Strategic Purchase Management

Chapter 14
Procurement Governance, Transformation and Future Practice

Advance Diploma in Purchase Management
Strategic Purchase Management   •   Advance Diploma

Procurement Governance, Transformation and Future Practice

Introduction

Strategic purchasing creates value only when decisions are lawful, transparent, commercially sound and aligned with organisational purpose. Governance provides the system through which procurement authority is granted, exercised, monitored and improved. Transformation extends this system by redesigning processes, technologies, capabilities and operating models so that procurement becomes more responsive, analytical and resilient.

Contemporary procurement therefore involves more than obtaining goods and services at the lowest price. It must protect organisational integrity, manage supplier and market risk, support sustainability, contribute to innovation, and provide reliable information for executive decision-making. Future practice will increasingly combine human judgement with advanced analytics, automation, artificial intelligence, digital twins and ecosystem-based resilience.

This chapter examines how procurement policies, authority matrices, segregation of duties, audit controls and operating models are designed. It then considers how transformation programmes are led and evaluated, and critically assesses emerging practices including autonomous sourcing, digital twins and resilient supply ecosystems.

Learning objectives

By the end of this chapter, the learner should be able to:

  1. Explain the purpose and principles of procurement governance.
  2. Design procurement policies, authority matrices and segregation-of-duties controls.
  3. Distinguish preventive, detective and corrective audit controls.
  4. Compare centralised, decentralised, category-led and hybrid operating models.
  5. Plan and lead a procurement transformation programme.
  6. Measure procurement’s financial, operational, risk, sustainability and strategic value.
  7. Assess the opportunities and risks of AI-enabled sourcing, digital twins and resilient supply ecosystems.
  8. Apply governance principles to a complex procurement case.

1. Procurement governance as an organisational system

Procurement governance is the framework of principles, structures, rules, decision rights, processes, information and assurance mechanisms used to direct and control purchasing activity. It connects organisational strategy with daily transactions. Good governance answers five questions:

  • What outcomes does procurement seek?
  • Who may make each decision?
  • What evidence is required?
  • How are conflicts and risks controlled?
  • How will performance and misconduct be detected and addressed?

Governance differs from management. Management conducts sourcing, negotiation, ordering and supplier administration. Governance establishes the boundaries within which those activities occur and ensures that management remains accountable.

Principles of sound governance

Value for money. Decisions should consider total cost, quality, service, risk, life-cycle effects and fitness for purpose rather than purchase price alone.

Accountability. Every material decision should have an identifiable owner, an appropriate approval and an auditable record.

Transparency and fairness. Requirements, evaluation criteria and supplier communications should be consistent, documented and defensible.

Proportionality. Controls should reflect expenditure, complexity, risk and market conditions. Excessive controls create delay; weak controls expose the organisation to loss.

Integrity. Employees and suppliers must avoid bribery, undisclosed conflicts of interest, collusion, favouritism and misuse of confidential information.

Competition. Competitive sourcing should be used where markets permit, while justified exceptions must be documented.

Sustainability and responsibility. Procurement should consider environmental impact, labour rights, modern slavery, diversity, accessibility and responsible sourcing.

Continuous improvement. Governance must be reviewed when laws, technology, markets, organisational structures or risk exposures change.

2. The policy architecture

A procurement policy is a formal statement of required conduct and decision principles. It should not attempt to describe every operational step. A useful policy architecture has several layers.

LayerPurposeTypical content
PolicyStates mandatory principles and scopecompetition, ethics, approvals, sustainability
StandardDefines minimum requirementstender documentation, supplier due diligence
ProcedureExplains how work is performedsourcing workflow, contract award process
GuidelineProvides practical advicemarket research, negotiation, specification writing
Template or system ruleCreates evidence and consistencyapproval form, evaluation record, workflow control

A policy should define its scope, exclusions, roles, thresholds, emergency arrangements, records requirements, supplier expectations, breach consequences and review date. It should also state the relationship between procurement and other policies such as finance, information security, legal contracting, risk management, sustainability and delegated financial authority.

