Internal Audit Procurement Resources

Procurement is one of the most frequently audited areas, and for good reason. It controls a large share of external spend, involves many people who can commit the organization, and is a regular target for fraud and conflicts of interest. Even small control gaps can lead to overpayment, poor value for money or reputational damage.

A procurement or purchase-to-pay audit typically reviews how suppliers are selected and onboarded, how purchase requests and purchase orders are approved, whether goods and services are received before payment, how invoices are matched, and how supplier master data and bank details are maintained. Analytics across the payment population often add significant value.

Common risks include purchase orders raised after the invoice, split purchases to avoid approval limits, single-source decisions without justification, conflicts of interest, fictitious or duplicate suppliers, unverified bank-account changes and duplicate payments.

The resources below give you a complete starting kit for procurement audits: a step-by-step purchase-to-pay guide, procurement and vendor master data checklists, a vendor due diligence template, and related tools for analytics and sampling. Use them together to plan, test and report on procurement risk with confidence.