The Context

A 15-month pilot by the Anti-Corruption Taskforce, concluding February 2026, quantified the systemic failure. It identified 446 alleged fraud and corruption incidents across six public sector agencies. One agency reported no or only partial controls for 70% of assessment criteria. A second reported 64% gaps. The audit trail is broken. Centralised monitoring of gifts and benefits is absent. Ongoing due diligence on suppliers is missing. The data suggests incidents are “almost certainly being under-reported.” The financial extrapolation is stark: annual losses could range from $823 million to $10.24 billion.

The Risk

The risk is a mathematical liability. The government spends $51 billion annually on procurement, its most vulnerable activity. 97.5% of this spend is not reported on GETS, creating a documented black box. Directors and senior managers may be personally liable for a breach of fiduciary duty under the Companies Act 1993. This liability stems from a failure to implement basic financial controls over this expenditure, despite the availability of the Taskforce’s assessment framework. The precedent is set: a former Property and Facilities Manager received a three-year prison sentence in 2025 for obtaining by deception and money laundering. The governance gap is not an abstract risk. It is a quantifiable exposure with a direct line to individual criminal prosecution.

The Control

The strategic solution is a forensic audit of your procurement control environment. Map every transaction against the Taskforce’s assessment criteria. Implement centralised, automated monitoring for gifts, benefits, and supplier due diligence. Treat the 97.5% of procurement not on GETS as your highest-risk category. The control is not a policy. It is a verifiable, auditable system that closes the governance gap with data.

The Challenge

These are the critical questions you should be raising at the board table:

What is the exact percentage of our procurement spend that falls outside of transparent, auditable systems, and what is our plan to bring it to zero?
Show me the mathematical proof that our controls would have detected the 446 incidents identified in the pilot. Where is the gap in our detection rate?
Based on our annual procurement spend, what is our organisation’s specific, calculated exposure within the $823m to $10.24bn range, and what financial provision have we made for it?