A common failure is to write a policy that says “competitive quotations must be obtained” without defining the threshold, acceptable evidence, treatment of single-source markets, emergency procurement or the authority to approve exceptions. Such a policy appears strict but is operationally ambiguous.

Policy design questions

Before issuing a policy, the organisation should determine:

  1. Which expenditures are in scope, including corporate cards, subscriptions, capital projects and professional services?
  2. Which thresholds trigger quotations, tenders, legal review, executive approval or board oversight?
  3. What constitutes a valid exception?
  4. How are conflicts of interest declared and managed?
  5. How long must records be retained?
  6. What supplier information is collected and how is it protected?
  7. Who owns policy interpretation and who approves changes?

Policies should be accessible, written in clear language and supported by training. A policy that employees cannot understand or locate is unlikely to produce compliant behaviour.

3. Authority matrices and decision rights

An authority matrix maps decisions to roles, approval levels and conditions. It prevents both unauthorised commitments and unnecessary escalation. Authority should be based on risk, not only monetary value. A modest purchase involving personal data, safety-critical equipment or a sanctioned country may require greater scrutiny than a larger routine purchase.

A useful matrix distinguishes at least four roles:

  • Requestor: defines the business need and confirms receipt or performance.
  • Procurement or sourcing lead: manages the commercial process and supplier engagement.
  • Approver: authorises the expenditure or commitment within delegated limits.
  • Control or assurance function: reviews legality, risk, ethics, finance or audit requirements.

The same person should not automatically occupy all four roles.

DecisionRoutine low riskMedium riskHigh risk or strategic
Create requirementBudget holderBudget holder plus procurementExecutive sponsor plus procurement
Select sourcing routeBuyer within procedureCategory managerProcurement governance committee
Approve supplier awardDelegated managerSenior budget ownerExecutive committee or board delegate
Approve contract deviationProcurement managerLegal and finance reviewExecutive risk owner
Approve emergency purchaseBudget owner with reasonSenior executiveExecutive committee with post-review

Thresholds should be expressed in the organisation’s currency and should specify whether they apply to a single order, contract value, expected annual spend or total life-cycle value. For a multi-year agreement, using only the first year’s expenditure can understate the real commitment.

RACI and accountability

A RACI model can supplement an authority matrix. Responsible means performing the task; Accountable means owning the result; Consulted means providing input; and Informed means receiving communication. RACI is useful for clarifying process ownership, but it does not itself grant financial authority. A person may be responsible for preparing a tender while lacking authority to approve the award.

4. Segregation of duties

Segregation of duties (SoD) is the distribution of incompatible activities among different people or systems. Its purpose is to reduce the chance that one individual can initiate, approve, execute and conceal an improper transaction.

A basic procure-to-pay separation is:

  1. Need identification and requisition.
  2. Requisition approval.
  3. Supplier selection or purchase order creation.
  4. Goods or service receipt confirmation.
  5. Invoice verification.
  6. Payment release.
  7. Supplier master-data maintenance.
  8. Post-payment review.

Ideal separation is not always possible in a small organisation. In that case, compensating controls may include independent review, restricted system access, payment reports reviewed by a senior manager, supplier statement reconciliation and periodic surprise audits.

SoD should be assessed by incompatible combinations, not by job titles alone. For example, an employee who can create a supplier and approve invoices for that supplier presents a significant risk even if the employee is called an administrator.

Conflicts of interest

A conflict exists when personal, family, financial or external interests could influence—or appear to influence—a procurement decision. A conflict is not necessarily misconduct, but failure to disclose and manage it is a governance failure. Controls include annual declarations, transaction-specific declarations, recusal, independent evaluation and documented approval of mitigation.

5. Internal control and audit architecture

Procurement controls can be classified as preventive, detective and corrective.

