


{"id":1201,"date":"2021-08-01T12:36:59","date_gmt":"2021-08-01T12:36:59","guid":{"rendered":"https:\/\/alminawi.com\/?p=600"},"modified":"2025-09-27T12:58:20","modified_gmt":"2025-09-27T12:58:20","slug":"600-2","status":"publish","type":"post","link":"https:\/\/e.americanpro.org\/?p=1201","title":{"rendered":"Internal Audit of Operations: Episode 08, Procurement Process Auditing"},"content":{"rendered":"<p>Relevant Article: <a href=\"https:\/\/alminawi.com\/?p=598\">Supply Chain Management, Episode 01, Procurement Process, Simplified<\/a><\/p>\n<p data-start=\"76\" data-end=\"852\">The internal audit of the procurement process is a crucial component in evaluating an organization\u2019s financial integrity, operational efficiency, and regulatory compliance. Using the <strong data-start=\"259\" data-end=\"277\">Audit Road Map<\/strong>, auditors begin by identifying the <strong data-start=\"313\" data-end=\"330\">revenue cycle<\/strong> and procurement\u2019s impact on it. Then they consider <strong data-start=\"382\" data-end=\"409\">management\u2019s assertions<\/strong> about procurement-related accounts such as accounts payable, inventory, and expense recognition. These assertions\u2014<strong data-start=\"524\" data-end=\"613\">existence, completeness, accuracy, rights and obligations, classification, and cutoff<\/strong>\u2014guide the <strong data-start=\"624\" data-end=\"669\">risk assessment of material misstatements<\/strong>. Auditors then evaluate whether <strong data-start=\"702\" data-end=\"773\">internal controls are adequately designed and operating effectively<\/strong>, followed by <strong data-start=\"787\" data-end=\"821\">substantive testing procedures<\/strong> to gather sufficient evidence.<\/p>\n<h3 data-start=\"854\" data-end=\"891\">Procurement Audit by Process Step<\/h3>\n<ul data-start=\"893\" data-end=\"3090\">\n<li data-start=\"893\" data-end=\"1211\">\n<p data-start=\"895\" data-end=\"925\"><strong data-start=\"895\" data-end=\"925\">Identify (Determine Needs)<\/strong><\/p>\n<ul data-start=\"928\" data-end=\"1211\">\n<li data-start=\"928\" data-end=\"978\">\n<p data-start=\"930\" data-end=\"978\"><em data-start=\"930\" data-end=\"948\">Assertion Focus:<\/em> Completeness, Authorization<\/p>\n<\/li>\n<li data-start=\"981\" data-end=\"1068\">\n<p data-start=\"983\" data-end=\"1068\"><em data-start=\"983\" data-end=\"1002\">Internal Control:<\/em> Procurement planning policy requiring department head approval.<\/p>\n<\/li>\n<li data-start=\"1071\" data-end=\"1211\">\n<p data-start=\"1073\" data-end=\"1211\"><em data-start=\"1073\" data-end=\"1087\">Audit Tests:<\/em> Examine request logs and ensure all requisitions align with business needs; verify no purchases bypassed requisition phase.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"1213\" data-end=\"1527\">\n<p data-start=\"1215\" data-end=\"1261\"><strong data-start=\"1215\" data-end=\"1261\">Request (Purchase Requisition &amp; Approvals)<\/strong><\/p>\n<ul data-start=\"1264\" data-end=\"1527\">\n<li data-start=\"1264\" data-end=\"1310\">\n<p data-start=\"1266\" data-end=\"1310\"><em data-start=\"1266\" data-end=\"1284\">Assertion Focus:<\/em> Authorization, Accuracy<\/p>\n<\/li>\n<li data-start=\"1313\" data-end=\"1405\">\n<p data-start=\"1315\" data-end=\"1405\"><em data-start=\"1315\" data-end=\"1334\">Internal Control:<\/em> Approval matrix for purchase requisitions with documented sign-offs.<\/p>\n<\/li>\n<li data-start=\"1408\" data-end=\"1527\">\n<p data-start=\"1410\" data-end=\"1527\"><em data-start=\"1410\" data-end=\"1424\">Audit Tests:<\/em> Sample requisitions to test for proper authorization; verify budget availability check was documented.