Eight months. Four phases.
Audit defence is a different discipline to renewal. The work was sequenced phase by phase, each one building the evidence base for the next.
1. Scope containment
We worked with the bank's legal team to narrow the audit scope to the contractual entitlement to audit. Non-production environments were excluded by reference to the contract. The cluster-wide virtualisation assertion was contested in writing on day eleven.
2. Deployment evidence
The bank's DBA team produced installation evidence per database, per environment. We built the bridge between what was installed and what was running. Of the contested database options, only two were in active use; the others were installed but never enabled.
3. Position paper
We wrote a thirty-page position paper that documented the bank's read of the contract, the evidence, and the three assertions where Oracle's finding could not be supported. The paper went into the third settlement round.
4. Settlement terms
The settlement closed at $2.3M cash, no OCI credits, no roadmap commitments, and a written scope agreement for the next audit cycle that restricted re-opening the same assertions.
Lesson
The first number in an LMS audit is rarely the right number. The settlement is determined by the bank's evidence pack and the written contract — not by the audit team's spreadsheet. Independent defence inside the first eight weeks moves the case base several million dollars.
