Entity ensures that installation of software or programs in the production environment is periodically reviewed for it’s license violation and other security vulnerabilities