# How Procurement builds the case for a spend audit > A Procurement Director's playbook for building an evidence-backed business case for a spend audit that finance and ownership will actually fund. Source: https://valuexpa.com/insights/how-does-a-procurement-director-build-the-case-for-a-spend Publisher: ValueXPA (https://valuexpa.com) Updated: 2026-10-22 --- Margin drift is the gap between what a vendor contract says and what the invoice actually charges. A Procurement Director usually senses it before anyone else does: a rate card that no longer matches what gets billed, a surcharge that never rolled back, a contract labor invoice that runs past its cap without a flag. Sensing it is not the same as funding a project to fix it. The case for a spend audit has to move from "something feels off" to a proposal a CFO can approve without a leap of faith. That means evidence, a defensible range, and a clear ask. ## Executive Summary The obstacle to funding a spend audit is rarely the CFO's appetite. It is the absence of a number anyone can defend before the audit happens. Procurement is asked to justify spending money to find out whether money is being lost, and a gut feeling about a supplier or a category will not clear a capital or expense approval. The mechanism that fixes this is sequencing: gather the evidence that already exists inside the ERP and contract files before asking for budget, size the opportunity using a stated, sourced range rather than a guess, and route the proposal to the specific stakeholder whose sign-off actually decides it. A Controller wants a control gap named. A CFO wants a dollar range and a payback horizon. An Owner wants to know why this was not caught already. What changes the outcome is treating the business case itself as a scoped deliverable: a short list of contract-to-invoice mismatches already found by hand, a stated basis for the range in play, and a comparison of audit models so the approver is choosing a structure, not signing a blank check. ## 1. Why does procurement need a business case at all for a spend audit? **A spend audit competes for budget against every other line item a Controller or CFO could approve this quarter, and an audit is unusual among them because its payoff is unproven until the audit runs. Procurement has to close that gap with evidence gathered before the ask, not after. Without it, the request reads as a hunch, and hunches lose to line items with a known cost and a known return already attached to them.** Finance approves what it can model. A new ERP module has a vendor quote. A headcount request has a salary. A spend audit, before it starts, has neither a fixed cost nor a proven return, which puts the burden on Procurement to supply both before the meeting rather than during it. The fix is not to promise a number the audit itself will produce. It is to show the pattern that justifies looking: a contract clause nobody has checked against the last twelve invoices, a rate that should have stepped down and did not. That pattern is the business case's opening exhibit, and it costs nothing to assemble because the documents already sit in the vendor file and the ERP. ## 2. What evidence turns a hunch into a fundable request? **The strongest evidence is a small, manually pulled sample: three to five invoices matched line by line against their governing contract, with the mismatch circled. A rate that does not match the rate card, a surcharge still billed after its trigger condition ended, a contract labor rate above the cap. One clean example does more to move a budget conversation than a slide full of industry statistics, because it is specific, checkable, and already true.** Pull the governing contract for a vendor Procurement already suspects, and pull the last several invoices against it. Line up the rate the contract states against the rate actually billed. Note the date any volume tier or rebate threshold should have taken effect. This sample does not need to be large. Its job is to prove the mechanism, not to size the whole spend base. A single documented mismatch, with the contract clause and the invoice line shown side by side, answers the question a skeptical Controller will ask first: is this real, or is this a theory. ## 3. How do you size the opportunity without a full audit yet? **Do not invent a recovery figure for a specific vendor or category before the audit has run; that number does not exist yet and stating one anyway is the fastest way to lose credibility with a numerate CFO. Instead, cite the range a full diagnostic typically sizes to across the whole engagement, attributed to its source, and pair it with the reader's own spend so they compute the stake themselves rather than trusting an estimate handed to them.** Margin drift across a full diagnostic typically runs 1% to 3% of service vendor spend, across ValueXPA diagnostics. That figure describes the whole engagement, not any one vendor or category, and it should stay in its own paragraph, separate from any specific supplier or spend type Procurement names elsewhere in the proposal. Worked example, using the 1% to 3% band: for a manufacturer at $400M in revenue, apply that band to whatever portion of spend is genuinely service vendor and [indirect spend](/insights/indirect-spend-is-30-60-of-operating-cost-and-gets-a), and the resulting range, not a company-wide revenue figure, is the number to put in front of the CFO. ## 4. Who needs to sign off, and what does each stakeholder want to see? **A Procurement Director rarely has budget authority to approve a spend audit alone, which means the proposal has to speak three different languages in one document: the Controller wants the control gap named precisely, the CFO wants a dollar range and a timeline, and the Owner wants to know why internal review has not already caught this. Building the case means writing to all three without diluting any one of them.