Control typePurposeExamples
PreventiveStops an error or irregularity before it occursapproval workflow, blocked duplicate supplier, system threshold
DetectiveIdentifies an event after it occursexception report, three-way-match failure, data analytics
CorrectiveResolves the cause or consequencerecovery of overpayment, disciplinary action, process redesign

The traditional three-way match compares the purchase order, receipt record and supplier invoice. It is effective for standard goods but less straightforward for milestone-based services, utilities, subscriptions and complex projects. Such categories require alternative evidence such as deliverable acceptance, time-sheet validation or contract milestone certification.

Risk-based control design

Controls should address risks such as:

  • fictitious or duplicate suppliers;
  • split purchases designed to avoid thresholds;
  • unauthorised commitments;
  • overbilling and duplicate invoices;
  • conflicts of interest and bribery;
  • poor contract performance;
  • cyberattack or data leakage;
  • non-compliance with sanctions, labour or environmental requirements;
  • excessive dependence on a single supplier.

Audit testing should evaluate both design and operation. A control may be well designed but not performed, or performed but incapable of addressing the relevant risk. Evidence should establish who performed the control, when, using what information and with what outcome.

A simple control effectiveness score may be used for internal prioritisation:

C = D × O

where C is the control effectiveness score, D is the design adequacy score and O is the operating effectiveness score. If each score is rated from 0 to 1, a control with D = 0.9 and O = 0.6 has C = 0.54. This is a management assessment model, not a universal accounting or auditing standard. The organisation must define rating criteria and avoid presenting the result as objective probability.

6. Procurement operating models

An operating model defines how people, processes, technology, governance and supplier-facing activities are arranged.

Centralised model

A central procurement function controls most sourcing and purchasing. Advantages include leverage, consistent policy, specialist capability and better data. Risks include slow response, weak local knowledge and the perception that business units have lost ownership.

Decentralised model

Business units conduct their own purchasing. This can provide speed, market knowledge and strong operational alignment. It may also produce fragmented spend, inconsistent contracts, duplicated suppliers and uneven compliance.

Category-led model

Procurement is organised around categories such as information technology, construction, logistics or professional services. Category managers develop market strategies and stakeholder relationships. The model is powerful when spend and markets are sufficiently complex to justify specialist expertise.

Hybrid or centre-led model

A centre-led model combines central standards, data, systems and strategic sourcing with delegated operational purchasing. It is often suitable for large organisations because it balances control and responsiveness. Its success depends on clear service boundaries, reliable data and constructive relationships between procurement and business units.

The choice should consider spend concentration, supplier-market complexity, geographic dispersion, regulatory exposure, organisational culture and digital maturity. No operating model is inherently superior; effectiveness depends on fit and execution.

7. Leading procurement transformation

Procurement transformation is a coordinated change in capabilities and operating practices intended to improve value, not merely to install new software. A transformation typically passes through five connected stages.

Stage 1: Diagnose

Establish the baseline: spend coverage, contract compliance, cycle time, supplier performance, savings credibility, risk exposure, user satisfaction, skills and technology limitations. Interviews, process observation, data analysis and control testing should be combined. A technology solution should not be selected before the problem is understood.

Stage 2: Define the target state

The target state should describe future capabilities, governance, operating model, data architecture, workforce requirements and measurable benefits. It should distinguish mandatory outcomes from desirable features.

Stage 3: Build the transformation portfolio

Prioritise initiatives such as strategic sourcing, catalogue expansion, supplier-risk management, contract lifecycle management, process automation, data cleansing and capability development. Each initiative should have an owner, dependencies, resources, risks, milestones and benefits hypothesis.

Stage 4: Implement and adopt

Implementation requires process redesign, configuration, integration, testing, training, communication and support. Adoption is a behavioural issue as much as a technical one. Employees may bypass a new system if it is slower, unclear or poorly integrated with operational work.

Stage 5: Stabilise and improve

After implementation, measure actual outcomes, correct defects, retire redundant workarounds and establish continuous improvement. Benefits should be tracked after the project team leaves.

Change leadership

Transformation leaders need executive sponsorship, a credible case for change, stakeholder mapping and transparent communication. They should involve finance, legal, information security, operations, internal audit and suppliers where relevant. Procurement transformation fails when it is treated as a procurement-only project, because value and risk are distributed across the organisation.

