Breathtaking view of the Knysna railway bridge and lush green landscape under clear skies.
Back to insights

Reviewing procurement policies against actual institutional practice

Reviewing procurement policies against actual institutional practice. Practical institutional guidance on evidence, ownership and review boundaries.

By Justin Kettle · Founder & Managing Director

Published · Updated

Illustrative photograph: Zak H · Photo source

A procurement policy review is an institutional method for evaluating whether approved purchasing rules align with actual operational practices and decision records.

In South African public sector governance, accounting officers and accounting authorities bear statutory responsibility for establishing internal control systems and ensuring financial compliance. Over time, operational habits, informal workarounds, and uncoordinated policy revisions can create divides between written supply chain rules and daily purchasing activities. Conducting a structured review comparing approved policy, formal delegations, and real-world practice enables institutions to restore operational alignment and strengthen governance integrity.

Setting review scope and identifying operative policy frameworks

fair, equitable, transparent, competitive and cost-effective

— Constitution of South Africa, section217(1), procurement system requirements

The initial phase of a policy review requires establishing a clear operational scope and identifying the exact regulatory baselines active during the review period. Accounting officers must define whether the review examines all departmental spending categories, specific high-risk commodities, or selected operational divisions. Setting unambiguous scope boundaries ensures that review teams evaluate transaction populations systematically.

Reviewers must identify and verify the specific versions of institutional supply chain policies, standard operating procedures, and delegation registers in effect on the exact dates of the transactions under review. Evaluating past purchasing decisions against current rules or unpromulgated legislation leads to inaccurate compliance findings. Accounting officers must confirm that review teams inspect the actual legal instruments and departmental directives active when decisions were taken.

Under Section 217(1) of the Constitution of the Republic of South Africa, 1996, organs of state in national, provincial, or local spheres, and other institutions identified in national legislation, must contract for goods or services through a system that is fair, equitable, transparent, competitive, and cost-effective. These constitutional duties apply directly to public entities, but they do not extend automatically to private commercial companies.

Public sector leaders must recognise that historical reference materials, such as National Treasury's Supply Chain Management Guide of February 2004, provide useful conceptual models for integrated supply chain functions including demand, acquisition, logistics, disposal, and performance monitoring. However, historical guides do not serve as proof of operative monetary thresholds, mandatory practice notes, or active preference point formulas. Reviewers must verify the operative institutional framework and delegation schedules for each transaction date.

Transaction walkthroughs, owner interviews and record corroboration

Once the operative framework is established, review teams execute detailed transaction walkthroughs and conduct structured interviews with operational process owners. Walkthroughs trace sample transactions through the core stages of the integrated supply chain lifecycle: demand planning, acquisition, logistics, disposal management, and performance monitoring. Interviewing line managers, bid committee members, and supply chain practitioners helps uncover informal practices and operational bottlenecks that do not appear in written manuals.

Interview statements and operational descriptions must be corroborated against primary transaction records. Reviewers inspect physical and digital files to verify whether documented approvals, committee scorecards, and purchase orders match reported practices. Relying solely on verbal assurances or job titles to infer decision authority creates severe review weaknesses, as the reviewer must identify the actual authority and its conditions under the applicable framework, rather than infer it from a title.

When walkthroughs reveal missing files or unrecorded approvals, reviewers must document these gaps transparently without retroactively generating missing records. A missing file indicates a potential breach of administrative record-keeping duties, but it does not automatically prove that an underlying contract award was invalid or corrupt. Conversely, a retrospective explanation provided during an interview cannot substitute for an omitted contemporaneous approval.

Categorising wording gaps, execution breaches and evidence limitations

To deliver actionable findings, a policy review must systematically classify identified discrepancies into three distinct categories: policy wording gaps, execution breaches, and evidence limitations. Conflating ambiguous policy language with intentional non-compliance distorts risk assessments and leads to inappropriate corrective actions.

A policy wording gap occurs when an approved policy document is ambiguous, outdated, internally contradictory, or silent on critical operational steps. For example, a policy may fail to define clear escalation paths for contract variations or omit procedures for handling emergency quotations. Where wording needs revision, identify the authorised approval route and clarify the requirement. Do not decide on training, control changes or any misconduct process solely from the gap label.

An execution breach occurs when an approved policy contains clear, unambiguous rules, but operational personnel fail to follow them. Examples include bypassing competitive quotation thresholds, failing to declare financial interests on bid committees, or executing contract amendments without delegated authority. Where a requirement was not followed, investigate the cause and applicable response. Control changes, training and any further formal review should follow the facts and the relevant process.

An evidence limitation arises when operational procedures may have been followed correctly, but primary records are missing, incomplete, or poorly archived. Distinguishing evidence limitations from execution breaches ensures that management addresses record management systems without fabricating legal conclusions regarding contract validity.

