Understand risks.
Find solutions.
Improve integrity.
The Infrastructure Integrity Toolbox brings together practical resources and real-world experience to help the infrastructure community identify risks, share insights and strengthen integrity at every stage of the project lifecycle.
Explore integrity risks
Step 1Stakeholder group
Risks are experienced differently by different stakeholders. Select which stakeholder group you belong to:
Use the Infrastructure Integrity Toolbox to identify the risks your organisation may face throughout the project lifecycle, including those arising from relationships with third parties such as subcontractors, suppliers, venture partners, agents and project intermediaries, and from interactions with public authorities.
The Infrastructure Integrity Toolbox will help you recognise red flags, understand your level of exposure, know when to pause before making strategic decisions, and explore measures to mitigate the risks identified.
Use the Infrastructure Integrity Toolbox to identify the risks that may affect your investment throughout the project lifecycle, including those related to sponsors, investees, advisors, counterparties and project intermediaries, as well as the assumptions and projections underpinning the investment.
The Infrastructure Integrity Toolbox will help you recognise red flags, understand your level of exposure, know when to pause for further due diligence, and make informed investment decisions.
Use the Infrastructure Integrity Toolbox to identify the risks that may arise from the decisions and processes you manage throughout the project lifecycle, as well as from interactions with political actors, lobbyists, bidders, contractors and other stakeholders.
The Infrastructure Integrity Toolbox will help you recognise red flags, understand where your processes may be exposed to integrity risks, know when to pause and seek further information, and explore measures to address the risks identified.
Use the Infrastructure Integrity Toolbox to understand integrity risks across the infrastructure project lifecycle, including risks related to public decisions, the use of resources, access to information, and specific project phases, such as tendering, implementation and operation.
The Infrastructure Integrity Toolbox will help you identify areas of concern, recognise where further information or clarification may be needed, and guide your engagement with other stakeholders based on the risks identified. It also provides practical measures and examples to help you understand how integrity risks can be addressed.
Step 2Project phases of most concern
Different phases are exposed to different risks. Select the phases and risks which are relevant to your organisation.
Phase 1 5 risks during the Project Identification phase
-
Phase 1: Project Identification
Project selection and budgeting driven by political influence
Project selection, budget and pipeline decisions are shaped by patronage or political influence rather than transparent project selection criteria, public need, and value-for-money (VfM).
Red Flags & Indicators
- Lack of clear objectives and decision-making criteria to drive project selection and prioritisation.
- Selection criteria are bypassed, inconsistently applied, or changed without recorded justification or published criteria.
- Projects enter, shift, or drop from the budget and pipeline with limited appraisal documentation and justification.
- Political influence is decisive in advancing project selection and prioritisation and in bypassing approval processes, with political donations, campaign financing, and informal contributions linked to these decisions.
- Appraisal evidence is weak, missing, or not used in decision-making and approval processes.
- Lack of pre-feasibility/feasibility analyses to assess project viability prior to approval processes.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes reputational risk; unfair competition pressures; and potential exclusion from future works.
Decision Point
Before early engagement and bid/no‑bid decision, assess whether project identification is based on documented criteria, and pause/exit if project selection depends on informal influence.
Mitigation Actions
• Compliance programme that includes a bid/no-bid integrity screening for sponsors, intermediaries, and partners, covering Politically Exposed Persons (PEPs) and escalation process in case of conflict.
• Adequate record keeping of all engagement with officials, sponsors and intermediaries (including date, attendees, topics, commitments).
• Adopt a zero-tolerance policy regarding facilitation payments and unmanaged gifts or hospitality.
• Whistleblower policy for reporting and handling unethical or illegal activities within the organisation.
• Request that authorities publish clear guidelines on project selection criteria and disclose project appraisal documentation if not publicly available.
• Use formal public administrative mechanisms to challenge unclear selection criteria.Mitigation Resources
Screen sponsors, partners, agents, advisers, and other counterparties linked to project pipeline and budget decisions; verify beneficial ownership, PEP, sanctions, and related-party risks, and escalate concerns or refrain from proceeding where red flags remain unresolved.
Counterparty integrity screening and due diligenceReview publicly disclosed project pipeline and budget records before early engagement or bid/no-bid decisions; identify disclosure gaps, missing reasons for approval, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes financing politically driven projects with weak appraisal and limited analysis of environmental and social viability; higher fraud risk; and impaired returns.
