SCM Award File Audit Checklist
24 items an Auditor-General (AGSA) audit team commonly looks for in a municipal supply chain management award file, in six stages. Use it to test one file before the auditors do. The same 24 items drive our free Award File Evidence Checker.
High risk means a missing record usually leads to an audit finding, because the award can be irregular or unauditable. Medium risk means a compliance or record-keeping gap. Ratings are MuniLink’s reading of the regulations and AGSA findings, not an AGSA scale.
Planning
Need approved
Medium riskShows the purchase came from a real, approved need (demand management).
- Evidence to have on file
- Approved requisition or needs memo from the user department.
- Reference
- MSCM Reg 10
Specification approved by the Bid Specification Committee
High riskSpecifications must be unbiased and approved before the bid is published.
- Evidence to have on file
- BSC minutes and the specification approved by the accounting officer before the advert.
- Reference
- MSCM Reg 27(1), 27(2)(g)
Budget confirmed
High riskSpending outside an approved budget is unauthorised expenditure.
- Evidence to have on file
- Budget confirmation naming the vote or project and the funds available, dated before the advert.
- Reference
- MFMA s15; MSCM Reg 11(1)(b)
Committee members’ declarations of interest
High riskUndeclared interests of officials are a recurring audit finding on conflicts of interest.
- Evidence to have on file
- Signed declarations and attendance registers for every BSC, BEC and BAC sitting.
- Reference
- MSCM Reg 46(2)(e)–(f), 27(4), 29(4)
Advert and bids
Advert and minimum advertising period
High riskBids must stay open at least 14 days, or 30 days over R10 million or long-term, unless a shorter period was justified.
Applies to competitive bids and quotations above the threshold, not small quotations or Reg 36 deviations.
- Evidence to have on file
- Advert copies (eTender portal, website, newspaper) with dates, and approval of any shorter period.
- Reference
- MSCM Reg 22(1)(b)(i), 22(2); MFMA Circular 83
Bid opening register
High riskProves who bid and that no bid was added or lost after closing.
Applies to competitive bids and quotations above the threshold, not small quotations or Reg 36 deviations.
- Evidence to have on file
- Register of every bid received in time, opened in public, signed and published.
- Reference
- MSCM Reg 23
Bidder compliance
CSD report
High riskThe CSD is how suppliers are verified; awards to people in the service of the state are tested against it.
- Evidence to have on file
- CSD report for the recommended bidder dated before the award (directors, in-service-of-state, restriction status).
- Reference
- MFMA Circular 81; MSCM Reg 38(1)(c), 44
Tax compliance status
High riskNo award above R15 000 may go to a person whose tax matters are not in order.
- Evidence to have on file
- CSD or SARS eFiling tax compliance printout at the date of the award.
- Reference
- MSCM Reg 43; MFMA Circular 90
MBD 4 declaration of interest
High riskBidders must declare links to people in the service of the state; a false declaration is a fraud indicator.
- Evidence to have on file
- Signed MBD 4 from the recommended bidder.
- Reference
- MSCM Reg 13(c), 21(c), 44; MBD 4
MBD 6.1 preference points claim
Medium riskA preference point system applied wrongly is one of the most common procurement findings.
- Evidence to have on file
- Signed MBD 6.1 matching the points used in the evaluation.
- Reference
- PPR 2022 reg 3; MBD 6.1
MBD 8 past supply chain practices
Medium riskBids must be rejected for past abuse, fraud or listing as a tender defaulter.
- Evidence to have on file
- Signed MBD 8 from the recommended bidder.
- Reference
- MSCM Reg 38(1)(d)(ii), 38(1)(g); MBD 8
MBD 9 independent bid determination
Medium riskGuards against bid rigging between bidders.
- Evidence to have on file
- Signed MBD 9 from the recommended bidder.
- Reference
- MSCM Reg 38(1); MBD 9
B-BBEE or specific-goals proof
Medium riskPreference points claimed without the proof the tender asked for cannot be awarded.
- Evidence to have on file
- B-BBEE certificate or sworn affidavit, or the proof the tender asked for each specific goal.
- Reference
- PPR 2022 reg 3(b)
CIDB grading
High riskConstruction works may not be awarded to an unregistered or under-graded contractor.
Applies only to construction works (CIDB).
- Evidence to have on file
- CIDB register printout showing the required grade and class at the date of the award.
- Reference
- CID Regulations reg 25
Municipal accounts not in arrears
Medium riskBids must be rejected when rates and service charges are more than three months in arrears.
- Evidence to have on file
- Rates and services statement or declaration for the bidder and its directors.
- Reference
- MSCM Reg 28(1)(c), 38(1)(d)(i)
Evaluation and award
Bid Evaluation Committee report
High riskAn evaluation that departs from the published criteria is an unfair process.
Applies to every route except a Reg 36 deviation.
- Evidence to have on file
- Signed BEC report with scores against the criteria published in the bid.
- Reference
- MSCM Reg 28
Bid Adjudication Committee minutes
High riskThe BAC must consider the evaluation report and decide within its delegation.
- Evidence to have on file
- Signed BAC minutes considering the BEC report, with members present and the decision.
- Reference
- MSCM Reg 29
Delegated approval
High riskAbove set values only the accounting officer or a properly sub-delegated official may make the final award.
- Evidence to have on file
- Award approval signed by the right person for the value, with the delegation in force on that date.
- Reference
- MSCM Reg 5(2), 29(1)(b)
Contract and close-out
Award letter
Medium riskShows the award was communicated only after it was approved.
- Evidence to have on file
- Letter of award to the successful bidder, dated after the approval.
- Reference
- MSCM Reg 29; MFMA s116
Signed contract or SLA
High riskContracts must be in writing, with terms for termination and disputes.
- Evidence to have on file
- Contract or service level agreement signed by both parties before work starts.
- Reference
- MFMA s116(1)
Unsuccessful bidders notified
Medium riskBidders must be able to object within 14 days of the decision.
Applies to every route except a Reg 36 deviation.
- Evidence to have on file
- Letters to unsuccessful bidders with reasons and their right to object within 14 days.
- Reference
- MSCM Reg 49
Award published
Medium riskAwards, including deviations, must be made public.
- Evidence to have on file
- eTender portal and website notice of the award, within 7 working days.
- Reference
- MFMA Circular 83; MSCM Reg 23(c)(iii)
Deviation
Reg 36 reasons recorded and approved
High riskDeviations are allowed only on the listed grounds, such as an emergency or a single provider.
Applies only to a Reg 36 deviation.
- Evidence to have on file
- Deviation memo naming the Reg 36 ground, with the accounting officer’s approval.
- Reference
- MSCM Reg 36(1)–(2)
Deviation reported to council
High riskThe reasons must go to the next council meeting and into the financial statements.
Applies only to a Reg 36 deviation.
- Evidence to have on file
- Council agenda or minutes listing the deviation, and the note in the annual financial statements.
- Reference
- MSCM Reg 36(2)
Test one workflow with us.
A readiness check walks a sample of your award files against items like these and gives you an evidence map, findings and a prioritised fix list.
Teams or phone, at a time that suits you. Or email [email protected] · LinkedIn (opens in a new tab)