Which of the following is considered a 'soft' audit trigger that may prompt a vendor to initiate a license review?