Free checklist

SCM Award File Audit Checklist

24 items an Auditor-General (AGSA) audit team commonly looks for in a municipal supply chain management award file, in six stages. Use it to test one file before the auditors do. The same 24 items drive our free Award File Evidence Checker.

Guidance, not legal advice. This checklist summarises common requirements of the MFMA, the Municipal Supply Chain Management Regulations (2005), MFMA Circulars 81, 83 and 90, the PPPFA and the Preferential Procurement Regulations (2022), and the CIDB rules for construction works. Your municipality's own SCM policy, delegations and current National Treasury instructions apply, and regulation numbers in your policy may differ. AGSA forms its own audit approach; using this list does not guarantee any audit outcome.

High risk means a missing record usually leads to an audit finding, because the award can be irregular or unauditable. Medium risk means a compliance or record-keeping gap. Ratings are MuniLink’s reading of the regulations and AGSA findings, not an AGSA scale.

Planning

  1. Need approved

    Medium risk

    Shows the purchase came from a real, approved need (demand management).

    Evidence to have on file
    Approved requisition or needs memo from the user department.
    Reference
    MSCM Reg 10
  2. Specification approved by the Bid Specification Committee

    High risk

    Specifications must be unbiased and approved before the bid is published.

    Evidence to have on file
    BSC minutes and the specification approved by the accounting officer before the advert.
    Reference
    MSCM Reg 27(1), 27(2)(g)
  3. Budget confirmed

    High risk

    Spending outside an approved budget is unauthorised expenditure.

    Evidence to have on file
    Budget confirmation naming the vote or project and the funds available, dated before the advert.
    Reference
    MFMA s15; MSCM Reg 11(1)(b)
  4. Committee members’ declarations of interest

    High risk

    Undeclared interests of officials are a recurring audit finding on conflicts of interest.

    Evidence to have on file
    Signed declarations and attendance registers for every BSC, BEC and BAC sitting.
    Reference
    MSCM Reg 46(2)(e)–(f), 27(4), 29(4)

Advert and bids

  1. Advert and minimum advertising period

    High risk

    Bids must stay open at least 14 days, or 30 days over R10 million or long-term, unless a shorter period was justified.

    Applies to competitive bids and quotations above the threshold, not small quotations or Reg 36 deviations.

    Evidence to have on file
    Advert copies (eTender portal, website, newspaper) with dates, and approval of any shorter period.
    Reference
    MSCM Reg 22(1)(b)(i), 22(2); MFMA Circular 83
  2. Bid opening register

    High risk

    Proves who bid and that no bid was added or lost after closing.

    Applies to competitive bids and quotations above the threshold, not small quotations or Reg 36 deviations.

    Evidence to have on file
    Register of every bid received in time, opened in public, signed and published.
    Reference
    MSCM Reg 23

Bidder compliance

  1. CSD report

    High risk

    The CSD is how suppliers are verified; awards to people in the service of the state are tested against it.

    Evidence to have on file
    CSD report for the recommended bidder dated before the award (directors, in-service-of-state, restriction status).
    Reference
    MFMA Circular 81; MSCM Reg 38(1)(c), 44
  2. Tax compliance status

    High risk

    No award above R15 000 may go to a person whose tax matters are not in order.

    Evidence to have on file
    CSD or SARS eFiling tax compliance printout at the date of the award.
    Reference
    MSCM Reg 43; MFMA Circular 90
  3. MBD 4 declaration of interest

    High risk

    Bidders must declare links to people in the service of the state; a false declaration is a fraud indicator.

    Evidence to have on file
    Signed MBD 4 from the recommended bidder.
    Reference
    MSCM Reg 13(c), 21(c), 44; MBD 4
  4. MBD 6.1 preference points claim

    Medium risk

    A preference point system applied wrongly is one of the most common procurement findings.

    Evidence to have on file
    Signed MBD 6.1 matching the points used in the evaluation.
    Reference
    PPR 2022 reg 3; MBD 6.1
  5. MBD 8 past supply chain practices

    Medium risk

    Bids must be rejected for past abuse, fraud or listing as a tender defaulter.