Decision Point
Before committing resources, confirm that selection and budgeting followed transparent and robust appraisal processes with credible needs and value-for-money evidence.
Mitigation Actions
• Require evidence of transparent appraisal, published criteria, and value-for-money and viability analysis before commitment
• Conduct governance, integrity, environmental and social due diligence on key counterparties
• Include disclosure covenants and verification/audit rights
• Use independent technical and integrity advisers for higher‑risk contexts and thematic areas such as land use, traditional local communities, cultural heritage, biodiversity and conservation
• Adoption of staged financing, milestone reporting and disclosure obligationsMitigation Resources
Conduct integrity due diligence on sponsors, investees, and key counterparties linked to the investment case; screen for political exposure, related-party risks, and other integrity red flags, and use conditions, covenants, monitoring, and escalation rights to delay, condition, or decline commitment where concerns remain unresolved.
Investor integrity due diligence and monitoringReview publicly disclosed project pipeline, appraisal, and budget records before commitment; identify disclosure gaps, missing reasons for approval, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsEvaluate the appraisal evidence, assumptions, costs, benefits, and scenarios underpinning project selection; benchmark alternatives and require revision or escalation where value-for-money, viability, or cost estimates appear unreliable.
Appraisal and cost-estimate assuranceFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes misallocation of public resources; weak value-for-money decisions; reputational and audit risk; service gaps from low priority projects; and loss of public trust.
Decision Point
Before project and budget approval, approve and disclose the selection rationale and criteria.
Mitigation Actions
• Publish a medium- to long-term project pipeline
• Publish selection criteria, scoring, and pipeline changes with reasons
• Maintain and publish a decisions log with reasons for the priorities selected and a document version history
• Separate political decision making from technical appraisal bodies
• Adopt appraisal with mandatory feasibility analysis prior to project approval and justification in cases where feasibility requirements are exempted
• Adopt appraisal with independent review for high‑value projects
• Require conflict-of-interest and beneficial ownership checks for decision makers and advisers in approval processes
• Adopt multistakeholder working at strategic level decision-making of infrastructure policies and programs, with civil society participationMitigation Resources
Evaluate the assumptions, costs, benefits, and scenarios underlying proposed pipeline entries; benchmark and challenge cases where the appraisal does not provide a reliable basis for selection or budget allocation.
Appraisal and cost-estimate assurancePublish and maintain public access to project pipeline records, including selection criteria, scoring, budget decisions, reasons for approval, and reasons for subsequent changes.
Transparency and data disclosure standardsApply stage-gate reviews, readiness checks, and documented approval logs before approving pipeline entries; return proposals for further appraisal where readiness, strategic justification, or value-for-money is not evidenced.
Stage-gate governance and independent assuranceFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes reduced service delivery and misdirected investment; limited access to decision making processes; and poor accountability when priorities are set behind closed doors.
Decision Point
During budget cycle allocation and/or pipeline publication, submit access to information to request appraisal documentation. Decide whether to challenge the evidence (lack of criteria for selection, incomplete or inconsistent appraisal, unreliable assumptions) or hold while building evidence.
Mitigation Actions
• Monitor pipeline and budget disclosures to identify unexplained additions, removals, or reprioritisation as well as patterns where certain regions receive a disproportionate share of resources
• Use access to information to request clarification regarding rationale and criteria of project selection
• Advocate for early, inclusive social consultation before key decisions are locked in
• Engage oversight bodies to report on suspicions of undue influence (use safe, confidential reporting and anonymisation where retaliation risk is material)Mitigation Resources
Request access to non-public decision records, such as selection justifications, appraisal notes, records of budget changes, or reasons for approval, so unexplained additions, removals, or reprioritisation can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed project pipeline records at an early stage; identify disclosure gaps, missing selection justifications, or unexplained budget changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
Good Practices
-
Phase 1: Project Identification
Bias toward large works/projects to maximise opportunities for illicit gains
Resources are steered toward large capital projects and major works that offer greater opportunities for rent‑seeking, rather than the most cost‑effective solutions, increasing the risk of so-called 'white elephants'.
Red Flags & Indicators
- Major works options are favoured over maintenance and rehabilitation options without a robust alternative comparison.
- Project scope is inflated to increase contract value and discretionary decisions
- Project benefits are inflated to provide justification for project selection
- Projects are repeatedly oversized relative to demand and capacity constraints
- Packaging/specifications and business cases favour large solutions over credible lower‑cost alternatives.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes reputational risk; pressure to participate in inflated scopes; and increased compliance risk in high‑value works.
