Day 1: Procurement Risk Across the Buying Cycle

Risk Points in the Procurement Cycle

• Identify exposure from requirement through payment
• Connect risk with value/integrity/continuity
• Distinguish supplier risk from process weakness
• Build a procurement risk map

Authority Boundaries and Role Separation

• Separate request, evaluation, approval, receipt, payment
• Identify conflicts created by excessive access
• Use compensating review in smaller teams
• Prepare a procurement authority matrix

Conflict and Integrity Controls

• Declare personal or commercial conflicts promptly
• Control supplier contact during competition
• Protect bid and pricing confidentiality
• Analyze an integrity breach scenario

Day 2: Supplier Risk and Due Diligence

Supplier Due Diligence

• Verify identity ownership capability and records
• Scale checks according to category exposure
• Use independent evidence for higher-risk decisions
• Prepare due-diligence file for one supplier

Continuity and Dependency Risk

• Identify single-source or critical supplier dependence
• Assess capacity location and subcontracting concentration
• Consider replacement time and switching difficulty
• Build a supplier continuity profile

Commercial and Compliance Exposure

• Review financial warning signs/contract exceptions
• Identify proposed terms creating unacceptable exposure
• Confirm mandatory compliance evidence before award
• Prepare a supplier risk recommendation

Day 3: Contract Compliance, Exceptions, and Monitoring

Establishing Obligation Monitoring

• Extract key buyer and supplier commitments
• Assign obligation owners/due dates
• Track acceptance notices insurance and certificates
• Maintain a contract compliance register

Performance Exception Management

• Record noncompliance with evidence and impact
• Determine whether deviations need approval/correction
• Use escalation thresholds proportionate to exposure
• Review exception before payment or renewal

Procurement Risk Review

• Summarize open risks, breaches, overdue actions
• Distinguish resolved issues from continuing exposure
• Assign remediation and review dates
• Present a procurement risk dashboard

• Procurement-cycle risk maps linked with controls and authority
• Supplier due-diligence cases using evidence proportionate to exposure
• Contract compliance registers tracking key obligations and exceptions
• A risk review simulation prioritizing breaches and corrective action