Contractor Audit and Compliance Training Course

Duration 10 days 18 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Internal Auditors, Contract Managers and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-CM-107

Before you join: Participants should have working experience with contracts, projects, procurement, operations, finance, audit or compliance.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Contractor expenditure, performance and compliance can deteriorate long before a project reports a formal problem. Weak scopes, incomplete records, unverified progress claims, informal instructions and poor change control expose organisations to overpayment, delay, defective work, disputes and regulatory findings. Auditors and contract managers need to test the full contractor lifecycle, not simply review invoices after costs have been incurred.

This course develops the practical skills required to plan and conduct contractor audits for capital projects, maintenance programmes, outsourced services and construction contracts. Participants examine contract clauses, tender files, mobilisation records, cost claims, schedules, quality records, safety evidence, variations, subcontracting arrangements and close-out documents. They apply risk-based audit planning, control testing, sampling, evidence evaluation, root-cause analysis and report writing to identify control failures and support defensible findings.

Instruction combines short technical briefings with realistic contractor audit cases from infrastructure, energy, public procurement, facilities management and industrial operations. Participants work with contract extracts, payment certificates, project schedules, variation registers, timesheets and audit evidence files. During the course, each participant develops a contractor audit work programme, control matrix, testing plan and reporting pack that can be adapted for their own contracts. The course concludes with a capstone audit review and presentation of findings to a simulated management panel.

The programme suits professionals responsible for assurance, contract administration, project controls, procurement compliance and operational oversight. It is particularly relevant where organisations depend on third parties to deliver high-value projects, regulated services, maintenance work or essential infrastructure.

What you will be able to do

  • Plan a risk-based contractor audit using contract, project and operational risk indicators
  • Interpret contract clauses to define auditable obligations, controls and evidence requirements
  • Test procurement, mobilisation and payment controls using documented audit procedures
  • Evaluate contractor cost claims, progress evidence and variation submissions for compliance
  • Assess schedule, quality, safety and subcontractor controls against contractual requirements
  • Apply sampling, walkthroughs and evidence assessment to support defensible audit findings
  • Draft audit reports with root causes, risk ratings, corrective actions and accountable owners
  • Present a complete contractor audit file and management report for a project case

Benefits of attending

For you

  • Conduct contractor audits with a repeatable risk-based work programme
  • Challenge payment claims using contract terms and supporting evidence
  • Identify early warning signs of overpayment, delay and scope creep
  • Write clearer findings that distinguish facts, causes, risks and actions
  • Build credibility with project, procurement and contractor stakeholders

For your organisation

  • Reduces exposure to unsupported payments and duplicate contractor charges
  • Improves assurance over project delivery, quality, safety and subcontracting
  • Strengthens evidence trails for disputes, investigations and external audits
  • Identifies control gaps before they become major cost or schedule failures
  • Creates more consistent contractor audit planning and reporting practices

Course modules

18 modules over 10 days

Participants can define the purpose, scope and assurance boundaries of a contractor audit.

  • Contractor audit objectives linked to value, delivery, compliance and stewardship
  • Three lines model roles across project management, assurance and governance
  • Distinguishing contract administration reviews from independent audit assignments
  • Audit scope boundaries across prime contractors, subcontractors and suppliers
  • Materiality concepts applied to contract values, claims and performance risks
  • Stakeholder expectations mapped through sponsor, management and contractor interviews

Participants can map contractor lifecycle risks to the controls that should prevent or detect them.

  • Lifecycle mapping from business case through close-out and retention release
  • Risk events affecting procurement, mobilisation, delivery, payment and completion
  • Preventive, detective and corrective controls within contractor governance arrangements
  • Control owners identified across sponsor, contract manager and finance teams
  • Risk-control matrices linking obligations, evidence sources and audit tests
  • Early warning indicators for cost growth, delay and performance deterioration

Participants can extract auditable requirements and evidence needs from contract documents.

  • Contract hierarchy examined across agreement, specifications, drawings and schedules
  • Scope clauses translated into measurable deliverables and acceptance criteria
  • Payment provisions reviewed for milestones, rates, retention and certification
  • Notice requirements tested for delays, claims, defects and changed conditions
  • Audit rights, record retention and access clauses identified
  • Key performance indicators traced from contract schedules to reporting evidence

Participants can test whether contractor selection and appointment followed approved procurement controls.

  • Procurement strategy tested against approval limits and sourcing requirements
  • Tender evaluation records reviewed for consistency, scoring and conflicts
  • Bid clarifications assessed for equal treatment and documented decisions
  • Due diligence tested for sanctions, ownership, capability and financial standing
  • Award approvals matched to delegated authority and evaluation recommendations
  • Contract execution verified before work commencement and expenditure commitment

Participants can assess whether mobilisation established reliable delivery and control baselines.

