What is procurement policy and when should yours be updated?

A procurement policy is a formal document that sets out the rules, principles, and processes an organisation must follow when purchasing goods and services. It defines spending thresholds, approval requirements, supplier selection criteria, and the standards of conduct expected from anyone involved in procurement activity. Most organisations should review their procurement policy at least annually, and update it whenever there are significant changes to regulations, organisational structure, or spending patterns.

A well-maintained procurement policy protects an organisation from financial risk, supports compliance, and ensures that every pound spent delivers genuine value. The sections below address the most common questions organisations ask when building or reviewing their procurement guidelines.

What should a procurement policy include?

A procurement policy should include the organisation’s purchasing principles, spending thresholds, authorisation levels, supplier selection criteria, contract management requirements, and the ethical standards that govern procurement decisions. It should also reference any relevant legal or regulatory frameworks that apply to the organisation’s sector.

In practice, a robust procurement policy typically covers the following areas:

• Scope and purpose: Who the policy applies to and what categories of spend it governs
• Spending thresholds: The financial limits that determine whether a purchase requires one quote, three quotes, or a full tender process
• Authorisation and approval levels: Which roles have authority to approve spend at each threshold
• Supplier selection and due diligence: How suppliers are identified, evaluated, and approved
• Conflict of interest and ethics: Rules around gifts, hospitality, and declarations of interest
• Contract management: Requirements for written contracts, performance monitoring, and renewal processes
• Sustainability and social value: Any obligations to consider environmental or social outcomes in purchasing decisions
• Compliance and legal obligations: References to relevant legislation, such as the Procurement Act 2023 for public sector organisations in the UK

The level of detail required will vary depending on the size and complexity of the organisation. A large public sector body will need a more comprehensive framework than a small charity, but every organisation benefits from having the core principles written down and accessible to staff.

Why do organisations have a procurement policy?

Organisations have a procurement policy to ensure that public or organisational funds are spent consistently, transparently, and in line with legal requirements. A clear policy reduces the risk of fraud, prevents maverick spending, supports accountability, and gives staff a reliable framework for making purchasing decisions without needing to escalate every query.

Beyond compliance, a procurement framework serves a strategic purpose. When purchasing decisions follow a defined process, organisations are better positioned to negotiate with suppliers, consolidate spend, and identify opportunities for savings. Without a policy in place, different departments may procure the same goods from different suppliers at different prices, creating unnecessary cost and complexity.

For public sector organisations, a procurement policy is not optional. It is a governance requirement, and failure to follow proper procurement processes can result in legal challenges, reputational damage, and the loss of public trust. For private sector and third sector organisations, the policy provides a similar layer of protection and demonstrates due diligence to boards, funders, and auditors.

How often should a procurement policy be reviewed?

A procurement policy should be reviewed at least once a year as a matter of routine. Annual reviews ensure the policy remains aligned with current legislation, organisational priorities, and market conditions. In fast-changing environments, a more frequent review cycle of every six months may be appropriate.

The annual review should not be a box-ticking exercise. It is an opportunity to assess whether the policy is actually being followed, whether the spending thresholds still reflect the organisation’s risk appetite, and whether any new categories of spend or supplier relationships have emerged that are not adequately covered.

For organisations operating under the Procurement Act 2023, which came into force in the UK in February 2025, regular reviews are particularly important. The Act introduced significant changes to public procurement rules, and any policy written before this legislation came into effect will need to be updated to reflect the new requirements around transparency, supplier selection, and contract management.

What triggers a procurement policy update?

A procurement policy update is triggered by changes to legislation, significant shifts in organisational structure or spending patterns, the introduction of new systems or processes, or findings from an audit or review that reveal gaps in the existing policy. Any one of these factors is sufficient reason to update the document rather than wait for the next scheduled review.

