Procurement Process Elements and Phases

Why This Topic Matters for the CFE Exam

Procurement fraud is one of the most costly and pervasive categories of occupational fraud, and the ACFE's Fraud Examiners Manual treats it as a core component of the Financial Transactions and Fraud Schemes section. Before you can detect bid rigging, collusion, or billing schemes, you must understand the structure of the procurement process itself. The ACFE organizes procurement fraud schemes according to the phase of the procurement process in which they occur. If you cannot identify the phases, you cannot classify the schemes, recognize the red flags, or recommend appropriate controls. Exam questions frequently test whether you can match a specific fraudulent act (such as leaking bid information or writing restrictive specifications) to the correct phase. Mastering this framework is foundational to the entire procurement fraud domain.

What Is the Procurement Process?

Procurement is the process by which an organization acquires goods or services from external sources. It encompasses everything from recognizing a need, through selecting a supplier, to receiving and paying for the goods or services. In a healthy organization, procurement should be competitive, transparent, fair, and value-driven. Fraud occurs when someone subverts one or more of these principles for personal gain, usually through collusion between an insider (an employee of the purchasing organization) and an outsider (a vendor or contractor), or through collusion among vendors themselves.

The Two Main Methods of Procurement

The ACFE distinguishes between two broad methods by which organizations acquire goods and services:

1. Competitive bidding (sealed bids or competitive proposals) – Multiple vendors submit offers, and the contract is awarded based on predetermined criteria such as lowest price or best value. This is the method most associated with government procurement and large organizations. Competitive methods are designed to prevent favoritism and secure the best price, which is precisely why fraudsters work so hard to corrupt them.

2. Non-competitive (sole-source or single-source) procurement – The organization negotiates directly with one vendor without soliciting competing offers. This is legitimate when only one supplier can meet the need, in emergencies, or for small purchases below a threshold. However, improper use of sole-source justifications is itself a classic fraud red flag.

Common Contract Types You Should Know

The exam may reference contract pricing structures because the type of contract influences the fraud risk:

• Fixed-price contracts – The contractor agrees to deliver for a set price regardless of actual costs. Risk: the contractor may cut corners, substitute inferior products, or fail to deliver full quantities to protect profit margins.
• Cost-plus (cost-reimbursement) contracts – The buyer reimburses allowable costs plus a fee or profit. Risk: the contractor may inflate or mischarge costs, since more cost means more reimbursement.
• Time-and-materials contracts – Payment is based on labor hours at fixed rates plus material costs. Risk: inflated hours, mischaracterized labor categories.

Know that cost-type contracts carry the highest risk of cost mischarging, while fixed-price contracts carry the highest risk of product substitution and non-conformance.

The Phases of the Procurement Process

The ACFE framework divides competitive procurement into distinct phases. Fraud schemes are categorized by the phase in which they take place. You must know these phases in order and understand what happens in each.

Phase 1: The Presolicitation Phase

This is the earliest stage, occurring before the organization formally invites bids. Key activities include:

• Needs recognition / needs assessment – The organization determines that it requires certain goods or services. Someone identifies a need, and a requisition or justification is developed.
• Development of specifications and the statement of work – The organization defines exactly what it wants: technical specifications, quantities, quality standards, delivery terms, and performance requirements.
• Determination of the procurement method – Deciding whether to use competitive bidding, sole-source, or another approach.

Fraud schemes that occur here include need recognition schemes (an insider convinces the organization to buy something unnecessary or in excessive quantity so that a favored vendor benefits), bid tailoring / specifications schemes (writing specifications so narrow or restrictive that only one preferred vendor can qualify, or so vague that the favored vendor can later submit change orders), and improper sole-source justifications. Red flags include specifications that match one vendor's product exactly, unexplained urgency, and employees who insist on a particular vendor.

Phase 2: The Solicitation Phase

In this phase the organization formally seeks offers from vendors. Activities include:

• Preparing and issuing the solicitation (Invitation for Bids, Request for Proposals, Request for Quotations).
• Advertising or distributing the solicitation to potential bidders.
• Receiving bids or proposals by the stated deadline, typically sealed and secured until opening.

Fraud schemes concentrated here include bid splitting (dividing a large purchase into smaller ones to stay below the competitive bidding threshold), unjustified restrictions on competition (short deadlines, limited advertising, pre-qualification requirements designed to exclude competitors), and collusion among contractors such as bid rotation (competitors take turns winning), bid suppression (competitors agree not to bid or to withdraw), complementary bidding (submitting intentionally high or defective bids to create the appearance of competition), and market division (dividing customers or territories). This is also where bid manipulation by insiders begins, such as falsely declaring the bid deadline or failing to send solicitations to all qualified bidders.

Phase 3: The Bid Evaluation and Award Phase

Here the organization opens, evaluates, and compares the bids, then selects a winner and awards the contract. Activities include:

• Bid opening – Sealed bids are opened, ideally publicly and simultaneously.
• Evaluation – Bids are scored against the stated criteria (price, technical merit, past performance).
• Award – The contract is executed with the winning bidder.

Fraud schemes in this phase include leaking bid data (an insider tells a favored vendor what competitors bid, allowing it to undercut them), bid manipulation (accepting late bids, falsifying the bid log, "losing" competing bids, extending deadlines to help a favored vendor, or changing evaluation criteria after bids are opened), and improper evaluation (biased scoring, waiving requirements for a favored vendor). Red flags include the winning bidder being the last to submit, late bids being accepted, bids that are opened privately, unusually small margins between the winning bid and the next lowest, and frequent awards to the same vendor.

