Procurement Risk and Governance Masterclass Training Course

Participants can set procurement risk appetite statements and define tolerances for decision-making.

• Risk appetite statements linked to organisational objectives and obligations
• Tolerance thresholds for supplier concentration, disruption and compliance exposure
• Inherent, residual and target risk distinguished through procurement examples
• Risk acceptance authorities aligned with delegated financial and contractual powers
• Exception approvals documented with rationale, duration and compensating controls
• Escalation triggers established for appetite breaches and emerging threats

Participants can create a risk taxonomy that captures material procurement exposures without duplication.

• Risk universe structured across strategic, operational, financial and compliance domains
• Supplier, category, contract and transaction risks separated for ownership
• Cause-event-impact statements written using clear risk articulation
• Risk taxonomy mapped to enterprise risk management categories
• Interdependencies identified between procurement risks and business continuity risks
• Materiality criteria set for portfolio, category and supplier risk

Participants can assess procurement risks and document controls in an auditable register.

• Likelihood and impact scales calibrated using defined rating criteria
• Risk velocity, persistence and detectability added to assessment models
• Control objectives linked directly to stated procurement risk events
• Preventive, detective and corrective controls classified by control purpose
• Control design assessed for ownership, frequency, evidence and segregation
• Residual risk ratings justified through documented control effectiveness

Participants can prioritise procurement oversight through risk-based spend and supplier segmentation.

• Kraljic portfolio matrix adapted for supply risk and business impact
• Spend analysis identifies concentration, dependency and unmanaged expenditure patterns
• Supplier segmentation combines criticality, substitutability and risk exposure
• Single-source dependencies tested against approved contingency requirements
• Category heat maps rank risks by materiality and urgency
• Resource allocation aligned with supplier tier and residual risk

Participants can design proportionate due diligence and onboarding controls for different supplier risk tiers.

• Due diligence tiers determined by spend, criticality and jurisdiction
• Beneficial ownership checks identify hidden related-party and sanctions exposure
• Adverse media screening assessed for relevance, recency and credibility
• Supplier questionnaires test compliance, resilience, labour and data controls
• Onboarding gates prevent contracting before mandatory checks conclude
• Remediation plans govern conditional approval and enhanced monitoring

Participants can integrate risk analysis into sourcing strategies and bid evaluation decisions.

• Sourcing business cases quantify risk-adjusted cost and value assumptions
• Make-buy decisions assess control, continuity and capability consequences
• Scenario analysis tests market shocks, supplier failure and demand volatility
• Bid evaluation models weight commercial, technical and risk criteria
• Should-cost analysis exposes pricing assumptions and supply market exposure
• Award recommendations document unresolved risks and acceptance decisions

Participants can assess contractual protections, risk allocation and remedy structures for critical suppliers.

• Contract risk allocation matches control capability and commercial incentives
• Service levels define measurable outcomes, exclusions and reporting evidence
• Limitation of liability clauses tested against plausible loss scenarios
• Audit rights support verification of supplier controls and records
• Step-in, termination and transition clauses protect continuity arrangements
• Change control procedures prevent unmanaged scope, price and risk changes

Participants can assess financial distress and market exposure affecting supplier continuity.

• Financial statement review identifies liquidity, solvency and cash flow warning signs
• Altman Z-score limitations considered for private and multinational suppliers
• Credit ratings interpreted alongside payment behaviour and covenant information
• Commodity price exposure assessed through indexation and hedging provisions
• Foreign exchange risks allocated through pricing and contract mechanisms
• Supplier distress playbooks define intervention, contingency and stakeholder actions

Participants can assess operational resilience and establish proportionate continuity requirements for suppliers.

• Business impact analysis identifies critical goods, services and dependencies
• Time to recover and recovery point objectives applied
• Business continuity plans reviewed for roles, communications and recovery actions
• Dual sourcing decisions assess qualification time, capacity and switching costs
• Supply chain mapping reveals sub-tier dependencies and geographic concentration
• Tabletop disruption scenarios test contingency plans and escalation routes

Participants can strengthen procurement controls against fraud, unethical conduct and conflicted decisions.