** Each stakeholder is evaluating a different risk. The Controller is asking whether existing controls, like three-way matching, already cover this or whether there is a genuine gap: three-way matching checks the invoice against the purchase order and receipt, and it does not test whether a surcharge's trigger condition has expired. The CFO is asking about return against cost and how long that takes. The Owner is asking why this surfaced now rather than a year ago, and the honest answer is that nobody has matched the contract library against the invoice stream line by line before. What each stakeholder needs from the proposal before signing off. What each stakeholder needs from the proposal before signing off. | Stakeholder | Primary question | What answers it | Controller | Does an existing control already cover this? | A named gap: which control exists, and what it does not test | CFO | What is the range and how long does it take? | A stated range with its basis, and the diagnostic timeline | Owner | Why wasn't this caught already? | The sample mismatch, showing the contract detail no standard review checks ## 5. How does a fixed-scope diagnostic compare to a contingency audit for this case? **A contingency-fee recovery audit costs nothing upfront, which makes it an easier internal sell on paper, but the firm keeps a share of whatever it finds. A fixed-scope diagnostic has a defined cost and timeline, and the client retains 100% of recoveries. Procurement's business case should name both models honestly and let the approver pick the structure, because the right choice depends on how much the budget conversation itself is the obstacle.** Traditional recovery audit firms charge 25% to 50% of recoveries, which is real money on a genuine finding, but requires no budget line to start. A fixed-scope diagnostic asks for budget approval first and delivers a prioritized recovery and prevention roadmap in 2 to 4 weeks, with the client keeping the full recovery. Where Procurement's internal budget process is the real barrier, leading with the contingency option removes that barrier and still surfaces the same evidence. Where the budget conversation is winnable, the fixed-scope model returns more of any recovery found, and it also builds forward controls the contingency model does not include. ## 6. What should the proposal document itself actually contain? **The proposal is a short packet, not a memo: the sample mismatch with its source documents, the sized range with its stated basis, the stakeholder-specific summary page, and a named next step with a date attached. Anything longer competes with the reader's other priorities and gets deferred. The goal is a document a CFO can approve in one sitting, not one that requires a second meeting to explain itself.** Keep the packet under a handful of pages. Every extra page is a reason to defer the decision to next quarter, and a spend audit business case competes with every other item on a CFO's desk for a limited amount of attention. End with one ask, not three. A request that stacks a meeting, a data pull, and a signed contract in the same email gives the reader three ways to say not yet instead of one way to say yes. - **The sample exhibit:** One or two documented contract-to-invoice mismatches, shown side by side, with dates and amounts visible. - **The sized range:** The opportunity range with its stated basis, kept separate from any specific vendor or category named elsewhere. - **The model comparison:** Fixed-scope against contingency, stated plainly, so the approver is choosing a structure rather than a leap of faith. - **The stakeholder summary:** One page per approver, answering the question that person specifically will ask. - **The next step:** A single dated ask: a scoping call, a data pull, a decision by a stated date. For the wider pattern this sits inside, start with the [margin drift](/insights/margin-drift-spend-leakage-guide) guide. See also [the six categories drift hides in](/insights/indirect-spend-audit-categories) and [what is margin erosion? causes and prevention for manufacturers](/insights/what-is-margin-erosion-causes-and-prevention-for). ## 7. Frequently Asked Questions (People Also Ask) ### What is a spend audit business case? It is a short proposal that gives a Controller, CFO or Owner enough evidence to approve funding an audit before the audit itself has produced any findings. It typically pairs one or two documented contract-to-invoice mismatches with a sized opportunity range and a single, dated ask. ### How many sample invoices do I need before I ask for budget? Three to five, matched line by line against the governing contract, is enough. The goal is one clean, checkable mismatch that proves the pattern exists, not a full audit of the vendor's spend. ### Can I put a dollar figure on what a specific vendor is overbilling before the audit runs? No. Do not estimate a recovery figure for a specific vendor or category before the audit runs. Cite the sourced range for the whole engagement instead, and let the reader apply it to their own spend. ### Who actually approves a spend audit, Procurement or Finance? Procurement rarely holds the budget authority alone. The proposal needs to answer the Controller's question about existing controls, the CFO's question about range and timeline, and the Owner's question about why this was not caught already. ### Should I propose a fixed-scope diagnostic or a contingency-fee audit? Name both honestly. A contingency audit needs no budget approval but the firm keeps a share of what it finds. A fixed-scope diagnostic needs budget approval upfront but the client keeps the full recovery. Which one to lead with depends on whether the internal budget process is the real obstacle. ### What does a Controller want to see in this proposal that a CFO does not? A Controller wants the control gap named precisely: which existing control, like three-way matching, already runs, and specifically what it does not test. A CFO is more focused on the dollar range and how long the diagnostic takes. ### How long should the proposal document be? Short enough to approve in one sitting: a sample exhibit, a sized range with its basis, a one-page summary per stakeholder, and a single dated next step. Extra length gives the reader more reasons to defer the decision. ### What if I can't find a clean