The problem with these audits is that the exact licensing conditions can be vague, or the audit points to something that is in compliance, but might not be (e.g. you're licensed for 8 cores, but your replacement servers have 12 cores, you still only need the 8 cores so you disable 4 cores in the bios ... well, they will say, for all we know you only disabled those cores when we came to do the audit ... so now you owe us the money for 4 extra cores at full list price, going back 18 months).