• Fraud risk assessments identify incentives, opportunities and rationalisation indicators
• Segregation of duties tested across requisition, award, receipt and payment
• Conflict declarations reviewed for completeness, recency and mitigation actions
• Bid-rigging indicators assessed through pricing patterns and bidder behaviour
• Gifts, hospitality and sponsorship controls aligned with approval thresholds
• Whistleblowing routes protect reporting, investigation and retaliation safeguards

Participants can assess cyber and data risks arising from technology and data-processing suppliers.

• Supplier cyber assessments focus on access, resilience and incident response
• Data processing agreements specify controller, processor and subprocessor obligations
• Information classification determines contractual security and handling requirements
• Third-party access controls apply least privilege and periodic recertification
• Cyber incident clauses define notification, evidence and recovery responsibilities
• Technology exit plans address data return, deletion and service transition

Participants can govern environmental, labour and human rights risks within supplier relationships.

• Human rights due diligence traces salient risks through supplier tiers
• Modern slavery indicators assessed through recruitment, wages and worker mobility
• Environmental requirements translated into supplier controls and evidence
• Supplier codes of conduct linked to investigation and remedy procedures
• Corrective action plans distinguish remediation from unsupported supplier exclusion
• Responsible procurement reporting records evidence, limitations and unresolved risks

Participants can apply governance controls to regulated, public-sector and high-scrutiny procurement decisions.

• Procurement procedures preserve fairness, transparency and equal treatment principles
• Audit trails capture evaluation rationale, approvals and communications
• Emergency procurement controls define urgency evidence and retrospective review
• Sanctions screening addresses suppliers, owners, countries and payment routes
• Records retention schedules protect evidence for disputes and investigations
• Regulatory change monitoring assigns owners, actions and control updates

Participants can establish performance and risk indicators that trigger timely management action.

• Key risk indicators distinguish exposure measures from performance metrics
• Thresholds use baselines, trends and appetite-linked escalation points
• Supplier scorecards combine delivery, quality, financial and compliance indicators
• Leading indicators identify deterioration before service failure occurs
• Root cause analysis separates recurring symptoms from control failures
• Supplier review meetings document actions, owners and due dates

Participants can plan risk-based assurance and test whether procurement controls operate as intended.

• Assurance maps identify overlap and gaps between control providers
• Risk-based audit plans prioritise high-impact residual procurement risks
• Control testing samples evidence for timeliness, completeness and approval
• Design effectiveness assessed before operating effectiveness conclusions are drawn
• Audit findings rated by impact, recurrence and management response
• Management action tracking tests closure evidence and sustained remediation

Participants can prepare concise risk reports that support informed executive and board decisions.

• Risk dashboards present exposure, trend, control status and decisions
• Committee packs distinguish information items from approval requests
• Heat maps supplemented with narrative on uncertainty and interdependencies
• Risk reporting includes appetite breaches, accepted risks and overdue actions
• Executive summaries state decisions required, options and recommended actions
• Board reporting uses clear materiality thresholds and forward-looking indicators

Participants can select risk treatments and manage escalations during procurement-related incidents.

• Risk treatment options compare avoidance, reduction, transfer and acceptance
• Treatment plans specify actions, owners, milestones and resource requirements
• Escalation protocols define reporting channels, timing and decision authorities
• Crisis procurement teams coordinate legal, operations, finance and communications
• Incident logs preserve decisions, evidence and post-incident learning
• Lessons learned convert disruption findings into revised controls

Participants can plan a phased implementation of improved procurement risk governance.

• Maturity assessments benchmark governance, data, controls and assurance capabilities
• Target operating models define roles, processes and information flows
• Implementation roadmaps sequence quick wins, dependencies and control milestones
• Change impact assessments identify affected teams, systems and suppliers
• Training plans address risk ownership and control execution gaps
• Governance reviews monitor adoption, effectiveness and emerging requirements

Participants can build, review and present a complete procurement risk governance pack for a critical category or supplier portfolio.

• Scope a critical category, supplier portfolio or procurement transformation case
• Define risk appetite, ownership and governance decision rights
• Build a risk and control register with residual ratings
• Assess supplier exposure using due diligence and continuity evidence
• Prepare dashboard, escalation matrix, assurance plan and implementation roadmap
• Present governance recommendations and defend decisions under executive challenge