mismatch example before writing the business case? Pull the governing contract and the last several invoices for the vendor Procurement already suspects, and line up the stated rate against the billed rate by hand. If no mismatch turns up in that sample, that is useful information too, and the case should wait until one does. ### Does the 1% to 3% range apply to any single category I name in the proposal? No. That range describes a full diagnostic across the whole engagement, not any one vendor, category or spend type. Keep it in its own paragraph, separate from any specific category named elsewhere in the proposal. ### What is the single biggest reason these proposals get rejected? An unsupported number, usually an invented recovery estimate for a specific vendor before any audit has run. A numerate CFO catches this immediately, and it undermines the rest of the proposal even where the other evidence is solid. ### Is contract complexity quietly draining your operating margin? A small systematic drift between your negotiated contracts and your actual vendor billing compounds quietly across a year of invoices. Stop guessing at your exposure and run a targeted audit. **[Take the Free Screener → https://valuexpa.com/margin-drift-screener](https://valuexpa.com/margin-drift-screener)** ## Executive Summary The obstacle to funding a spend audit is rarely the CFO's appetite. It is the absence of a number anyone can defend before the audit happens. Procurement is asked to justify spending money to find out whether money is being lost, and a gut feeling about a supplier or a category will not clear a capital or expense approval. The mechanism that fixes this is sequencing: gather the evidence that already exists inside the ERP and contract files before asking for budget, size the opportunity using a stated, sourced range rather than a guess, and route the proposal to the specific stakeholder whose sign-off actually decides it. A Controller wants a control gap named. A CFO wants a dollar range and a payback horizon. An Owner wants to know why this was not caught already. What changes the outcome is treating the business case itself as a scoped deliverable: a short list of contract-to-invoice mismatches already found by hand, a stated basis for the range in play, and a comparison of audit models so the approver is choosing a structure, not signing a blank check. ## 1. Why does procurement need a business case at all for a spend audit? A spend audit competes for budget against every other line item a Controller or CFO could approve this quarter, and an audit is unusual among them because its payoff is unproven until the audit runs. Procurement has to close that gap with evidence gathered before the ask, not after. Without it, the request reads as a hunch, and hunches lose to line items with a known cost and a known return already attached to them. Finance approves what it can model. A new ERP module has a vendor quote. A headcount request has a salary. A spend audit, before it starts, has neither a fixed cost nor a proven return, which puts the burden on Procurement to supply both before the meeting rather than during it. The fix is not to promise a number the audit itself will produce. It is to show the pattern that justifies looking: a contract clause nobody has checked against the last twelve invoices, a rate that should have stepped down and did not. That pattern is the business case's opening exhibit, and it costs nothing to assemble because the documents already sit in the vendor file and the ERP. ## 2. What evidence turns a hunch into a fundable request? The strongest evidence is a small, manually pulled sample: three to five invoices matched line by line against their governing contract, with the mismatch circled. A rate that does not match the rate card, a surcharge still billed after its trigger condition ended, a contract labor rate above the cap. One clean example does more to move a budget conversation than a slide full of industry statistics, because it is specific, checkable, and already true. Pull the governing contract for a vendor Procurement already suspects, and pull the last several invoices against it. Line up the rate the contract states against the rate actually billed. Note the date any volume tier or rebate threshold should have taken effect. This sample does not need to be large. Its job is to prove the mechanism, not to size the whole spend base. A single documented mismatch, with the contract clause and the invoice line shown side by side, answers the question a skeptical Controller will ask first: is this real, or is this a theory. ## 3. How do you size the opportunity without a full audit yet? Do not invent a recovery figure for a specific vendor or category before the audit has run; that number does not exist yet and stating one anyway is the fastest way to lose credibility with a numerate CFO. Instead, cite the range a full diagnostic typically sizes to across the whole engagement, attributed to its source, and pair it with the reader's own spend so they compute the stake themselves rather than trusting an estimate handed to them. Margin drift across a full diagnostic typically runs 1% to 3% of service vendor spend, across ValueXPA diagnostics. That figure describes the whole engagement, not any one vendor or category, and it should stay in its own paragraph, separate from any specific supplier or spend type Procurement names elsewhere in the proposal. Worked example, using the 1% to 3% band: for a manufacturer at $400M in revenue, apply that band to whatever portion of spend is genuinely service vendor and [indirect spend](/insights/indirect-spend-is-30-60-of-operating-cost-and-gets-a), and the resulting range, not a company-wide revenue figure, is the number to put in front of the CFO. ## 4. Who needs to sign off, and what does each stakeholder want to see? A Procurement Director rarely has budget authority to approve a spend audit alone, which means the proposal has to speak three different languages in one document: the Controller wants the control gap named precisely, the CFO wants a dollar range and a timeline, and the Owner