Every organisation has a procurement policy. Far fewer have procurement that follows the policy every time. The gap between the two is where money leaks out: purchases without competitive quotes, orders split to avoid approval limits, invoices paid for goods that never arrived and suppliers whose bank details changed by email.
Spend leakage is rarely dramatic. It is a steady drip of small exceptions that add up to a meaningful share of total spend. The good news is that most of it can be stopped with a small set of well-designed controls, especially when software enforces them instead of relying on memory and goodwill.
Here are nine controls that create real procurement accountability.
1. Budget check before approval
Every purchase request should be checked against the available budget for its cost centre or project before it reaches an approver. Without this, approvers sign off requests one at a time without seeing that the budget is already exhausted.
In procurement software, the budget check happens automatically. The request shows the budget, amounts already committed and the remaining balance. Requests that would exceed the budget are blocked or routed for additional approval.
2. A clear delegation of authority
Who can approve what, and up to how much? A delegation of authority matrix sets approval limits by role, value, category and department. It should be documented, approved by the board or management and applied consistently.
When the matrix lives inside the system, requests route to the right approver automatically. Delegation during leave is recorded, and escalations happen when requests sit too long.
3. Competitive quotes above a threshold
Requiring a minimum number of quotes for purchases above a set value is one of the most effective cost controls. It prevents favouritism and keeps prices honest.
The control only works if quotes are captured and compared on record. Procurement software can require a set number of supplier quotes before a request can progress, store them against the request and show a side-by-side comparison for the approver.
4. Split order detection
When approval limits are strict, some staff break a large purchase into several smaller ones to stay under the threshold. Split orders are hard to spot manually but easy for software to detect.
Detection rules look for multiple requests or orders to the same supplier, for similar items, within a short period, whose combined value exceeds an approval limit. Flagged orders are held for review.
5. Segregation of duties
The person who requests a purchase should not be the person who approves it, receives the goods and authorises payment. Combining these roles in one person creates the opportunity for fraud and error.
Segregation of duties is easy to state and hard to maintain manually, especially in smaller teams. Software enforces it by blocking conflicting actions and logging any approved override.
6. Vendor onboarding and due diligence
Fake suppliers and conflicts of interest are classic procurement fraud schemes. Every new supplier should be onboarded through a controlled process that checks:
- Legal registration and tax identification.
- Bank account ownership.
- Directors and ownership, compared against staff records for conflicts.
- Required certifications, insurance and licences.
Only approved suppliers should be available for purchase orders.
7. Independent verification of bank detail changes
Business email compromise frequently targets supplier bank details. A fraudster sends a convincing email asking for future payments to go to a new account. If the change is accepted without verification, the next payment is lost.
The control is simple: any change to supplier bank details must be verified through an independent channel, such as a call to a known contact, and approved by a second person. Payments to recently changed accounts should be flagged for extra review.
8. Goods received and three-way matching
Invoices should be paid only for goods and services that were ordered and received. Three-way matching compares the purchase order, the goods received note and the supplier invoice. When quantity and price agree within tolerance, the invoice is approved for payment. Mismatches are held.
Manual matching is slow and inconsistent. Automated matching handles the routine cases instantly, leaving staff to resolve genuine exceptions. We explain the mechanics in detail in our article on three-way matching.
9. Spend reporting and exception review
Controls prevent problems, but reporting proves they are working. Management should receive regular reports on:
- Spend by supplier, category and department.
- Purchases without competitive quotes.
- Overrides and emergency purchases.
- Price variances between purchase order and invoice.
- Split orders flagged.
- Supplier bank detail changes.
When these reports are scheduled and emailed automatically, exceptions are reviewed every week rather than discovered at year-end audit.
Why manual controls fail
Most organisations already have some version of these controls on paper. They fail for predictable reasons:
- Urgency. When something is needed today, the process is skipped "just this once".
- Workarounds. Staff learn how to avoid approval limits.
- Missing evidence. Quotes and approvals live in emails that cannot be found later.
- Limited visibility. Nobody sees the full picture until the auditors arrive.
Software does not get tired, forget the policy or make exceptions without recording them. When the controlled route is also the easiest route, people follow it.
What good procurement accountability looks like
In an organisation with strong procurement accountability:
- Every purchase can be traced from request to payment in one view.
- Managers know their committed spend against budget at any time.
- Suppliers are verified before their first order.
- Payments match what was ordered and received.
- Exceptions are visible, explained and approved.
- Internal and external auditors can test controls quickly.
Our procurement and operations software is designed around these nine controls. In one recent deployment, a manufacturer moved from 31% to 96% compliance with its quote policy and reduced procurement cost by 11%. You can read the full manufacturing case study.
Getting started
You do not need to implement all nine controls at once. Start with the ones that address your biggest risks, which are usually approval limits, quotes and three-way matching, then add the rest in phases.
If you would like a quick assessment of your current procurement controls and where software could close the gaps, contact us.
Frequently asked questions
What is spend leakage in procurement?
Spend leakage is money lost through avoidable procurement weaknesses, such as paying above contract prices, buying without competitive quotes, paying for goods not received, duplicate payments and purchases from unapproved suppliers. It usually builds up through many small exceptions rather than one large event.
Which procurement control should we implement first?
Most organisations get the fastest benefit from budget checks with an enforced approval matrix, followed by three-way matching before payment. These two controls stop the largest share of unauthorised spending and overpayments.
Can small businesses apply these controls?
Yes. Where teams are too small for full segregation of duties, use compensating controls such as owner review of all new suppliers, bank detail changes and payments above a set amount. Software makes this review quick through exception reports.