    Evidence to have on file
    Signed MBD 8 from the recommended bidder.
    Reference
    MSCM Reg 38(1)(d)(ii), 38(1)(g); MBD 8
  6. MBD 9 independent bid determination

    Medium risk

    Guards against bid rigging between bidders.

    Evidence to have on file
    Signed MBD 9 from the recommended bidder.
    Reference
    MSCM Reg 38(1); MBD 9
  7. B-BBEE or specific-goals proof

    Medium risk

    Preference points claimed without the proof the tender asked for cannot be awarded.

    Evidence to have on file
    B-BBEE certificate or sworn affidavit, or the proof the tender asked for each specific goal.
    Reference
    PPR 2022 reg 3(b)
  8. CIDB grading

    High risk

    Construction works may not be awarded to an unregistered or under-graded contractor.

    Applies only to construction works (CIDB).

    Evidence to have on file
    CIDB register printout showing the required grade and class at the date of the award.
    Reference
    CID Regulations reg 25
  9. Municipal accounts not in arrears

    Medium risk

    Bids must be rejected when rates and service charges are more than three months in arrears.

    Evidence to have on file
    Rates and services statement or declaration for the bidder and its directors.
    Reference
    MSCM Reg 28(1)(c), 38(1)(d)(i)

Evaluation and award

  1. Bid Evaluation Committee report

    High risk

    An evaluation that departs from the published criteria is an unfair process.

    Applies to every route except a Reg 36 deviation.

    Evidence to have on file
    Signed BEC report with scores against the criteria published in the bid.
    Reference
    MSCM Reg 28
  2. Bid Adjudication Committee minutes

    High risk

    The BAC must consider the evaluation report and decide within its delegation.

    Evidence to have on file
    Signed BAC minutes considering the BEC report, with members present and the decision.
    Reference
    MSCM Reg 29
  3. Delegated approval

    High risk

    Above set values only the accounting officer or a properly sub-delegated official may make the final award.

    Evidence to have on file
    Award approval signed by the right person for the value, with the delegation in force on that date.
    Reference
    MSCM Reg 5(2), 29(1)(b)

Contract and close-out

  1. Award letter

    Medium risk

    Shows the award was communicated only after it was approved.

    Evidence to have on file
    Letter of award to the successful bidder, dated after the approval.
    Reference
    MSCM Reg 29; MFMA s116
  2. Signed contract or SLA

    High risk

    Contracts must be in writing, with terms for termination and disputes.

    Evidence to have on file
    Contract or service level agreement signed by both parties before work starts.
    Reference
    MFMA s116(1)
  3. Unsuccessful bidders notified

    Medium risk

    Bidders must be able to object within 14 days of the decision.

    Applies to every route except a Reg 36 deviation.

    Evidence to have on file
    Letters to unsuccessful bidders with reasons and their right to object within 14 days.
    Reference
    MSCM Reg 49
  4. Award published

    Medium risk

    Awards, including deviations, must be made public.

    Evidence to have on file
    eTender portal and website notice of the award, within 7 working days.
    Reference
    MFMA Circular 83; MSCM Reg 23(c)(iii)

Deviation

  1. Reg 36 reasons recorded and approved

    High risk

    Deviations are allowed only on the listed grounds, such as an emergency or a single provider.

    Applies only to a Reg 36 deviation.

    Evidence to have on file
    Deviation memo naming the Reg 36 ground, with the accounting officer’s approval.
    Reference
    MSCM Reg 36(1)–(2)
  2. Deviation reported to council

    High risk

    The reasons must go to the next council meeting and into the financial statements.

    Applies only to a Reg 36 deviation.

    Evidence to have on file
    Council agenda or minutes listing the deviation, and the note in the annual financial statements.
    Reference
    MSCM Reg 36(2)
Want a second pair of eyes?

Test one workflow with us.

A readiness check walks a sample of your award files against items like these and gives you an evidence map, findings and a prioritised fix list.

Teams or phone, at a time that suits you. Or email [email protected] · LinkedIn (opens in a new tab)