Therefore, the decision must be made consciously, evaluating whether it is better to maintain compliance with the support of an independent partner.

Do you need support in evaluating whether to join or switch to the CVA program? Contact us for a consultation!