  • Mobilisation plans tested against contractual deliverables and commencement conditions
  • Baseline schedules reviewed for logic, milestones, resources and approval
  • Cost baselines reconciled with contract sums, contingencies and allowances
  • Governance forums assessed for terms, attendance, decisions and escalation
  • Responsibility assignment matrices compared with contract management accountabilities
  • Document control arrangements tested for versioning, approval and distribution

Participants can prepare a risk-based audit plan tailored to a contractor engagement.

  • Audit universe defined using contract packages, sites and expenditure categories
  • Inherent risk assessed through value, complexity, history and criticality
  • Control risk evaluated from governance design and prior assurance results
  • Materiality thresholds set for payment, schedule and compliance testing
  • Audit objectives converted into criteria, procedures and evidence requirements
  • Engagement plans scheduled around project milestones and data availability

Participants can build audit work programmes with appropriate criteria, samples and testing steps.

  • Audit criteria drawn from contracts, policies, laws and technical standards
  • Attribute sampling applied to approvals, certificates and compliance records
  • Judgemental samples selected using risk indicators and unusual transactions
  • Population completeness tested before selecting invoices, variations or milestones
  • Work programmes specify procedures, evidence, conclusions and reviewer sign-off
  • Sampling limitations documented when records are incomplete or unavailable

Participants can obtain, document and evaluate audit evidence through fieldwork methods.

  • Process walkthroughs trace transactions from instruction through payment approval
  • Interview plans distinguish factual evidence from management explanation
  • Site observations documented using dated records, photographs and inspection notes
  • Evidence reliability assessed by source independence, timeliness and completeness
  • Working papers cross-reference criteria, procedures, evidence and conclusions
  • Chain of custody maintained for sensitive records and investigation materials

Participants can test contractor payment claims against contractual entitlement and supporting evidence.

  • Payment claims reconciled to contract rates, quantities and certified progress
  • Milestone payments tested against acceptance records and approval evidence
  • Timesheets checked for authorisation, labour categories and duplicate charging
  • Plant and equipment charges compared with logs, rates and utilisation
  • Materials invoices verified through delivery records, storage and title transfer
  • Retention, advances and recoveries recalculated against contractual payment provisions

Participants can assess whether changes, variations and claims were authorised and valued correctly.

  • Change requests traced from origin through technical and commercial approval
  • Variation registers tested for completeness, status, value and cumulative impact
  • Scope changes separated from defects, omissions and contractor responsibility
  • Pricing methods assessed using schedule rates, quotations and cost build-ups
  • Extension-of-time claims reviewed against notices, records and critical path analysis
  • Compensation events tested against contractual triggers and delegated authority

Participants can examine schedule controls and evidence supporting delay-related decisions.

  • Critical path method schedules reviewed for logic, updates and baseline integrity
  • Progress reports reconciled with site records, milestones and payment certificates
  • Schedule variance analysed through planned-versus-actual dates and float consumption
  • Delay notices tested for timeliness, cause, impact and mitigation actions
  • Recovery plans assessed for resources, sequencing, ownership and monitoring
  • Concurrent delay evidence examined before attributing responsibility or entitlement

Participants can audit quality assurance, inspection and defect-management controls.

  • Inspection and test plans matched to specifications and hold points
  • Quality records sampled for approvals, results, nonconformities and rework
  • Material certifications verified against approved submittals and technical requirements
  • Nonconformance reports traced through containment, correction and closure verification
  • Defect registers assessed for ageing, ownership, remediation and acceptance
  • Commissioning evidence tested against completion criteria and handover requirements

Participants can test contractor compliance with health, safety, environmental and social obligations.

  • Site safety plans checked against contractual and statutory requirements
  • Permit-to-work controls tested for authorisation, isolation and expiry management
  • Incident records reviewed for reporting, investigation and corrective action
  • Environmental controls assessed for waste, emissions, spills and monitoring
  • Labour compliance tested through working hours, wages and grievance records
  • Community commitments verified through consultation logs and impact mitigation evidence

Participants can assess controls over subcontracting and downstream contractor performance.

  • Subcontract approvals tested against consent requirements and due diligence
  • Flow-down clauses checked for quality, safety and confidentiality obligations
  • Subcontractor payment evidence reviewed for prompt-payment and retention compliance
  • Approved supplier lists compared with purchase orders and delivery records
  • Conflict-of-interest declarations examined for undisclosed related-party relationships
  • Performance monitoring tested across subcontractor milestones, defects and incidents

Participants can identify and investigate common contractor fraud and misconduct indicators.

