Why understanding total cost of ownership means thinking beyond software licences to people, processes and risk, as Joshua Geer reports