8. Measuring procurement’s value contribution

Price savings are important but incomplete. A balanced measurement system should cover financial, operational, risk, sustainability, innovation and stakeholder outcomes.

Financial measures

A basic negotiated saving can be stated as:

S = (B − P) × Q

where S is saving, B is the approved baseline unit price, P is the new unit price, and Q is the comparable quantity. Units are currency. The formula assumes that quantity, specification, service level, timing and other relevant conditions are comparable. If demand falls because of unrelated factors, the entire reduction must not be claimed as procurement saving.

A price variance percentage is:

V = ((B − P) ÷ B) × 100%

provided that B ≠ 0. For example, if the baseline is £100 per unit, the negotiated price is £92 and comparable volume is 5,000 units, saving is (100 − 92) × 5,000 = £40,000, and the price variance is 8%.

Other measures include cost avoidance, working-capital impact, demand reduction, contract compliance and total cost of ownership. Cost avoidance should be reported separately from realised cash savings because it represents a prevented increase rather than a reduction against an established expenditure baseline.

Balanced procurement scorecard

DimensionIllustrative measures
Financialrealised savings, cost avoidance, total cost of ownership
Servicecycle time, on-time delivery, internal satisfaction
Riskcritical suppliers with mitigation plans, audit findings, incidents
Compliancespend under contract, competitive coverage, policy exceptions
Sustainabilityemissions data coverage, responsible sourcing assessments
Innovationsupplier ideas implemented, time to pilot, value generated
Capabilitytraining completion, analytical maturity, data quality

Metrics must have definitions, owners, data sources, reporting frequency and limits. A target can create dysfunctional behaviour: for example, an aggressive cycle-time target may encourage buyers to avoid competition or minimise due diligence.

9. Emerging practice and technology

Autonomous and AI-assisted sourcing

AI may classify spend, identify suppliers, draft requests for information, compare bids, detect anomalies, recommend negotiation priorities and monitor contract obligations. Autonomous sourcing goes further by allowing software agents to perform parts of the sourcing cycle with limited human intervention.

The appropriate principle is not “automate everything” but “automate within controlled boundaries.” Human approval should normally remain mandatory for high-value awards, strategic suppliers, sensitive data, safety-critical goods, unusual contract terms and decisions with material ethical or reputational consequences.

Key risks include biased supplier recommendations, poor-quality training data, hallucinated analysis, cyber manipulation, opaque reasoning, leakage of confidential bids and unlawful use of personal or commercially sensitive information. Controls should include approved models, access restrictions, prompt and output logging, validation against source data, explainability appropriate to the decision, model-performance monitoring and a clear appeal route.

An AI system should not independently decide that a supplier is suitable merely because historical data shows frequent awards. Historical awards may encode favouritism, market concentration or past errors.

Digital twins

A procurement or supply-chain digital twin is a dynamic digital representation of relevant assets, flows, constraints and relationships. It may combine enterprise-resource-planning records, supplier information, logistics data, inventory, demand signals and external risk information.

A digital twin can test scenarios such as a port closure, supplier failure, demand surge, alternative material, inventory policy change or contract reallocation. Its usefulness depends on data quality, model validity and update frequency. A visually impressive dashboard is not a digital twin if it cannot represent important relationships or support scenario analysis.

Digital twins also create governance questions: who owns the model, which data may be shared, how uncertainty is represented, and who is accountable when a recommendation is wrong? Decision-makers should distinguish observed data from assumptions and model outputs.

Resilient supply ecosystems

Resilience is the ability of a supply network to prepare for disruption, absorb impact, adapt and recover while maintaining acceptable performance. It is broader than holding large inventories. Resilience may involve multiple sources, alternative specifications, regional capacity, supplier collaboration, cyber protection, visibility, flexible contracts and financial health monitoring.

Resilience has a cost. Dual sourcing may reduce disruption exposure but sacrifice volume discounts. Local supply may improve recovery speed but increase unit cost. A rational decision compares the expected cost of disruption, mitigation cost and service consequences rather than assuming that maximum redundancy is always optimal.