Decision Point
Before early engagement and bid/no‑bid decision, assess whether project scope and pipeline choices are evidence‑based and transparent.
Mitigation Actions
• Avoid participating in arrangements that exhibit a high incidence of the identified red flags and rely on political facilitation
• Document all engagement and decisions
• Request disclosure of scope rationale and alternative analysis and make engagement conditional on receipt of a core evidence pack (needs and demand basis, options comparison, value-for-money rationale)
• Produce an options appraisal and retain assumptions, source data, and calculation files for comparison purposes
• Apply enhanced due diligence for intermediaries and local partners in high‑value, high-impact projects
• Use internal compliance escalation processes and whistleblower channels, where available, to flag internally unrealistic scaling or scope inflation
• Use internal compliance escalation processes and whistleblower channels, where available, to flag where the business case is repeatedly rewritten to “fit” a larger option (e.g., shifting assumptions and thresholds without evidence)
• Use formal public administrative mechanisms to flag externally unrealistic scaling or scope inflationMitigation Resources
Review the assumptions, costs, benefits, and scenarios used to justify larger-scale options; benchmark the project proposal against disclosed needs, options analysis, and value-for-money evidence, and escalate or decline engagement where the proposal is not supported.
Appraisal and cost-estimate assuranceIdentify corruption risks in project identification decisions that favour larger works; assign internal review and escalation responsibilities, define follow-up actions, and track whether concerns over scope inflation or unsupported scaling are resolved before early engagement.
Project integrity planning and action trackingFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes capital allocation to oversized projects; weaker value-for-money; higher capex and overrun risk; higher renegotiation risk; ESG and reputational exposure connected to white‑elephant risk.
Decision Point
Before financing major works, confirm that the project option choice reflects lifecycle value and credible alternatives. Proceed only if there is a credible demand/service-need case, an options comparison (including maintenance and rehabilitation).
Mitigation Actions
• Require alternative analysis, including maintenance/rehabilitation options and lifecycle costing
• Use independent technical review for scope and key assumptions (demand, capex/opex, schedule, scope/standards) and document the decision rationale of any approved exceptions
• Include conditions related to the disclosure of project selection rationale and alignment with borrower long-term infrastructure policies and plans
• Include staged financing provisions linked to appraisal milestones and disclosure obligations
• Include re-appraisal triggers for material scope and cost growth
• Include verification/audit rights and step-in, holdback, or exit rights if integrity or feasibility risks escalateMitigation Resources
Evaluate the assumptions, costs, benefits, and scenarios underpinning the investment case; benchmark and challenge cases where larger-scale options, cost estimates, or appraisals are not supported by reliable analysis.
Appraisal and cost-estimate assuranceConduct integrity due diligence on sponsors, investees, and key counterparties linked to the investment case; use conditions, covenants, monitoring, and escalation rights where governance or integrity weaknesses could distort project selection, scope, or appraisal.
Investor integrity due diligence and monitoringFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes underfunded maintenance; higher lifecycle costs and fiscal stress; increased audit and legal exposure; public backlash; and poor value-for-money.
Decision Point
Before prioritisation decisions, compare project options using consistent criteria and document trade‑offs. Approve only when alternative and needs analysis, and value-for-money are evidenced; otherwise require rework.
Mitigation Actions
• Adopt participatory budgeting mechanisms to ensure transparent allocation of resources
• Apply a transparent prioritisation method and publish the rationale, particularly in the case of major allocations, with only lawful and justified redactions
• Require a documented appraisal comparing alternative options (demand/service need, lifecycle cost, risk, deliverability), including new major works vs maintenance and rehabitation options
• Use independent appraisal and external peer review for high-value, high impact works
• Maintain an auditable record of internal conversations, responses and decisions taken (including criteria, scoring, approvals, changes, and dissenting views)
• Commission independent review when appraisal documentation is weak or contested
• Track and justify scope changes through formal contractual and project change control systemsMitigation Resources
Evaluate the assumptions, costs, benefits, and scenarios underpinning proposed major works; benchmark and challenge cases where larger-scale options are not supported by reliable analysis, lifecycle costing, or comparison with maintenance and rehabilitation alternatives.
Appraisal and cost-estimate assuranceApply stage-gate reviews, readiness checks, and documented approval logs before approving major works options or pipeline inclusion; return proposals for further appraisal where alternative analysis, justification, or value-for-money is weak.
