Home / Guides / Broadcom Audit Notice
① Buyer guide · Broadcom (CA) audit
A Broadcom (CA) audit notice starts a clock and a scope. Respond well and it caps at your actual peak; respond loosely and full capacity becomes the default. Here is the seven step protocol we run, and where the leverage sits.
Audit notice or renewal under 18 months out? We mobilize within 48 hours.
Get expert help →Since Broadcom acquired CA Technologies, the compliance posture buyers commonly report has tightened. Broadcom typically relies on IBM SCRT output and frequently requests an ISV specific SCRT report that lists peak MSU consumption for Broadcom products. The risk is rarely the products you forgot you had; it is the method. Where sub-capacity reporting has lapsed or cannot be reconstructed, exposure commonly defaults toward full capacity, the most expensive possible basis. The protocol below exists to keep any claim anchored to your actual peak and to convert the moment into renewal leverage rather than a standalone bill. For the wider picture see the Broadcom (CA) publisher guide.
Run these in order
The audit stops being a data scramble against a clock the vendor controls. Scope gets held to the contract, the SCRT peak gets validated before it becomes a number, and the sub-capacity record gets reconstructed before full capacity can be asserted as the default. Most important, the finding gets handled as part of the commercial relationship: a settlement framed into the renewal is leverage, while a settlement paid alone is just loss. We have run this sequence across hundreds of engagements and mobilize within 48 hours of a notice.
Across 500+ engagements and $180M+ of negotiated mainframe spend, disciplined audit response paired with renewal sequencing typically holds claims to actual peak and produces renewal reductions of 20 to 35% against the initial quote, with 48 hour mobilization the moment a notice lands.
The contract sets the window, commonly 30 days to acknowledge and a defined period to produce data. Acknowledge in writing, confirm scope, and do not start pulling reports until scope and method are agreed. The notice starts a clock; an unmanaged response typically widens it.
Broadcom typically relies on IBM SCRT output and may request an ISV specific SCRT report listing peak MSU consumption for Broadcom products. Treat every data request as defining scope. Validate the SCRT data independently before it leaves your side, because the peak it reports becomes the basis for any true up claim.
Where sub-capacity reporting is incomplete or unreliable, exposure commonly defaults toward full capacity, which is the most expensive position. Reconstructing a defensible sub-capacity record before responding is usually the single highest value step, because it caps the claim at actual peak rather than installed capacity.
Often, yes, and it usually should be. A standalone settlement is pure cost; folded into a renewal it becomes a negotiation chip, traded against caps, term, and the products you intend to keep. We mobilize within 48 hours of a notice.
Related: Broadcom (CA) audit defense, Broadcom (CA) cost optimization, and the firm wide audit defense service.