A useful conceptual relationship is:

Total resilience cost = mitigation cost + expected disruption cost

Expected disruption cost is not necessarily calculated precisely; it may be estimated through scenario analysis. If probabilities are reliable, an expected loss can be represented as:

E(L) = ∑ pᵢLᵢ

where pᵢ is the probability assigned to disruption scenario i, Lᵢ is its financial or operational loss, and the probabilities sum to 1 across the defined scenarios. This is an estimate under stated scenarios, not a prediction. Correlated disruptions, model uncertainty and low-frequency extreme events can make simple expected-value analysis misleading.

10. Ethics, regulation and responsible data use

Governance must comply with applicable procurement, competition, anti-bribery, tax, labour, environmental, data-protection, sanctions and public-sector rules. Requirements vary by jurisdiction; therefore, organisations must obtain qualified legal advice rather than rely on generic policy language.

Ethical procurement requires more than legal compliance. Suppliers may be legally established yet associated with forced labour, unsafe conditions, environmental damage or misleading sustainability claims. Due diligence should be proportionate to risk and should include credible evidence, remediation expectations and escalation routes.

Data governance is increasingly important. Procurement data may reveal prices, margins, product designs, personal information and strategic plans. Access should follow least-privilege principles. Data retention, cross-border transfer, supplier confidentiality and automated decision-making require explicit controls.

Whistleblowing channels should be confidential, accessible and protected from retaliation. Investigations must preserve evidence, respect due process and distinguish allegation from finding.

Applied case: Northstar Medical Devices (illustrative)

Background

Northstar Medical Devices, a fictional regional manufacturer, spent approximately £180 million annually on materials, logistics, maintenance and professional services. Procurement was decentralised across four sites. Each site used different supplier codes and spreadsheets. The organisation had experienced a critical-component shortage, duplicate suppliers and an internal audit finding concerning invoices approved by the same employee who created purchase orders.

Problem

The chief executive requested a transformation that would improve resilience without imposing a fully centralised model. The board also required evidence that reported savings were real and that AI would not make uncontrolled supplier decisions.

Analysis

A diagnostic found that only 58% of addressable spend was under contract. Supplier records contained duplicates, and contract value was often measured as first-year spend rather than total commitment. The existing policy required three quotations but did not define exceptions or separate high-risk purchases from routine purchases. Category analysis showed that two sole-source component suppliers represented a major operational risk.

Approach and solution

Northstar adopted a centre-led model. A central team owned policy, data standards, strategic categories, supplier-risk methodology and the procurement platform. Sites retained authority for routine, low-risk purchases within approved catalogues.

The authority matrix introduced life-cycle contract thresholds and risk-based escalation. Supplier creation was separated from invoice approval. A daily system control blocked duplicate bank accounts, while monthly analytics identified split purchases and unusual price movements. For critical components, the organisation qualified an alternative supplier, approved a substitute specification and established a joint disruption-response protocol.

AI was initially limited to spend classification, duplicate detection and supplier-risk alerts. It could recommend, but not approve, supplier awards. Outputs were checked by category managers and logged for audit.

Savings were calculated against approved baselines, with quantity and specification changes separately documented. The transformation dashboard reported compliance, supplier resilience, quality, delivery and cash impact rather than savings alone.

Outcome

After eighteen months, contract coverage and data quality improved substantially, duplicate supplier records declined and the organisation had a tested alternative for its most critical component. Transaction processing became more consistent, although some sites initially resisted central standards. The programme therefore added local training, service-level agreements and quarterly stakeholder reviews.

Learning points

  1. Governance must be designed around risk and decisions, not only organisation charts.
  2. A hybrid operating model can combine leverage with operational responsiveness.
  3. Resilience requires technical alternatives and relationship-based collaboration.
  4. AI should begin with bounded, auditable use cases.
  5. Savings claims require controlled baselines and transparent assumptions.
  6. Adoption and stakeholder trust are necessary for technical change to produce value.