Stage-gate governance and independent assuranceFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes underinvestment in basic services; reduced accountability; and large capital projects that do not align with social needs.
Decision Point
During budget cycle allocation, monitor patterns in favor of large and megaprojects. Decide whether to challenge and request justifications or hold while building evidence. During project implementation, request information on cost and scope variations.
Mitigation Actions
• Track allocations to major works and use access to information to request disclosure of appraisal documentation, alternative analysis and lifecycle costs for large projects
• Track allocations to maintenance works and compare these with allocations to large projects to identify inconsistencies (major works vs maintenance)
• Engage oversight bodies when allocations appear inconsistent with needs (use safe, confidential reporting and anonymisation where retaliation risk is material)
• Mobilise communities affected by inadequate basic services to raise concerns about inconsistent investment and budget priorities
• Advocate for participatory budgeting mechanisms
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDS
• Use access to information to request disclosure of cost and scope variations in large and megaprojectsMitigation Resources
Request access to non-public decision records on option analysis, appraisal, lifecycle costs, and budget prioritisation for major works, such as business case notes, comparisons of alternatives, or records explaining scope or budget changes, so hidden preferences for larger works can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed option analysis, business cases, and cost estimates at an early stage; identify omitted lower-cost alternatives, weak justifications for larger works, or unexplained scope changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
Good Practices
-
Phase 1: Project Identification
Strategic misrepresentation of cost estimates at identification stage
Cost estimates are strategically understated or overstated during project identification to secure approval, with expectations of recovering profits later through variations, claims, or renegotiations.
Red Flags & Indicators
- Cost, benefit, and schedule estimates lack clear data sources, assumptions, or sensitivity tests.
- Forecasts and schedules are overly optimistic, with limited benchmarking.
- Operation and maintenance costs are not adequately taken into consideration.
- Baseline estimates are revised repeatedly and managed informally, without explanation or an audit trail.
- Terms of reference narrow the analysis or exclude credible alternatives.
- Independent technical review is missing, rushed, or limited.
- Large gaps appear between internal and external estimates without reconciliation.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes relying on unrealistic baseline assumptions, which can lead to later disputes and raise both compliance; and reputational risks.
Decision Point
Before early engagement and bid/no‑bid decision, ensure that project assumptions and estimates are transparent and defensible. Proceed only if they are evidence-based and benchmarked.
Mitigation Actions
• Use standard estimating methods and transparent data sources
• Refuse pressure to tailor evidence to a predetermined option
• Maintain calculation files and benchmarking/reference-class checks with assumptions and data‑sources
• Present estimates as a range with stated confidence (e.g., P50/P80) and a clear contingency rationale
• Request internal sign-off for optimism-sensitive assumptions and any departures from estimating standards
• Request or commission independent peer review for key parameters (demand, costs, benefits) when estimates deviate from benchmarking
• Use internal compliance escalation processes and whistleblower channels, where available, to flag concerns and avoid certifying unreliable estimatesMitigation Resources
Evaluate the assumptions, quantities, costs, benefits, and scenarios underpinning the cost estimate package; benchmark and challenge estimates where unsupported assumptions, weak data, or departures from standard estimating methods make the estimate unreliable.
Appraisal and cost-estimate assuranceIdentify fraud risks in the cost estimate package; define preventive and detective controls, assign internal responsibilities, and track incidents, escalations, and corrective actions relating to unreliable or manipulated estimates.
Fraud risk assessment and responseFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes mispriced risk; non‑viable projects; and renegotiation or fiscal stress that can impair returns, increased refinancing or exit pressure.
Decision Point
Before early spend, signing a memorandum of understanding or a term sheet, require independent verification of estimates and downside scenarios. Proceed only if the estimate is evidence-based and independently reviewed; otherwise pause/exit.
Mitigation Actions
• Require independent verification of demand, costs, and benefits, including sensitivity testing
• Treat unmanaged optimism bias, unclear scope, or missing contingencies as a stop/go condition
• Include condition engagement on an evidence pack: traceable cost build-up, benchmarking/reference-class evidence, and sensitivity/downside tests, and document any deviations and who approved them
• Include staged financing provisions linked to disclosure milestones related to business case and appraisal documents
• Include term-sheet protections for material changes pre–financial close: disclosure obligations, re-appraisal/re-baselining triggers, and investor pricing adjustment
• Include termination rights if material assumptions change without transparent justificationMitigation Resources
Evaluate the assumptions, quantities, costs, benefits, and scenarios underpinning the cost estimate package; benchmark and challenge estimates where weak analysis, unmanaged optimism bias, missing contingencies, or unsupported assumptions make the estimate unreliable.
