Back to Explore
📑

Procurement & SCM

Procurement Anomaly Signals

Anomaly signals across suppliers — Benford deviation, split-PO clustering and vendor concentration.

📖 6 min read🎯 Intermediate✍️ Updated 2026

Why anomaly signals belong in modern SCM oversight

Supply chain management is where most public-sector irregular expenditure and corruption originates, which is why the PFMA, MFMA and the SCM regulations, reinforced by PRECCA and King IV's ethical-procurement expectations, place such weight on competitive, transparent processes. Manual review cannot scale to the transaction volumes a department or municipality processes, so risk-based anomaly detection is now a practical necessity rather than a sophistication. AuditPro Core surfaces statistical and structural red flags across the supplier base so that scarce audit and SCM-compliance effort is directed at the transactions most likely to conceal a problem.

The Numbers

AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.

Contracts scanned

12,480

Vendors flagged

37

Benford χ² deviation

Split-PO clusters

14

near R500k threshold

Concentration > 40%

5

single-vendor risk

Anomaly signals by department

Highest-risk vendors

VendorDominant signalRisk score
Vendor 0471Split-PO cluster0.91
Vendor 1188Concentration 47%0.86
Vendor 0902Benford deviation0.78

Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.

Benford deviation as a first-pass screen

Benford's Law describes the expected frequency of leading digits in naturally occurring financial data; genuine spend tends to follow it. A supplier whose invoice amounts deviate sharply from that distribution may be subject to manipulation such as fabricated or rounded values, making Benford a cheap, well-established screen rather than proof of wrongdoing.

Split orders to defeat thresholds

SCM regulations require quotations or competitive bidding above set rand thresholds. Splitting a single requirement into several smaller purchase orders to stay below those thresholds is a classic evasion, and clusters of same-supplier, same-period orders just under a limit are a structural fingerprint of it.

Vendor concentration and dependency risk

When a disproportionate share of spend, or of awards in a category, flows to one supplier, it raises both competition and collusion concerns and creates operational dependency. Concentration is not automatically irregular, but it warrants explanation and a check against deviation and expansion approvals.

A signal is a hypothesis, not a verdict

Each indicator flags elevated risk that an auditor must corroborate against the actual procurement file. The value of combining signals is that overlap, such as a concentrated vendor also showing split-PO clustering, sharply raises the prior probability that a real control failure exists.

How AuditPro Core Bridges the Gap

  • Continuous monitoring: Benford, split-PO and concentration tests run across the full transaction population on a recurring basis, not as a year-end sample.
  • Exception workflow: each flagged supplier becomes a triable case with assignment, commentary and disposition, so signals are cleared or escalated rather than left to recur.
  • Traceability to source: every signal links to the underlying orders, invoices and the relevant SCM threshold or deviation approval for direct corroboration.
  • Audit-ready export: the anomaly findings and their resolutions export as evidence for the audit committee, internal audit and the AGSA engagement team.

Key Takeaways

  • Treat anomaly signals as risk-ranking that focuses review, never as conclusions of irregularity on their own.
  • Watch for clusters of orders sitting just under SCM quotation and bid thresholds as a split-procurement fingerprint.
  • Test concentrated vendors for the deviation and contract-expansion approvals that should accompany single-source reliance.
  • Prioritise suppliers where multiple independent signals overlap, since converging red flags carry far higher predictive weight.

See This on Your Own Data

AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.