Prioritising approved updates, targeted training and control actions

Following gap classification, executive management must prioritise corrective actions based on risk severity and institutional impact. Accounting officers should establish a structured action plan that balances formal policy updates, staff training programmes, and internal control enhancements.

Key implementation actions include:

  • Formal policy updates: Drafting revised policy language, obtaining legal review, and securing formal approval from the accounting officer.
  • Targeted training programmes: Educating supply chain personnel, line managers, and bid committee members on compliant execution.
  • Proportionate control improvements: Agreeing checks, record requirements and reconciliation frequency suited to the exposure and actual obligations.

Updating written policies ensures that internal rules reflect current treasury instructions, operational realities, and clear delegation boundaries. Accounting officers must ensure that updated policies are formally distributed to all operational divisions with clear commencement dates. Continuous internal monitoring ensures that operational practices remain aligned with approved policies.

Comparing policy review methods with distinct governance tools

Public sector leaders must maintain a clear operational distinction between a procurement policy review, a probity checkpoint review, and a supplier payment control map. Conflating these distinct governance mechanisms creates operational confusion and weakens institutional oversight.

A procurement policy review evaluates systematic alignment between written policy rules, formal delegations, and actual operational practices across transaction populations. In contrast, a probity checkpoint review is an active, real-time governance gate embedded within a live procurement process to verify procedural fairness and integrity before irreversible decisions occur.

Meanwhile, a supplier payment control map focuses specifically on the financial accounts payable workflow, verifying three-way matching between purchase orders, goods receipt notes, and tax invoices prior to disbursement. While payment mapping protects cash disbursements, a policy review evaluates broader institutional governance across the entire supply chain lifecycle.

Example policy expectationPractice evidenceGap requiring assessmentProposed management decision
Relevant conflicts should be disclosed and managed at the policy's specified pointA declaration is incomplete or dated after the evaluationEvidence gap and possible execution issue; establish what was required and what happenedSeek contemporaneous records, assess the disclosure timing and management response, and retain unresolved questions.
The applicable emergency route should have the required authority and recordsA purchase file includes a verbal explanation but no linked decision recordPossible execution gap or missing evidence, depending on the actual requirementVerify the applicable exception route and actual decision history; document further review without retrofitting approval.
Approved contract templates should be used or adapted through the authorised routeA tender pack differs from the template referenced in the policyPossible wording/version inconsistency or unapproved change; not an automatic prohibition on all customised termsEstablish which version governed, obtain appropriate contract input and approve any necessary policy or template revision.
Reconciliations should follow the actual required frequency and control designOnly summary records for a wider period are availableEvidence limitation pending confirmation of whether the underlying reviews occurredTrace the underlying work; distinguish missing records from an unperformed control, then assign the proportionate response.

Sources

Frequently Asked Questions

How does a procurement policy review differ from a probity checkpoint review?

A procurement policy review is a diagnostic assessment that evaluates whether written institutional policies align with actual operational practices across past transaction populations. In contrast, a probity checkpoint review is a real-time governance mechanism embedded within an active procurement workflow to verify process integrity and fairness before key decision gates are passed.

Does Section 217 of the Constitution apply to private commercial entities?

Section 217 of the Constitution directly binds organs of state in the national, provincial, and local spheres of government, as well as other institutions identified in national legislation, when contracting for goods or services. Private commercial companies participating in public tenders must comply with advertised bidding conditions, but constitutional procurement obligations apply to the public entity conducting the purchasing process.

Why is National Treasury's February 2004 SCM Guide considered historical guidance?

The Supply Chain Management Guide issued by National Treasury in February 2004 outlines foundational philosophy and structural models for government supply chain functions. However, it reflects historical practical guidance and does not serve as proof of current operative monetary thresholds, practice notes, or active preference point formulas, which must be verified against current treasury prescripts.

Can a retrospective explanation during an interview replace a missing approval record?

No, a retrospective explanation provided by an official during an interview provides helpful operational context, but it cannot replace or substitute for an omitted contemporaneous approval record. Statutory approvals must exist at the time a decision is taken to be legally valid. Missing approval records represent administrative record gaps that must be documented and addressed through proper governance channels.

Does a missing procurement record automatically invalidate a historical contract award?

No, a missing record or documentation gap indicates a potential failure of administrative record-keeping duties, but it does not automatically prove that an underlying contract award was invalid or corrupt. Determining legal invalidity requires a formal legal or statutory assessment based on the total available factual and legal evidence beyond record availability alone.

For wider context, read the public procurement governance overview.

Discuss your organisation’s priorities

Contact Kettle Consulting