Challenges and limitations

Procurement governance can become bureaucratic when every purchase receives the same treatment. Excessive approval layers slow operations and encourage workarounds. Conversely, decentralisation without visibility can create hidden risk and loss of leverage.

Transformation programmes may also overstate benefits. Baselines can be manipulated, one-time savings can be presented as recurring, and technology costs may be excluded. Benefits should therefore be independently validated and reported with confidence levels where appropriate.

Data-driven procurement is limited by incomplete, inconsistent and historically biased data. AI cannot compensate for poorly defined requirements or weak accountability. Digital twins may produce false precision when probabilities, dependencies or supplier capacity are uncertain. Scenario analysis should therefore include sensitivity testing and explicit assumptions.

Finally, resilience can conflict with efficiency, sustainability and affordability. Strategic judgement is required to determine which risks merit redundancy and which can be accepted, transferred or mitigated through contracts and monitoring.

Best-practice implementation checklist

  • Align procurement policy with organisational strategy and applicable law.
  • Define decision rights using value, risk and life-cycle commitment.
  • Separate requisition, approval, supplier maintenance, receipt and payment wherever practicable.
  • Maintain a controlled supplier master and contract repository.
  • Document exceptions and review them after the event.
  • Use preventive, detective and corrective controls together.
  • Select an operating model that fits organisational context.
  • Establish a transformation baseline before choosing technology.
  • Measure realised value across financial and non-financial dimensions.
  • Introduce AI through bounded use cases with human accountability.
  • Test resilience through scenarios and supplier collaboration.
  • Review governance periodically and learn from incidents, audits and near misses.

Chapter Summary

Procurement governance establishes the principles, decision rights, controls and assurance mechanisms that make purchasing accountable and strategically aligned. Effective policy architecture separates principles from procedures and defines scope, thresholds, exceptions, records and responsibilities. Authority matrices clarify who may request, evaluate, approve and monitor expenditure, while segregation of duties reduces the possibility of error, fraud or concealed misconduct.

Internal controls should be preventive, detective and corrective, and should be proportionate to risk. Operating models range from centralised and decentralised arrangements to category-led and centre-led hybrids. Procurement transformation requires diagnosis, target-state design, prioritised initiatives, implementation, adoption and continuous improvement. Value measurement should include savings, cost avoidance, service, compliance, risk, sustainability, innovation and capability.

AI-enabled sourcing, digital twins and resilient supply ecosystems offer substantial opportunities but introduce risks involving bias, privacy, cybersecurity, explainability, data quality and accountability. Future procurement professionals must combine commercial expertise with governance, analytics, ethical judgement and change leadership.

Key Terms

Procurement governance: The system of principles, authority, controls and assurance used to direct procurement.

Procurement policy: A formal statement of mandatory procurement principles and requirements.

Authority matrix: A structured allocation of decision and approval rights.

Delegated authority: Formal permission granted to an individual or role to make specified decisions.

Segregation of duties: Separation of incompatible activities among people or systems.

Preventive control: A control intended to stop an error or irregularity before occurrence.

Detective control: A control that identifies an error or irregularity after occurrence.

Corrective control: A control that addresses the cause or consequence of an identified problem.

Three-way match: Comparison of purchase order, receipt and invoice information.

Conflict of interest: A personal or external interest that could influence, or appear to influence, a decision.

Centre-led model: An operating model combining central standards and strategic control with delegated operational purchasing.

Category management: Management of procurement spend according to markets, suppliers and business requirements within a category.

Procurement transformation: Coordinated redesign of procurement capabilities, processes, technology and operating practices.

Cost avoidance: A prevented or reduced future cost increase, distinct from realised cash saving.

Digital twin: A dynamic digital representation of relevant real-world assets, flows, constraints and relationships.

Autonomous sourcing: Software-supported execution of sourcing activities with limited human intervention.

Supply resilience: The ability of a supply network to prepare for, absorb and recover from disruption.

Expected disruption cost: Estimated probability-weighted loss across defined disruption scenarios.

Responsible procurement: Purchasing that considers ethical, social, environmental and governance impacts.

Control effectiveness: The adequacy of a control’s design and its actual operation.

