Hi Guys,
I recently met with a friend of mine, an IT manager in a small sized office (less than 25 people).
As we were chatting, he mentioned that he's confused about software in his new job. When he joined the company some computers had pirated MS office, photoshop etc, so he reported it to his supervisor, saying that they need to purchase additional licences. His boss said that there is nothing to be worrying about. He acknowledged, but weren't going to do anything.
So now after 3 months into the job he's managing a network with some chunk of pirated software. My questions are:
A) Who's responsible in case of let say an audit?

How can he protect his ass?
C) What kind of consequences can he expect?
D) What kind of consequences company can expect?
All thoughts are kindly appreciated