Procurement Governance: The Risk Most Boards Aren't Watching

By Kirsten Smith, Chartered Governance Professional

I hadn't thought properly about procurement governance since I wrote an assignment on it during my MBA. Which, when you sit with that for a moment, tells you everything about how this topic gets treated in governance circles. If someone who works with boards professionally can let procurement drift to the back of the drawer, it shouldn't surprise anyone that most boards have done the same.

And yet the risks procurement carries are not small, not contained, and not somebody else's problem. This article is my attempt to pull procurement governance back into focus, not through a compliance lens, but through the lens of what I actually see when I sit across the table from directors and ask them how their board operates.

The Blind Spot in Board Oversight

In almost every board review I conduct, there is a moment where I ask about oversight of material contracts and supplier relationships, and the room goes quiet. Not because the board is hiding something, but because nobody has ever asked the question before. Procurement is one of those topics that has been categorised as "management's problem" for so long that it has become functionally invisible at board level.

Directors will spend an hour debating a strategy paper and then wave through a supplier contract worth twice as much without a single question. They will scrutinise the CEO's performance in forensic detail and have no idea who the organisation's five largest suppliers are, whether any of those relationships carry concentration risk, or when the contracts were last competitively tested.

This isn't negligence. It's a design problem. Most governance suites don't include procurement in the regular reporting cycle, most delegations documents don't clearly define when a procurement decision should reach the board, and most board agendas have never included a standing item on supplier risk. The gap isn't dramatic. It's structural. And it sits there quietly, compounding, until the day something goes wrong.

Where Supplier Risk Actually Lives

The thing that becomes genuinely interesting when you start pulling at this thread is how many different categories of risk a single procurement decision can touch. A poorly chosen supplier can create financial exposure through cost overruns or contract disputes. It can create operational risk if the supplier fails to deliver and there's no contingency. It can create legal and compliance risk through modern slavery exposure, data handling failures, or regulatory breaches. It can create reputational risk if the supplier's conduct or values are inconsistent with the organisation's own. And it can create strategic risk if the organisation becomes so dependent on one provider that it loses flexibility or bargaining power.

No director can stay across all of those dimensions for every procurement decision, and nobody is suggesting they should. But the board does need to satisfy itself that the organisation's procurement systems are designed to identify, manage, and escalate those risks before they become board level problems. That's oversight. And for most boards, it isn't happening in any structured way.

The Conflicts of Interest Nobody Declares

One of the most common governance vulnerabilities I see in procurement sits at the intersection of relationships and money. A director whose former firm appears on the preferred supplier list. A CEO whose longstanding professional contact runs a consulting practice that tenders for work. A committee member who sits on the board of an entity that provides services to the organisation. In each case, the person involved is usually confident, and often correct, that the relationship doesn't influence their judgement. But confidence is not a control, and good intentions are not a governance system.

The boards that manage this well treat conflict declaration as routine, unremarkable, and culturally normal. There's a standing item at the start of every meeting. The register gets reviewed, not just maintained. And the Chair sets a tone where declaring a potential conflict is treated as a sign of professionalism rather than an admission of wrongdoing. The boards that don't manage it well rely on individuals to notice and disclose their own blind spots, which, given what we know about human psychology, is an extraordinarily optimistic approach.

Structural protections matter more than policies here. Competitive tendering requirements, separation between the person who defines the need and the person who selects the supplier, independent review above certain dollar thresholds: these reduce the opportunity for conflicts to influence outcomes regardless of whether anyone remembers to declare them.

What Good Procurement Governance Looks Like (and It's Not Complicated)

The boards I work with that govern procurement well aren't doing anything particularly exotic. They have a procurement policy that reflects current practice rather than collecting dust from a previous administration. They have a delegations structure that clearly defines which decisions management can make independently and which require board or committee visibility. They have reporting built into the regular cycle, not a separate procurement agenda item at every meeting, but enough visibility that the board has a current picture of material contracts, supplier performance, and emerging risks.

And they ask questions. Not operational questions about individual purchase orders, but governance questions about systems and risk. Where are we most dependent on a single supplier? How do we evaluate supplier integrity beyond financial viability? When was our largest contract last competitively tested? If a procurement relationship created a front page problem tomorrow, would the board have seen it coming?

Those questions don't require the board to become a procurement committee. They require the board to do what it's supposed to do with every material risk: satisfy itself that management has the systems, the capability, and the judgement to handle it, and that the reporting lines are designed to escalate the things that need escalating.

The Value Question Nobody Asks

Most boards think of procurement purely as a cost function. Something you do as cheaply and efficiently as possible. But procurement is also one of the most underleveraged sources of strategic value in an organisation, particularly in the not for profit sector where every dollar matters and where the choice of supplier can directly support or undermine the organisation's mission.

Strong supplier relationships improve quality and reliability over time. Ethical procurement practices strengthen an organisation's reputation and social licence. Consolidated purchasing frees up resources for the work that actually matters. And for community organisations, deliberately choosing local and values aligned suppliers creates a direct connection between how the organisation spends money and the communities it exists to serve.

I've started asking boards a question that most have never been asked before: "What value is your procurement function delivering beyond cost savings?" The answer usually reveals either a sophisticated, strategically minded function or a reactive process that nobody has examined since the last time a contract went wrong. Both answers are useful. One gives the board confidence. The other gives the board a clear improvement priority.

Bringing Procurement Back to the Boardroom

Procurement governance is one of those topics that everyone agrees is important in the abstract and almost nobody prioritises in practice. It doesn't have the urgency of a crisis, the profile of a strategy discussion, or the regulatory teeth of a compliance obligation. So it waits. And the waiting is where the risk accumulates.

If you're a Chair, the simplest thing you can do is ask your CEO when the board last received a structured update on procurement risk, and if the answer is "never" or "I'm not sure," put it on the agenda for the next meeting. Not as a 90 minute deep dive. Just 15 minutes that asks: what are our material supplier relationships, what risks do they carry, and are we confident our systems are managing them?

That one conversation will tell you more about your procurement governance maturity than any policy document ever could.

Governance in Focus works with boards to sharpen performance and strengthen accountability. If your board is ready to take a closer look at how it governs procurement, or at its broader governance effectiveness, we welcome the conversation.