Indirect spend audits: the highest-ROI activity procurement teams skip

A behavioral health network with facilities across multiple states had no centralized procurement function. Each location bought operational supplies independently — cleaning products, office materials, maintenance equipment. When an audit finally ran across all sites, the findings were not dramatic fraud or supplier misconduct. They were boring and expensive: suppliers billing premium rates instead of the negotiated corporate price, duplicate invoices for the same service, purchases outside preferred supplier agreements where the company had already negotiated discounts. Every dollar recovered from the audit dropped directly to the bottom line. The network had been leaking margin for years and nobody noticed because nobody was looking.

According to UNA's 2026 indirect spend audit framework, every dollar saved through an audit goes directly to the bottom line. That makes indirect spend auditing one of the highest-ROI activities in a procurement leader's toolkit. A $50,000 audit engagement that recovers $350,000 in billing errors and maverick spend returns 7x. The same organization running that audit continuously — with automated tools instead of a manual review every two years — recovers that amount annually, not once.

What indirect audits actually find

Indirect spend covers everything the organization buys that is not a direct material input: facility management, IT and telecom, marketing services, professional services, logistics, MRO supplies, office consumables, travel. These categories share a structural problem: they have high transaction volume, fragmented ownership, and no single category manager who sees the whole picture. That makes them the richest hunting ground for leakage.

The standard findings from a well-run indirect audit fall into four categories. None of them are surprising. All of them are expensive.

Rate misapplication. The supplier agreement specifies a discounted rate. The invoice charges the standard list price. This is the single most common finding in any indirect audit, and it is invisible unless someone reconciles every invoice against the contract. Procurement platforms and automated invoice matching tools can flag these discrepancies at scale. Without automation, the volume makes manual review impractical for anything beyond the top 5% of suppliers.

Duplicate invoices and quantity errors. The same invoice processed twice. A quantity billed at 120 units when the PO specified 100. These errors are clerical, not fraudulent, but they add up. In high-volume indirect categories like facilities maintenance or telecom, the transaction count makes sampling insufficient — the auditor needs to check everything, which is why automated reconciliation is the difference between a one-time cleanup and a permanent fix.

Maverick spend under contract. A negotiated corporate discount exists for office supplies. A regional office orders from a different supplier at full retail price. The purchase clears AP because the amount is under the approval threshold. Nobody in procurement sees it. The discount was negotiated but never used. Sirion AI identifies maverick spend as "one of the clearest examples of hidden cost leakage" — it erodes negotiated discounts, creates dark spend data, and makes category-level analysis unreliable.

Unmanaged tail spend. The long tail of low-value, high-frequency purchases across hundreds of suppliers with no contracts, no preferred pricing, and no category strategy. Tail spend typically represents 20% of indirect transactions but can hide 5-10% of category overspend. The 2026 UNA playbook frames the progression as: identify unmanaged spend, segment it by category, progressively secure it into managed programs with preferred suppliers.

Why one-off audits underperform continuous programs

The difference between a periodic audit and a continuous program is not just frequency. It is what each model can detect.

The behavioral health network case from UNA illustrates the structural gap. The organization had no centralized procurement — so the audit was the first time anyone looked at indirect spend across all sites. The findings were significant enough to justify building a centralized procurement function. But had they stopped at the one-time audit, the same categories would have leaked again within 12 months. The audit found the problem. Only a continuous program prevents its return.

CASME research on indirect procurement trends notes that organizations are increasingly using real-time analytics to forecast demand, flag unusual spending patterns, and evaluate supplier performance — all functions that a continuous audit program enables. The technology shift from periodic sampling to always-on monitoring is what makes the 2-3x recovery multiple achievable.

Building a continuous indirect spend audit program

Moving from periodic to continuous does not require AI across every category from day one. It requires three structural changes, applied progressively:

1. Centralize indirect category ownership. The single biggest barrier to continuous auditing is fragmentation. If FM, IT, marketing, and logistics each manage their own indirect spend with no shared data layer, an audit requires chasing down six different P&L owners for invoices. Assign one indirect procurement lead — even part-time — who owns the data aggregation across categories. This person does not need to negotiate every contract. They need to see every invoice.
2. Automate invoice-to-contract reconciliation for the top 5 indirect categories by spend. Start with the categories that have the highest transaction volume and the most negotiated contracts: typically IT/telecom, facilities management, logistics, and professional services. Automated matching flags rate misapplications, duplicate invoices, and off-contract purchases within 30 days — short enough that suppliers rarely push back on credits. Manual spot-checks on everything else.
3. Tie audit recovery to procurement KPIs. This is where most programs stall. If procurement is measured on new savings from sourcing events, a continuous audit program that recovers $350,000 in existing contract leakage does not count toward anyone's performance goals. Add one metric: "savings recovered from contract compliance" as a line item in the quarterly procurement review. When recovery counts, it gets resourced.

Organizations that run continuous programs report an additional benefit that does not appear in the savings ledger: supplier behavior changes. When suppliers know invoices are reconciled against contracts every month, rate misapplications drop. The audit becomes a deterrent, not just a recovery tool. The program pays for itself twice — once through recovered dollars, once through prevented leakage.

What this means in practice

Indirect spend audits are not complicated. They are tedious. That is why most teams skip them. The math is straightforward: find one billing error, recover it, and the savings go to the bottom line. Find a thousand errors across five categories, and the program funds itself several times over. Three actions to start:

1. Run a pilot audit on one indirect category this quarter. Pick IT/telecom or facilities management — categories with high transaction volume, negotiated contracts, and likely rate misapplications. Do not try to audit everything. Prove the model on one category, quantify the recovery, and use the results to build the business case for expansion.
2. Invest in automated invoice matching before expanding scope. Manual reconciliation caps audit coverage at the top 5-10% of suppliers. The business case for automation writes itself: if the pilot recovers $50,000 on one category, scaling to five categories without automation means multiplying headcount, not recovery rate. Use the pilot results to justify the automation investment.
3. Make audit recovery a standing procurement KPI. If nobody's performance review includes "savings recovered from contract compliance," the audit program will always be the first thing cut when sourcing teams get busy. One line item in the quarterly review changes the incentive permanently.

The behavioral health network did not have a sophisticated procurement function, an automated CLM, or a dedicated audit team. They had a problem — decentralized purchasing bleeding margin — and they ran an audit to find it. The findings were not magic. They were math. Every organization has the same math sitting in its indirect spend categories, accumulating monthly. The only question is whether anyone is looking.