  • Duplicate billing indicators identified through invoice, vendor and payment analysis
  • Fictitious labour risks tested using attendance, access and payroll records
  • Bid-rigging warning signs assessed through pricing patterns and bidder links
  • Conflict indicators examined through ownership records and approval relationships
  • Split purchases tested against thresholds, aggregation and delegated authority
  • Investigation referrals framed with facts, evidence gaps and preservation actions

Participants can develop clear findings and corrective actions from contractor audit evidence.

  • Finding statements structured around criteria, condition, cause and consequence
  • Five Whys analysis used to distinguish symptoms from root causes
  • Risk ratings calibrated using likelihood, impact and control effectiveness
  • Recommendations specified with actions, owners, due dates and verification evidence
  • Management responses assessed for adequacy, feasibility and accountability
  • Issue registers maintained from draft findings through closure validation

Participants can communicate contractor audit results and monitor agreed corrective actions.

  • Executive summaries present material exposures, findings and required decisions
  • Evidence-based language separates verified facts from management assertions
  • Exit meetings test factual accuracy without negotiating audit conclusions
  • Escalation protocols applied to fraud, safety and major contractual breaches
  • Action plans monitored through milestones, evidence requests and overdue reporting
  • Follow-up reviews verify implementation and sustained control operation

Participants can build, review and present a complete contractor audit file and management report.

  • Audit scope defined from contract risks, expenditure and delivery evidence
  • Risk-control matrix completed with criteria, controls and test procedures
  • Payment, variation and schedule evidence assessed for audit conclusions
  • Findings drafted using cause, consequence, rating and corrective action
  • Management report prepared for project sponsors and governance committee review
  • Audit conclusions presented and defended against management panel questions

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Contractor audit planning template
  2. Contract risk-control matrix
  3. Payment claim testing checklist
  4. Variation and claims review model
  5. Contractor audit working-paper pack
  6. Management audit report template

Who should attend

  • Internal Auditors — need to test contractor controls and report evidence-based findings
  • Contract Managers — need assurance that contractual obligations are being met
  • Project Managers — need to identify delivery and payment control weaknesses
  • Procurement Managers — need to verify tendering, award and supplier governance controls
  • Project Controls Specialists — need to test schedule, cost and progress reporting evidence
  • Compliance and Risk Officers — need to monitor third-party contractual and regulatory exposure

Skills and tools covered

Contract compliance auditingRisk-based audit planningPayment claim testingVariation control reviewAudit evidence evaluationCorrective action tracking

Tools and standards

ISO 19011, COSO Internal Control Framework, FIDIC Conditions of Contract, NEC4 Engineering and Construction Contract

How the course runs

Training methodology

The course uses short instructor briefings, contract-document reviews, facilitated case analysis, small-group audit planning and reporting simulations. Participants examine realistic evidence packs containing tender records, clauses, progress certificates, invoices, schedules, variation requests and site records. They practise selecting tests, defining samples, assessing evidence and framing findings for management action. Application planning sessions help participants adapt the audit tools to their own contract types, governance arrangements and risk priorities.

Requirements and prerequisites

Participants should have working experience with contracts, projects, procurement, operations, finance, audit or compliance. They should be comfortable reading basic contract documents, invoices, project reports and spreadsheets. Familiarity with internal controls, project governance or audit terminology is useful but not essential. The course does not require legal training, professional audit certification, quantity-surveying qualifications or advanced financial modelling skills. Participants are encouraged to bring anonymised examples of contract clauses, audit issues or contractor reporting challenges relevant to their work.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants should have practical exposure to contracts, projects, procurement, operations, finance, audit or compliance. Legal qualifications and formal audit certification are not required.

Participants may bring anonymised contract clauses, audit reports, payment issues or contractor performance concerns. A laptop is useful for working with templates and case materials, particularly in live online delivery.

The course is designed for internal auditors, contract managers, project managers, procurement professionals, project controls staff and compliance officers. It is most useful for those overseeing high-value, operationally critical or regulated contractor arrangements.

Contract management training focuses on administering obligations and relationships, while project management training focuses on planning and delivery. This course focuses on independently testing whether contractor controls, payments, performance evidence and compliance records stand up to audit scrutiny.

Participants leave with reusable audit planning, testing, evidence and reporting tools. These can be adapted for construction, maintenance, outsourced services, infrastructure, technology implementation and supplier-managed operations.

Each day runs from 08:30 to 16:30, providing about 6.5 contact hours. The first week builds audit foundations and testing methods, while the second week applies them to delivery controls, findings, reporting and the capstone audit case.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.