Examples of Procurement Risks and Controls for the Public Sector
December 19, 2025
Copyright Notice All content is protected by international copyright laws. You may reference or quote small portions of this document with proper attribution to The IIA, but unauthorized reproduction, distribution, or use beyond that, other than for your own personal use, is strictly prohibited and may constitute a violation of copyright law, resulting in civil and criminal penalties. Contact copyright@theiia.org for permission to use our materials.

This nonmandatory IIA Audit Tool provides examples of potential risk and control considerations of a public sector organization may have within the different phases of the procurement process. These are not meant to be all-inclusive lists and should be customized to the organization.
The tool is designed to accompany the GTAG “Auditing Procurement in the Public Sector, 2nd Edition.”