A pair of binoculars resting on a windowsill
Back to insights

Programme assurance: what sponsors need to know beyond a progress report

Why a self-reported progress update is not assurance — what independent assurance actually tests, the financial and control backbone it checks under the PFMA and Companies Act, the independence that makes it credible, and the sponsor's duty to act on it.

By Justin Kettle · Founder & Managing Director

Published · Updated

Illustrative photograph: Austin · Photo source

Programme assurance is the independent, structured confirmation a sponsor obtains that a programme is genuinely on course to deliver its objectives.

For South African sponsors, boards, accounting officers and accounting authorities, that independent confirmation is what validates a progress report, keeps internal controls honest and upholds the fiduciary duty.

Why a progress report is not assurance

When a complex capital initiative or institutional transformation runs into friction, the progress reports produced by the internal delivery team often fail to reflect the underlying reality. Delivery teams work under real pressure to show progress, which creates an environment where a self-reported status can become over-optimistic, selectively framed or inadvertently managed. Internal reports tend to highlight completed activity while playing down emerging schedule slippage, cost pressure or technical integration risk. A sponsor who relies only on the delivery team's progress report therefore receives a filtered picture of performance, which leaves the governing body exposed to failures and overruns it did not see coming.

To protect the institution's investment, a sponsor needs objective, verified confirmation that reported achievements reflect operational fact. In a public institution, that requirement aligns directly with the framework under the PFMA as administered by National Treasury. The PFMA sets an outputs- and accountability-driven approach, where success is judged against predetermined objectives rather than the volume of activity. A report that details administrative busyness or routine expenditure is no substitute for assurance that the defined outputs are actually being realised within the authorised parameters.

What assurance actually tests

Programme assurance asks whether a major initiative remains structurally sound and still capable of delivering its intended purpose. Rather than reviewing the tasks already done, independent assurance interrogates forward-looking capability — whether the programme will generate its designated outputs within the allocated resources. It examines the health of the delivery model, the stability of the technical interfaces, and the resilience of the risk-management arrangements across the departments or contractors involved.

Crucially, assurance tests the integrity and reliability of the progress-reporting framework itself. If the underlying data-collection systems are flawed, or the reporting measures are poorly defined, decision-makers end up making strategic choices on inaccurate management information. Under the PFMA as administered by National Treasury, sound public financial management depends on the timely provision of quality information for transparent accountability. Independent assurance confirms whether the internal status reporting is actually supported by verifiable evidence, so that leadership can trust the performance picture before committing further capacity.

The financial and control backbone

A major programme cannot deliver its objectives if the financial and administrative control environment beneath it is compromised. Programmes run inside the host organisation's wider governance infrastructure, drawing on its financial systems, procurement processes and internal controls. When the basic controls break down, a programme quickly falls prey to unauthorised expenditure, scope creep and asset misallocation, and the strategic outcome suffers regardless of how competent the delivery team is.

In a public institution, that control backbone is governed by the statutory duties under the PFMA as administered by National Treasury. The PFMA charges accounting officers and accounting authorities with operating basic financial management systems, maintaining effective internal controls, preventing overspending and safeguarding public assets. It also requires performance reporting in annual reports, benchmarking actual outputs against predetermined objectives.

In the corporate domain, the Companies Act 71 of 2008 establishes the Financial Reporting Standards Council to advise on the requirements for financial record-keeping and reporting. Programme assurance examines whether that financial and control backbone is actually functioning across the life of the programme, so that waste is prevented and institutional assets are protected.

Independent lines of sight and audit oversight

In a public institution, that requirement aligns directly with the framework under the PFMA as administered by National Treasury.

— Synthesis of South African regulatory guidance

To be worth anything in governance terms, programme assurance has to stay strictly independent of the delivery team responsible for execution. When delivery managers assess themselves or control their own review mechanisms, the conflict of interest undermines objectivity. Independent assurance gives the sponsor an unvarnished view of programme health, surfacing the systemic risks and bottlenecks an internal team may be reluctant or unable to disclose.