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"1529\" data-end=\"1830\">\n<p data-start=\"1531\" data-end=\"1562\"><strong data-start=\"1531\" data-end=\"1562\">Source (Supplier Selection)<\/strong><\/p>\n<ul data-start=\"1565\" data-end=\"1830\">\n<li data-start=\"1565\" data-end=\"1619\">\n<p data-start=\"1567\" data-end=\"1619\"><em data-start=\"1567\" data-end=\"1585\">Assertion Focus:<\/em> Fair Presentation, Completeness<\/p>\n<\/li>\n<li data-start=\"1622\" data-end=\"1711\">\n<p data-start=\"1624\" data-end=\"1711\"><em data-start=\"1624\" data-end=\"1643\">Internal Control:<\/em> Competitive bidding process with RFQs and RFPs logged and stored.<\/p>\n<\/li>\n<li data-start=\"1714\" data-end=\"1830\">\n<p data-start=\"1716\" data-end=\"1830\"><em data-start=\"1716\" data-end=\"1730\">Audit Tests:<\/em> Review RFQ documents and bid evaluations for fairness; verify contracts were approved and retained.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"1832\" data-end=\"2121\">\n<p data-start=\"1834\" data-end=\"1869\"><strong data-start=\"1834\" data-end=\"1869\">Order (Purchase Order Issuance)<\/strong><\/p>\n<ul data-start=\"1872\" data-end=\"2121\">\n<li data-start=\"1872\" data-end=\"1915\">\n<p data-start=\"1874\" data-end=\"1915\"><em data-start=\"1874\" data-end=\"1892\">Assertion Focus:<\/em> Occurrence, Accuracy<\/p>\n<\/li>\n<li data-start=\"1918\" data-end=\"2003\">\n<p data-start=\"1920\" data-end=\"2003\"><em data-start=\"1920\" data-end=\"1939\">Internal Control:<\/em> Centralized system for issuing POs with sequential numbering.<\/p>\n<\/li>\n<li data-start=\"2006\" data-end=\"2121\">\n<p data-start=\"2008\" data-end=\"2121\"><em data-start=\"2008\" data-end=\"2022\">Audit Tests:<\/em> Match POs to approved requisitions and supplier quotes; ensure prices and quantities are accurate.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"2123\" data-end=\"2424\">\n<p data-start=\"2125\" data-end=\"2163\"><strong data-start=\"2125\" data-end=\"2163\">Receive (Goods\/Service Acceptance)<\/strong><\/p>\n<ul data-start=\"2166\" data-end=\"2424\">\n<li data-start=\"2166\" data-end=\"2206\">\n<p data-start=\"2168\" data-end=\"2206\"><em data-start=\"2168\" data-end=\"2186\">Assertion Focus:<\/em> Existence, Cutoff<\/p>\n<\/li>\n<li data-start=\"2209\" data-end=\"2285\">\n<p data-start=\"2211\" data-end=\"2285\"><em data-start=\"2211\" data-end=\"2230\">Internal Control:<\/em> Receiving log matched to POs and inspection reports.<\/p>\n<\/li>\n<li data-start=\"2288\" data-end=\"2424\">\n<p data-start=\"2290\" data-end=\"2424\"><em data-start=\"2290\" data-end=\"2304\">Audit Tests:<\/em> Trace receiving documents to inventory records; verify goods received match PO and were recorded in the correct period.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"2426\" data-end=\"2757\">\n<p data-start=\"2428\" data-end=\"2466\"><strong data-start=\"2428\" data-end=\"2466\">Pay (Invoice Matching and Payment)<\/strong><\/p>\n<ul data-start=\"2469\" data-end=\"2757\">\n<li data-start=\"2469\" data-end=\"2528\">\n<p data-start=\"2471\" data-end=\"2528\"><em data-start=\"2471\" data-end=\"2489\">Assertion Focus:<\/em> Completeness, Rights and Obligations<\/p>\n<\/li>\n<li data-start=\"2531\" data-end=\"2620\">\n<p data-start=\"2533\" data-end=\"2620\"><em data-start=\"2533\" data-end=\"2552\">Internal Control:<\/em> Three-way match (PO, receipt, invoice) prior to payment approval.<\/p>\n<\/li>\n<li data-start=\"2623\" data-end=\"2757\">\n<p data-start=\"2625\" data-end=\"2757\"><em data-start=\"2625\" data-end=\"2639\">Audit Tests:<\/em> Sample payment vouchers and ensure proper matching and timely disbursement; inspect for duplicate payments or errors.