wants to know why internal review has not already caught this. Building the case means writing to all three without diluting any one of them. Each stakeholder is evaluating a different risk. The Controller is asking whether existing controls, like three-way matching, already cover this or whether there is a genuine gap: three-way matching checks the invoice against the purchase order and receipt, and it does not test whether a surcharge's trigger condition has expired. The CFO is asking about return against cost and how long that takes. The Owner is asking why this surfaced now rather than a year ago, and the honest answer is that nobody has matched the contract library against the invoice stream line by line before. What each stakeholder needs from the proposal before signing off. What each stakeholder needs from the proposal before signing off. | Stakeholder | Primary question | What answers it | | --- | --- | --- | | Controller | Does an existing control already cover this? | A named gap: which control exists, and what it does not test | | CFO | What is the range and how long does it take? | A stated range with its basis, and the diagnostic timeline | | Owner | Why wasn't this caught already? | The sample mismatch, showing the contract detail no standard review checks | ## 5. How does a fixed-scope diagnostic compare to a contingency audit for this case? A contingency-fee recovery audit costs nothing upfront, which makes it an easier internal sell on paper, but the firm keeps a share of whatever it finds. A fixed-scope diagnostic has a defined cost and timeline, and the client retains 100% of recoveries. Procurement's business case should name both models honestly and let the approver pick the structure, because the right choice depends on how much the budget conversation itself is the obstacle. Traditional recovery audit firms charge 25% to 50% of recoveries, which is real money on a genuine finding, but requires no budget line to start. A fixed-scope diagnostic asks for budget approval first and delivers a prioritized recovery and prevention roadmap in 2 to 4 weeks, with the client keeping the full recovery. Where Procurement's internal budget process is the real barrier, leading with the contingency option removes that barrier and still surfaces the same evidence. Where the budget conversation is winnable, the fixed-scope model returns more of any recovery found, and it also builds forward controls the contingency model does not include. ## 6. What should the proposal document itself actually contain? The proposal is a short packet, not a memo: the sample mismatch with its source documents, the sized range with its stated basis, the stakeholder-specific summary page, and a named next step with a date attached. Anything longer competes with the reader's other priorities and gets deferred. The goal is a document a CFO can approve in one sitting, not one that requires a second meeting to explain itself. Keep the packet under a handful of pages. Every extra page is a reason to defer the decision to next quarter, and a spend audit business case competes with every other item on a CFO's desk for a limited amount of attention. End with one ask, not three. A request that stacks a meeting, a data pull, and a signed contract in the same email gives the reader three ways to say not yet instead of one way to say yes. 1. The sample exhibit: One or two documented contract-to-invoice mismatches, shown side by side, with dates and amounts visible. 2. The sized range: The opportunity range with its stated basis, kept separate from any specific vendor or category named elsewhere. 3. The model comparison: Fixed-scope against contingency, stated plainly, so the approver is choosing a structure rather than a leap of faith. 4. The stakeholder summary: One page per approver, answering the question that person specifically will ask. 5. The next step: A single dated ask: a scoping call, a data pull, a decision by a stated date. For the wider pattern this sits inside, start with the [margin drift](/insights/margin-drift-spend-leakage-guide) guide. See also [the six categories drift hides in](/insights/indirect-spend-audit-categories) and [what is margin erosion? causes and prevention for manufacturers](/insights/what-is-margin-erosion-causes-and-prevention-for). ## Common questions ### What is a spend audit business case? It is a short proposal that gives a Controller, CFO or Owner enough evidence to approve funding an audit before the audit itself has produced any findings. It typically pairs one or two documented contract-to-invoice mismatches with a sized opportunity range and a single, dated ask. ### How many sample invoices do I need before I ask for budget? Three to five, matched line by line against the governing contract, is enough. The goal is one clean, checkable mismatch that proves the pattern exists, not a full audit of the vendor's spend. ### Can I put a dollar figure on what a specific vendor is overbilling before the audit runs? No. Do not estimate a recovery figure for a specific vendor or category before the audit runs. Cite the sourced range for the whole engagement instead, and let the reader apply it to their own spend. ### Who actually approves a spend audit, Procurement or Finance? Procurement rarely holds the budget authority alone. The proposal needs to answer the Controller's question about existing controls, the CFO's question about range and timeline, and the Owner's question about why this was not caught already. ### Should I propose a fixed-scope diagnostic or a contingency-fee audit? Name both honestly. A contingency audit needs no budget approval but the firm keeps a share of what it finds. A fixed-scope diagnostic needs budget approval upfront but the client keeps the full recovery. Which one to lead with depends on whether the internal budget process is the real obstacle. --- ValueXPA runs a fixed-scope Margin Drift Diagnostic that validates every service vendor invoice against contract terms, for $100M+ US industrial manufacturers and distributors. Two to four weeks. The client retains 100% of recoveries. https://valuexpa.com/contact-us