In South African public-sector governance, that independent oversight is embedded in the statute. Under Chapter 9 of the PFMA as administered by National Treasury, public institutions are obligated to appoint audit committees to oversee financial management, risk and internal control. Working alongside an independent internal audit function, the audit committee gives the sponsor and the accounting authority an objective line of sight into performance and control effectiveness. By drawing on these independent mechanisms, the sponsor keeps the programme evaluation free of operational bias or executive pressure.

Governing assurance and enforcing accountability

Commissioning assurance, and acting on it, is a governance responsibility that rests with the board, the accounting officer or the accounting authority. Governing bodies own the ultimate outcome of a major programme and cannot delegate that oversight to project managers or contractors. Accepting unverified progress reports without independent confirmation is an abdication of the governance duty, and it exposes the institution to strategic derailment and serious financial loss.

The statute enforces strict fiduciary accountability on the bodies that oversee institutional resources. Under the Companies Act 71 of 2008, the board directs the company's affairs and carries fiduciary duties to manage its relationships responsibly and protect its assets. Under the PFMA as administered by National Treasury, the division of responsibility assigns policy outcomes to the political head while placing implementation, output delivery and financial management on the accounting officer or accounting authority.

The PFMA enforces those duties through strict disciplinary sanctions, up to dismissal, and potential prosecution for gross financial misconduct, where officials are negligent. Governing bodies therefore have to commission independent assurance actively to meet their statutory duties and secure delivery.

What good looks like

For sponsors, boards, accounting officers and accounting authorities, effective programme governance means looking past the routine progress report to robust, independent assurance. It begins when leadership recognises that a self-reported update reflects internal perception rather than verified reality. The sponsor establishes an assurance framework that evaluates whether the programme is still on track to deliver its predetermined objectives within the authorised resource boundaries.

In practice, exemplary programme assurance shows up when governing bodies verify that the underlying financial systems and internal controls comply with the standards the Financial Reporting Standards Council advises on under the Companies Act 71 of 2008, and with the performance-reporting requirements under the PFMA as administered by National Treasury. It is reflected in the active use of independent oversight — the Chapter 9 audit committee under the PFMA — to keep an objective view of execution. And it is reflected in leadership acting decisively on assurance findings: correcting control failures, adjusting the delivery model, and holding management accountable for results.

Independent programme assurance is what bridges project reporting and governance oversight, so that a complex initiative actually delivers its intended purpose.

Related insights

Sources



Frequently Asked Questions

What is programme assurance?

Programme assurance is the independent, structured confirmation a sponsor obtains that a programme is genuinely on course to deliver its objectives. It asks whether a major initiative remains structurally sound and capable of delivering its intended purpose within allocated resources. This process validates progress reports and upholds fiduciary duties for South African entities.

Who needs to implement programme assurance, and why is it important for them?

Programme assurance applies to South African sponsors, boards, accounting officers, and accounting authorities. It is a governance responsibility for these bodies, as they own the ultimate outcome of major programmes. This independent confirmation validates progress reports, keeps internal controls honest, and upholds their fiduciary duty.

What does programme assurance test that a typical progress report does not?

Unlike a typical progress report that often highlights completed activity, programme assurance interrogates forward-looking capability and structural soundness. It assesses whether the programme will deliver designated outputs within allocated resources, rather than just reviewing tasks already done. Crucially, assurance also tests the integrity and reliability of the progress-reporting framework itself, ensuring data quality.

What does effective programme assurance look like in practice, and what are the consequences of failing to implement it?

Effective programme assurance involves verifying compliance of financial systems and internal controls with standards advised by the Financial Reporting Standards Council under the Companies Act and performance-reporting requirements under the PFMA. It also means actively using independent oversight, such as a Chapter 9 audit committee, and acting decisively on findings. Failing to implement it is an abdication of governance duty, exposing the institution to strategic derailment, serious financial loss, and potential disciplinary sanctions under the PFMA.

Where do organisations typically fall short in their approach to programme reporting and oversight?

Organisations often fall short by relying solely on internal delivery teams' progress reports, which can be over-optimistic or selectively framed. This filtered picture leaves governing bodies exposed to unseen failures and overruns. Furthermore, allowing delivery managers to assess themselves or control their own review mechanisms creates a conflict of interest, undermining objectivity and preventing an unvarnished view of programme health.

Discuss your organisation’s priorities

Contact Kettle Consulting