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"2759\" data-end=\"3090\">\n<p data-start=\"2761\" data-end=\"2805\"><strong data-start=\"2761\" data-end=\"2805\">Review (Supplier Evaluation and Records)<\/strong><\/p>\n<ul data-start=\"2808\" data-end=\"3090\">\n<li data-start=\"2808\" data-end=\"2855\">\n<p data-start=\"2810\" data-end=\"2855\"><em data-start=\"2810\" data-end=\"2828\">Assertion Focus:<\/em> Accuracy, Classification<\/p>\n<\/li>\n<li data-start=\"2858\" data-end=\"2960\">\n<p data-start=\"2860\" data-end=\"2960\"><em data-start=\"2860\" data-end=\"2879\">Internal Control:<\/em> Periodic supplier performance evaluations; audit trail of procurement records.<\/p>\n<\/li>\n<li data-start=\"2963\" data-end=\"3090\">\n<p data-start=\"2965\" data-end=\"3090\"><em data-start=\"2965\" data-end=\"2979\">Audit Tests:<\/em> Confirm review procedures were completed; evaluate documentation retention for compliance and audit readiness.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3 data-start=\"3092\" data-end=\"3146\">Practical Example: Public Sector Procurement Audit<\/h3>\n<p data-start=\"3148\" data-end=\"3666\">In a Company ACME procurement audit, the auditor identified that while supplier selection was documented, the bid evaluation lacked transparency, violating the completeness assertion. Moreover, the audit found delayed payments due to inconsistent three-way matching, indicating weak internal controls. By tracing the source documents and testing a sample of transactions, the auditor provided management with recommendations to automate approvals and enforce mandatory evaluation templates for sourcing decisions.<\/p>\n<hr data-start=\"3668\" data-end=\"3671\" \/>\n<h3 data-start=\"3673\" data-end=\"3716\">Summary Table \u2013 Procurement Audit Focus<\/h3>\n<div class=\"_tableContainer_16hzy_1\">\n<div class=\"_tableWrapper_16hzy_14 group flex w-fit flex-col-reverse\" tabindex=\"-1\">\n<table class=\"w-fit min-w-(--thread-content-width)\" data-start=\"3718\" data-end=\"4894\">\n<thead data-start=\"3718\" data-end=\"3847\">\n<tr data-start=\"3718\" data-end=\"3847\">\n<th data-start=\"3718\" data-end=\"3731\" data-col-size=\"sm\">Step<\/th>\n<th data-start=\"3731\" data-end=\"3760\" data-col-size=\"sm\">Key Assertions<\/th>\n<th data-start=\"3760\" data-end=\"3795\" data-col-size=\"sm\">Key Controls<\/th>\n<th data-start=\"3795\" data-end=\"3847\" data-col-size=\"md\">Audit Tests<\/th>\n<\/tr>\n<\/thead>\n<tbody data-start=\"3978\" data-end=\"4894\">\n<tr data-start=\"3978\" data-end=\"4108\">\n<td data-start=\"3978\" data-end=\"3991\" data-col-size=\"sm\">Identify<\/td>\n<td data-start=\"3991\" data-end=\"4021\" data-col-size=\"sm\">Completeness, Authorization<\/td>\n<td data-col-size=\"sm\" data-start=\"4021\" data-end=\"4056\">Needs assessment approval<\/td>\n<td data-col-size=\"md\" data-start=\"4056\" data-end=\"4108\">Verify all needs are properly documented<\/td>\n<\/tr>\n<tr data-start=\"4109\" data-end=\"4239\">\n<td data-start=\"4109\" data-end=\"4122\" data-col-size=\"sm\">Request<\/td>\n<td data-col-size=\"sm\" data-start=\"4122\" data-end=\"4152\">Authorization, Accuracy<\/td>\n<td data-col-size=\"sm\" data-start=\"4152\" data-end=\"4187\">Approval workflow<\/td>\n<td data-col-size=\"md\" data-start=\"4187\" data-end=\"4239\">Test approval levels and budget availability<\/td>\n<\/tr>\n<tr data-start=\"4240\" data-end=\"4370\">\n<td data-start=\"4240\" data-end=\"4253\" data-col-size=\"sm\">Source<\/td>\n<td data-col-size=\"sm\" data-start=\"4253\" data-end=\"4283\">Fairness, Completeness<\/td>\n<td data-col-size=\"sm\" data-start=\"4283\" data-end=\"4318\">RFQ\/RFP