Review Questions

Short Answer Questions

  1. What is the difference between procurement governance and procurement management?
  2. Why should authority matrices consider risk as well as monetary value?
  3. Define segregation of duties and give one procure-to-pay example.
  4. Distinguish cost saving from cost avoidance.
  5. State two risks associated with autonomous sourcing.

Long Answer Questions

  1. Explain the layers of a procurement policy architecture and discuss why each layer is necessary.
  2. Compare centralised, decentralised and centre-led procurement operating models.
  3. Describe the stages of a procurement transformation programme.
  4. Explain how a balanced procurement scorecard can measure value beyond price savings.
  5. Discuss the governance, ethical and data risks of AI-enabled procurement.

Analytical / Application Questions

  1. Design an authority matrix and segregation-of-duties arrangement for a medium-sized organisation in which one employee currently creates suppliers, issues purchase orders and approves invoices.
  2. A firm must choose between single sourcing at £90 per unit and dual sourcing at £96 per unit. Explain the additional operational and disruption information needed before making a decision, and describe how scenario analysis could be used.
  3. Using the Northstar case, propose three transformation benefits, define a measure for each, identify a data source and explain one risk that could make the measure misleading.

Multiple Choice Questions with Answers

Question 1

Which statement best describes procurement governance?

A. The daily activity of placing purchase orders

B. The framework of principles, authority, controls and assurance directing procurement

C. The negotiation of the lowest possible supplier price

D. The maintenance of warehouse inventory

Correct Answer: B. The framework of principles, authority, controls and assurance directing procurement

Question 2

Which activity should normally be separated from supplier master-data maintenance?

A. Invoice approval

B. Reading market reports

C. Preparing a category strategy

D. Conducting supplier meetings

Correct Answer: A. Invoice approval

Question 3

Which is a preventive procurement control?

A. A post-payment audit

B. A supplier complaint investigation

C. A system approval workflow before purchase-order release

D. A review of last year’s fraud cases

Correct Answer: C. A system approval workflow before purchase-order release

Question 4

A purchase has a baseline unit price of £100, a new price of £92 and comparable quantity of 5,000 units. What is the calculated price saving?

A. £4,000

B. £8,000

C. £40,000

D. £460,000

Correct Answer: C. £40,000

Question 5

What is a principal advantage of a centre-led procurement model?

A. It eliminates all local decision-making

B. It combines central standards with delegated operational responsiveness

C. It prevents the use of category management

D. It requires every purchase to be approved by the board

Correct Answer: B. It combines central standards with delegated operational responsiveness

Question 6

Which statement about a digital twin is most accurate?

A. It is only a static supplier contact list

B. It is a dynamic digital representation that can support scenario analysis

C. It automatically guarantees supply resilience

D. It replaces the need for physical supplier audits

Correct Answer: B. It is a dynamic digital representation that can support scenario analysis

Question 7

What is the most appropriate initial governance principle for high-risk AI supplier recommendations?

A. Allow the system to approve all awards without review

B. Delete all decision records after award

C. Require bounded use, validation and accountable human approval

D. Use historical awards without checking their quality

Correct Answer: C. Require bounded use, validation and accountable human approval

Question 8

Which metric is most clearly a non-financial procurement performance measure?

A. Realised savings

B. Cost avoidance

C. Supplier on-time delivery

D. Price variance

Correct Answer: C. Supplier on-time delivery

Question 9

Why can a three-way match be insufficient for some professional services?

A. Services never have invoices

B. Milestones and deliverables may require evidence other than a standard receipt

C. Professional services cannot be contracted

D. Purchase orders are prohibited for services

Correct Answer: B. Milestones and deliverables may require evidence other than a standard receipt

Question 10

In the formula E(L) = ∑ pᵢLᵢ, what does pᵢ represent?

A. The unit purchase price

B. The probability assigned to disruption scenario i

C. The supplier’s performance score

D. The payment processing time

Correct Answer: B. The probability assigned to disruption scenario i

Strategic Purchase Management
Chapter 14 of 14