Common triggers include:

• Legislative change: New procurement regulations or updated legal requirements, such as the Procurement Act 2023 in the UK
• Organisational restructuring: Mergers, acquisitions, or changes to reporting lines that affect who holds spending authority
• Significant growth in spend: When the organisation’s procurement volume increases, existing thresholds may no longer be appropriate
• Audit findings: Internal or external audits that identify non-compliance, gaps in controls, or areas of financial risk
• New categories of spend: Entering new markets or taking on new services that the existing policy does not address
• Technology changes: Implementing a new procurement or finance system that changes how purchasing decisions are recorded and approved
• Supplier incidents: A supplier failure, contract dispute, or reputational issue that highlights a weakness in the current framework

Waiting for the annual review cycle when a clear trigger has already occurred is a risk. Organisations should treat a procurement policy update as a live governance responsibility rather than a scheduled administrative task.

Who is responsible for updating a procurement policy?

Responsibility for updating a procurement policy typically sits with the Head of Procurement or the Chief Procurement Officer, working in collaboration with the finance, legal, and compliance functions. In organisations without a dedicated procurement lead, this responsibility often falls to the Finance Director or Chief Operating Officer.

Ownership of the policy should be clearly assigned to a named role rather than a team or department. When responsibility is diffuse, updates are more likely to be delayed. The policy owner should be accountable for ensuring the document is reviewed on schedule, that any triggered updates are actioned promptly, and that the revised policy is communicated to all relevant staff.

Senior leadership sign-off is also important. A procurement policy carries governance weight, and it should be formally approved by the board or executive team to give it the authority needed to be enforced across the organisation. In public sector organisations, this approval process is often a formal requirement.

Where organisations lack internal procurement expertise, working with an external procurement consultancy can help ensure the policy reflects current best practice and regulatory requirements without placing the burden entirely on internal resource.

What happens if a procurement policy is outdated?

If a procurement policy is outdated, the organisation is exposed to legal, financial, and reputational risk. Staff may follow processes that no longer comply with current legislation, spend controls may fail to reflect actual purchasing volumes, and the organisation may be unable to demonstrate due diligence to auditors, funders, or regulators.

In the public sector, operating with an outdated procurement policy can result in procurement decisions being challenged or overturned, particularly where the policy does not reflect current statutory requirements. This can lead to costly delays, contract disputes, and damage to supplier relationships.

In the private and third sectors, the consequences are less immediately legal but no less damaging. An outdated policy creates inconsistency in how purchasing decisions are made, which can lead to overspending, poor supplier performance, and a lack of accountability. It also creates difficulty when organisations are subject to due diligence by investors, grant funders, or major clients who expect evidence of sound governance.

The risks compound over time. A policy that was fit for purpose three years ago may now be missing critical controls around data security in supplier contracts, sustainability obligations, or the use of AI-assisted procurement tools. Keeping the policy current is one of the most cost-effective risk management actions an organisation can take.

How eXceeding helps with procurement policy

eXceeding supports organisations across the UK in developing, reviewing, and strengthening their procurement policies and frameworks. Whether your policy needs a complete overhaul or a targeted update to reflect new legislation, eXceeding’s consultants bring practical experience from both public and private sector environments to ensure your policy is fit for purpose.

• Independent review of your existing procurement policy against current best practice and regulatory requirements
• Development of new procurement frameworks tailored to your organisation’s size, sector, and risk profile
• Guidance on compliance with the Procurement Act 2023 and other relevant procurement guidelines
• Support embedding the policy across your organisation, including training and stakeholder engagement
• Ongoing procurement outsourcing for organisations that want expert resource to manage procurement activity on their behalf

If your procurement policy has not been reviewed recently, or if recent changes in your organisation have made it feel out of step with how you actually operate, now is the right time to act. Get in touch with eXceeding to discuss how we can help you build a procurement policy that protects your organisation and drives long-term value.

Related Articles

• Should you centralise or decentralise your procurement function?
• How do you get buy-in for procurement transformation?
• What is the difference between tactical and strategic procurement?
• What is the difference between procurement and supply chain?
• How do you move from transactional to strategic procurement?