process<\/td>\n<td data-col-size=\"md\" data-start=\"4318\" data-end=\"4370\">Review bid logs and selection criteria<\/td>\n<\/tr>\n<tr data-start=\"4371\" data-end=\"4501\">\n<td data-start=\"4371\" data-end=\"4384\" data-col-size=\"sm\">Order<\/td>\n<td data-col-size=\"sm\" data-start=\"4384\" data-end=\"4414\">Occurrence, Accuracy<\/td>\n<td data-col-size=\"sm\" data-start=\"4414\" data-end=\"4449\">PO system controls<\/td>\n<td data-col-size=\"md\" data-start=\"4449\" data-end=\"4501\">Match PO to requisition and contract<\/td>\n<\/tr>\n<tr data-start=\"4502\" data-end=\"4632\">\n<td data-start=\"4502\" data-end=\"4515\" data-col-size=\"sm\">Receive<\/td>\n<td data-col-size=\"sm\" data-start=\"4515\" data-end=\"4545\">Existence, Cutoff<\/td>\n<td data-col-size=\"sm\" data-start=\"4545\" data-end=\"4580\">Receiving logs and inspections<\/td>\n<td data-col-size=\"md\" data-start=\"4580\" data-end=\"4632\">Match deliveries to PO and inventory records<\/td>\n<\/tr>\n<tr data-start=\"4633\" data-end=\"4763\">\n<td data-start=\"4633\" data-end=\"4646\" data-col-size=\"sm\">Pay<\/td>\n<td data-col-size=\"sm\" data-start=\"4646\" data-end=\"4676\">Completeness, Rights<\/td>\n<td data-col-size=\"sm\" data-start=\"4676\" data-end=\"4711\">3-way match before payment<\/td>\n<td data-col-size=\"md\" data-start=\"4711\" data-end=\"4763\">Sample payments for accurate and complete match<\/td>\n<\/tr>\n<tr data-start=\"4764\" data-end=\"4894\">\n<td data-start=\"4764\" data-end=\"4777\" data-col-size=\"sm\">Review<\/td>\n<td data-col-size=\"sm\" data-start=\"4777\" data-end=\"4807\">Accuracy, Classification<\/td>\n<td data-col-size=\"sm\" data-start=\"4807\" data-end=\"4842\">Evaluation reports, documentation<\/td>\n<td data-col-size=\"md\" data-start=\"4842\" data-end=\"4894\">Confirm supplier reviews and records maintained<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div class=\"sticky end-(--thread-content-margin) h-0 self-end select-none\">\n<div class=\"absolute end-0 flex items-end\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<p data-start=\"4896\" data-end=\"5082\" data-is-last-node=\"\" data-is-only-node=\"\">This structured approach helps internal auditors assess procurement effectiveness while ensuring compliance, minimizing fraud risks, and improving overall value in the procurement cycle.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Relevant Article: Supply Chain Management, Episode 01, Procurement Process, Simplified The internal audit of the procurement process is a crucial component in evaluating an organization\u2019s financial integrity, operational efficiency, and regulatory compliance. Using the Audit Road Map, auditors begin by identifying the revenue cycle and procurement\u2019s impact on it. Then they consider management\u2019s assertions about [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":833,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[17],"tags":[],"class_list":["post-1201","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internal-audit"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/e.americanpro.org\/wp-content\/uploads\/2025\/06\/GIF-13.gif","_links":{"self":[{"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/posts\/1201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1201"}],"version-history":[{"count":1,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/posts\/1201\/revisions"}],"predecessor-version":[{"id":2130,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/posts\/1201\/revisions\/2130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/media\/833"}],"wp:attachment":[{"href":"https:\/\/e.americanpro.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}