All postsJournal · post 01 / 02
Financial oversight

Silhouettes of people sitting at an oval table in an old government office, discussing documents in soft natural light.
Illustrative photo
Short answer: The three most dangerous mistakes matter most because all the others stem from them: requirements written up based on one vendor's offer, no business owner with a mandate from the board, and no success criteria (definition of done) agreed before signing the contract. This is not about acceptance criteria as such, but about success criteria. The first costs you influence over scope, the second means no one is there to settle disputes, the third turns acceptance testing into a negotiation. Close behind are: overlooked integrations and data migration, comparing only the starting price instead of the total cost of ownership (TCO), and a contract with no exit terms. All of these can be fixed before you choose a vendor. After that, only a contract amendment will do - and negotiating one can be harder than negotiating the original contract.

This article is for boards and for those who sign off on a system purchase: the secretary and treasurer in a public authority, the CEO of a municipal company, the CFO, the business owner. It is also for the IT manager preparing a tender or request for quotation who wants to know what the board should pay attention to before approving the documents.

Why this problem arises

Most problems with vendors originate on the buyer's side, long before the contract is signed. This is not down to ill will: preparing a procurement is work for which organisations rarely have the time or the competence, and vendors are only too happy to make it easier. They bring ready-made specifications, demonstrations and quotes. As a result, the buyer ends up purchasing what the vendor is good at selling, rather than what it actually needs. Another part of the problem is that purchasing decisions very often stay in the hands of the business departments, with IT acting merely as a security gatekeeper. The absence of standards and a long-term IT strategy means the organisation makes purchases that do not always fit within the framework whose job is to mitigate risk.

I see the same mistakes in public authorities and in companies. What differs is the procurement procedure, not the underlying mechanism.

Twelve mistakes

  1. Requirements copied from one vendor's offer or presentation. This limits competition and locks you into dependency before you have even chosen a contractor. I covered this in more detail in the article on vendor lock-in in the tender specification (SWZ).
  2. No business owner. The project formally has a manager, but no one with a mandate from the board decides how the processes should work.
  3. No acceptance criteria or test scenarios before signing. Acceptance testing turns into a dispute over interpretation, rather than a check on whether the project's deliverable meets the success criteria for the implementation.
  4. Not knowing what you already have. You buy a new system without knowing which existing contracts, licences and functions overlap with it.
  5. Overlooked integrations. What data the new system needs to exchange, with which other systems, in which direction, which system is the master, what data and in which formats, and whether the vendor is aware of this and guarantees it will deliver the necessary mechanisms and take responsibility for their ongoing operation.
  6. Data migration described in a single sentence. Without settling which data, from what period, who cleans it and who checks the result.
  7. Requirements written as a list of features instead of a description of processes. Every vendor will answer "yes" when asked about a feature. Ask how it handles your specific case, and the answers start to diverge.
  8. Comparing the starting price instead of the total cost. The licence is just the beginning. Maintenance, changes and integrations are paid for over years. I write about this mechanism in the article on total cost of ownership (TCO) and boiling the frog.
  9. No rules for changing scope. It is unclear who raises a change, who prices it and who approves it.
  10. A contract with no exit terms. No provisions on data export, documentation or handing maintenance over to another provider. No tools for mitigating risk.
  11. A maintenance agreement adopted from the vendor's template. Service levels, response times and the cost of changes are then set by one side alone.
  12. Decisions left until the last moment before a deadline. When a statutory deadline or the end of support for the old system is close, there is no longer room for comparing offers or negotiating.

Mistakes one to three are root causes. If you eliminate them, most of the others become visible at the preparation stage, rather than during delivery.

For financial oversight

For a council, supervisory board or head office, what matters most is whether the decision to choose a vendor has documented justification. The twelve points above also serve as a list of questions worth asking before the board approves the procurement documents.

A practical example

One of our clients was told by their ERP vendor that exchanging counterparty data with the correspondence management system being implemented (EZD/e-Delivery) would be no problem at all. A correspondence management system usually stores data on all counterparties, not just those for whom economic events occur - that is, those who become customers or suppliers. The data lifecycle of a new counterparty typically starts much earlier than any economic event.

During implementation it turned out that the cost of adapting the ERP vendor's API for two-way counterparty data exchange amounted to 80% of the entire value of the project to implement cost-document workflow integrated with the KSeF, OCR, VIES, GUS (Polish Central Statistical Office) and, finally, export of data to the finance and accounting system. This single integration, not discussed thoroughly with the vendor from the outset, practically doubled the cost of the project.

When you need an independent advisor

If you have an experienced team that has already prepared several similar procurements, this list will serve as a check. An independent view makes sense when the procurement is large relative to the organisation's scale, when the requirements were drawn up in contact with a single vendor, when the decision will need to be defended before an audit, a council or head office, or when no one on the buyer's side knows these systems from the inside.

I can review the documents before the tender is published or the request for quotation is sent, prepare the requirements and test scenarios, or assess bids that have already been submitted. In public authorities the starting point looks a little different; I describe it on the page for local government units (JST).

Which of these mistakes is the most common?
In my experience, it is most often the acceptance criteria and test scenarios agreed before signing that are missing. Everyone assumes it will be "obvious" whether the system works. At acceptance, it turns out each side sees something different. Almost never, though, are the success criteria clearly defined - that is, a precise statement of what the system is meant to do for users and when users will say it genuinely supports their work, increases their productivity and does not get in the way.
Can these mistakes be fixed after choosing a vendor?
Partly. A business owner, a change log and test scenarios can all be introduced during the project. Scope, integrations and exit terms that were absent from the procurement cannot simply be added without negotiation, and in public procurement the scope for amending a contract is limited. It is worth checking this with a procurement lawyer.
Are conversations with vendors before the tender a mistake?
No. Market research is useful. The mistake is copying one vendor's description into your own requirements. Talk to several vendors and write down your needs in your own words. Comparison matrices are useful here, of the kind used by procurement departments in multinational corporations that have specialised in running purchasing processes effectively.
Who in the organisation should check this list?
The business owner together with the IT manager and the person responsible for procurement, and the result should reach the board before the documents are approved. In a company, this role is often filled by the CFO.
Do these mistakes also apply to small purchases?
Yes, though the consequences are smaller. For purchases below the public-procurement threshold there are fewer formalities, but integrations, data and contract exit terms look exactly the same.
If you are preparing a procurement for a system and want to check it against these twelve points before it goes out to vendors, get in touch. Let's talk →

Let’s talk about your situation — specifically, not in general terms.