The Contract Under the Knife: A Board's Three-Hour Examination of a High-Risk Procurement

Most UK boards see procurement as a series of approvals rather than a single object of scrutiny. A framework is signed; a contract is sealed; a supplier is onboarded. The papers arrive, the decision is noted, and attention moves on. Yet governance risk seldom sits in the aggregate. It concentrates in individual contracts — particularly those that are high-value, strategically important or difficult to reverse. This article sets out a practical 180-minute board review of one such procurement, from tender evaluation to signature, designed to surface the questions that matter before a commercial arrangement becomes a governance problem.

Why One Contract Deserves Three Hours

A board cannot examine every procurement in detail. It can, however, examine one. The purpose is not to second-guess the executive or to reopen a completed negotiation. It is to test the system through a single specimen. If the board cannot reconstruct how a high-risk contract was approved, what it obliges the company to do, and what it would cost to exit, the oversight gap is not theoretical. It is present in the register.

Three hours is enough for a structured examination without turning into a re-run of the tender. The board should select a contract that is live, material and representative: perhaps a multi-year services agreement, a critical technology platform or an outsourcing arrangement with significant transition costs. The review should be led by the chair of the audit or risk committee, with the procurement lead, legal counsel and the relevant executive present for defined sections only. The aim is evidence, not presentation.

First Hour: Authority, Approval and Conflict

The first hour tests whether the contract was authorised by the right people, on the right terms and without an unmanaged conflict.

Directors should begin with the delegated authority framework. Who approved this contract, under which delegation, and at what value? If the approval sat with an executive committee, what was the escalation trigger and was it applied? The board should see the approval minute, not a summary. It should also see the contract value as approved against the value as signed. A gap between the two is not necessarily a problem, but it requires an explanation.

Conflict checks come next. The board should ask for the register of interests entries for everyone involved in evaluation, negotiation and approval. It should also ask how the procurement team tested for conflicts that were not declared. The question is not whether a conflict existed, but whether the process would have found one. For listed companies, the UK Corporate Governance Code expects robust procedures; for all boards, the principle is the same. A conflict check that consists only of a signed declaration is a starting point, not an assurance.

The board should then review the evaluation record. Were the evaluation criteria published in advance? Were weightings applied as stated? Were any material departures from the tender documents recorded and approved? The board does not need to re-score the bids. It needs to know that the record would withstand scrutiny from an auditor, a regulator or a court.

Second Hour: Dependency, Exit and Reversibility

The second hour addresses the question that boards often leave too late: what happens if this contract goes wrong?

Supplier dependency is the first test. What proportion of the company's operations, revenue or regulatory obligations depends on this supplier? Is the supplier itself dependent on subcontractors or a single site? The board should ask for a concentration map, not a narrative. If the supplier failed tomorrow, what would stop? The answer should be specific: a payment process, a customer channel, a regulatory reporting line or a production input.

Exit costs are the second test. The board should see the termination provisions, notice periods, exit fees, transition assistance obligations and any restrictions on bringing work back in-house. It should also see a costed exit plan, even if the plan is deliberately high-level. A contract without an exit plan is not necessarily a bad contract, but it is an unmeasured one. The board should ask whether the exit cost has been modelled and whether it appears in the risk register.

Reversibility is the third test. Some contracts can be terminated at will; others cannot. The board should understand which category this contract falls into and why. If the contract is irreversible in practice, the board should know what compensating controls exist: performance monitoring, step-in rights, escrow arrangements or a credible alternative supplier. The point is not to require an alternative for every contract. It is to ensure that irreversibility is a conscious decision, not an accident of drafting.

Final Hour: The Questions and the Record

The final hour is for the board's own questions and the record it creates.

Directors should ask a small number of direct questions. What would make this contract a board-level issue in the next twelve months? What early warning indicators are reported, and to whom? Who is accountable for supplier performance, and how is that accountability evidenced? What has the supplier committed to on service levels, security and subcontracting, and how are those commitments tested? If the answers are vague, the board has found a gap.

The record matters as much as the questions. The board should minute the contract reviewed, the documents seen, the questions asked and the actions agreed. It should not minute a general assurance that 'the contract was noted'. A minute that records scrutiny is a useful artefact; a minute that records only approval is not.

The review should end with a short set of conclusions: whether authority was clear, whether conflicts were managed, whether dependency and exit costs are understood, and whether the contract is being monitored at the right level. These conclusions should feed into the board's risk appetite statement and the procurement team's forward plan.

What the Board Does Next

The purpose of the three-hour review is not to renegotiate the contract. It is to calibrate oversight. If the board finds that it cannot reconstruct the approval, the remedy may be a change to delegated authority or to the papers that come to the board. If it finds that exit costs are unmodelled, the remedy may be a requirement for exit planning in future high-risk procurements. If it finds that dependency is concentrated, the remedy may be a supplier resilience review.

A single contract is a specimen, not a sample. But a board that can examine one high-risk procurement in three hours is better placed to examine the next one. The discipline is repeatable, and it turns procurement from a series of approvals into a governed process. For UK boards in 2026, with scrutiny of value, resilience and conduct only increasing, that discipline is worth the time.

For 3HR plc, this review format is a practical tool for boards that want assurance without adding a layer of bureaucracy. The contract is the evidence. The three hours are the test.