Phase 4: The Post-Award and Administration Phase (Contract Performance)

After award, the contract is performed, monitored, and paid. Activities include:

• Contract performance and delivery of goods or services.
• Change orders and modifications to the original contract.
• Inspection and acceptance of deliverables.
• Invoicing and payment.
• Contract closeout.

Fraud schemes here include change order abuse (a vendor submits a low bid to win, then recovers profit through numerous or inflated change orders, often with insider cooperation), product substitution / nonconforming goods (delivering inferior or counterfeit items while billing for specified quality), cost mischarging (charging labor or materials from one contract to another, charging unallowable costs, inflating hours), defective pricing (submitting inaccurate or incomplete cost data during negotiations), duplicate or false invoicing, and failure to meet contract specifications. Red flags include a high volume of change orders shortly after award, missing or altered inspection reports, invoices that do not match delivery documentation, and a vendor who consistently wins with the lowest bid but whose final contract price balloons.

Summary Table of Phases and Schemes

Presolicitation → Need recognition schemes, bid tailoring/restrictive specifications, improper sole-source justifications.
Solicitation → Bid splitting, unjustified restriction of competition, collusion among contractors (bid rotation, bid suppression, complementary bidding, market division), bid manipulation by insiders.
Bid Evaluation and Award → Leaking bid data, bid manipulation (late bids, falsified logs, altered criteria), improper evaluation.
Post-Award / Performance → Change order abuse, product substitution, cost mischarging, defective pricing, false invoicing.

How the Process Should Work: Key Controls

Understanding the legitimate process helps you spot where it breaks down. Strong procurement controls include segregation of duties (the person who requests should not approve, the person who approves should not receive, the person who receives should not pay), independent needs assessment, specifications reviewed by someone other than the requester, broad advertising of solicitations, secured and logged receipt of bids, public bid openings with multiple witnesses, documented evaluation against pre-established criteria, independent approval of change orders, independent inspection of deliverables, three-way matching of purchase order, receiving report, and invoice, and vendor due diligence including conflict-of-interest disclosures.

Exam Tips: Answering Questions on Procurement Process Elements and Phases

1. Memorize the phases in order. Presolicitation → Solicitation → Bid Evaluation and Award → Post-Award and Administration. Many questions simply ask "in which phase does X occur?" If you have the sequence down cold, you have an immediate advantage.

2. Anchor each scheme to its phase using logic, not just memory. Ask yourself: Could this fraud happen before anyone knows the bids? If yes (writing specifications, deciding what to buy), it is presolicitation. Does it involve how bids are gathered? Solicitation. Does it involve what happens after bids are in hand but before the contract is signed? Evaluation and award. Does it involve performance, invoices, or changes? Post-award.

3. Watch for the specifications trap. Bid tailoring and restrictive specifications are presolicitation schemes, not solicitation schemes, because the specifications are written before the solicitation is issued. This is a frequent point of confusion.

4. Distinguish insider schemes from vendor-only collusion. Bid rotation, bid suppression, complementary bidding, and market division are schemes among competing vendors and generally do not require an insider. Leaking bid data, bid tailoring, and bid manipulation generally do require a corrupt insider. Questions often hinge on whether an employee's involvement is necessary.

5. Know the collusion vocabulary precisely. Complementary bidding = deliberately high or non-responsive bids to make the chosen winner look competitive. Bid rotation = vendors take turns winning. Bid suppression = vendors agree not to bid or withdraw. Market division = vendors split customers or geographic areas. The exam loves to swap these definitions in distractor answers.

6. Recognize bid splitting as a solicitation-phase scheme whose purpose is to avoid the competitive bidding threshold. If a question describes a series of purchases just under an approval limit, think bid splitting.

7. Link contract type to risk. Cost-plus contracts → cost mischarging risk. Fixed-price contracts → product substitution and quality shortcut risk. If a question describes inflated labor charges, think cost-type contract; if it describes inferior materials, think fixed-price.

8. Read for the red flag's timing. "The winning bidder was the last to submit" or "a late bid was accepted" points to bid evaluation/award manipulation. "Numerous change orders shortly after award" points to post-award abuse. "Only one vendor could meet the specifications" points to presolicitation bid tailoring.

9. When asked for the best control, match it to the phase. Independent review of specifications addresses presolicitation fraud; public bid openings and secured bid logs address evaluation fraud; independent approval of change orders and inspection of deliverables address post-award fraud.

10. Eliminate distractors that confuse procurement fraud with billing schemes. Shell company and pass-through schemes belong primarily to the asset misappropriation (billing schemes) section, though they can overlap. If the question frames the scenario around the bidding process, answer from the procurement fraud framework.

11. Choose the most specific correct answer. If one option says "solicitation phase" and another says "bid tailoring in the presolicitation phase," and the scenario describes restrictive specifications, the more specific and correctly placed answer wins.

12. Practice scenario conversion. Take any scheme name and write a one-sentence scenario; take any scenario and name the phase and scheme. Doing this repeatedly builds the pattern recognition the exam rewards.

Final Thought

The procurement process framework is the skeleton on which all procurement fraud knowledge hangs. If you can confidently walk through the four phases, name the legitimate activities in each, identify the schemes that corrupt each, and recall the red flags and controls associated with each, you will be well prepared not only for direct questions on this topic but also for the many scenario-based questions throughout the Financial Transactions and Fraud Schemes section that assume this understanding.