Appraisal and cost-estimate assuranceReview publicly disclosed cost estimate records before early engagement or approval decisions; identify omitted assumptions, missing cost build-up, or unexplained revisions early.
Transparency and data disclosure standardsFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes projects approved on unrealistic budgets; time and cost overruns; increased renegotiation pressure; higher audit risk; and loss of credibility.
Decision Point
Before approving a project concept or business case, require independent appraisal, a budget envelope and publish appraisal documents. Approve only when the estimate is traceable, stress-tested, and properly documented.
Mitigation Actions
• Mandate alternative analysis and set a standard appraisal method (including reference-class benchmarking, uncertainty ranges, and sensitivity tests) based on project value thresholds
• Commission independent technical and economic review for major and high profile projects
• Publish key assumptions and appraisal documentation as a transparency rule
• Maintain an audit trail for appraisal review process and project cost revisions (who/what/why/when)
• Apply data quality protocols and require reconciliation/rework when scope traceability, contingency rationale, or stress-testing is missingMitigation Resources
Evaluate the assumptions, quantities, costs, benefits, and scenarios underpinning the early-stage cost estimate and business case; benchmark and challenge cases where weak analysis, unsupported assumptions, or missing stress-testing make the estimate unreliable.
Appraisal and cost-estimate assuranceApply stage-gate reviews, readiness checks, and documented approval logs before approving the early-stage business case; return the case for further appraisal where cost estimates, supporting analysis, or value-for-money are not adequately evidenced.
Stage-gate governance and independent assuranceFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes delayed delivery; higher public debt; and reduced trust when early estimates are not credible and the public is misled on true costs/benefits.
Decision Point
During budget cycle allocation and/or pipeline publication, submit access to information to request supporting evidence on project assumptions and appraisal documentation. Decide whether to challenge the early estimate (cost assumptions and cost breakdown) or hold and monitor, escalating through formal oversight channels when evidence is missing or the estimate shifts without explanation. During project implementation, submit access to information to clarify major cost revisions.
Mitigation Actions
• Track budget allocations and use access to information to request disclosure of project assumptions and appraisal documentation
• Track project implementation to identify revisions, claims or renegotiations of major estimates, and use access to information to request disclosure of corresponding claims documentation
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDS
• Engage oversight bodies when cost estimates and cost revisions appear systematically inconsistent, biased and overly optimistic (use safe, confidential reporting and anonymisation where retaliation risk is material)
• Mobilise communities affected by inadequate project delivery to raise concerns about poor project planningMitigation Resources
Request access to non-public cost estimate records, such as assumption notes, revised estimates, reference-class checks, or records explaining changes in cost assumptions, so omitted assumptions, unexplained revisions, or weak justifications can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed cost estimate and appraisal records at an early stage; identify missing assumptions, omitted revisions, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
Good Practices
-
Phase 1: Project Identification
Investment decisions driven by influential private actors and weak strategic alignment
Investment decisions reflect the interests of influential private actors and do not align with long‑term national, regional, or sector strategies.
Red Flags & Indicators
- Projects are advanced outside formal strategies or planning cycles.
- Strategic alignment asserted without clear links to adopted plans, demand evidence, or agreed priorities.
- Scope and location choices follow informal lobbying engagement rather than a documented criteria-based review.
- Alternative and option analyses are limited and focused on a preferred solution
- Prioritisation and trade‑offs across sectors or regions are not documented transparently.
- Social consultation occurs late, sometimes as a checking-box exercise, and does not influence the decision rationale.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes uneven market access; participation in projects with weak legitimacy and shapped by lobbying relations; higher cancellation/stranding risk if priorities shift; and long‑term reputational impact.
Decision Point
Before early engagement and the bid/no-bid decision, assess whether the project is grounded in existing and published policy or strategic plans and whether a credible appraisal has been conducted.
Mitigation Actions
• Request evidence of strategic alignment and appraisal and avoid reliance on informal assurances
• Document engagement with public authorities and require clear decision records and disclosure commitments, using only formal engagement routes and documented approvals
• Apply enhanced integrity controls, such as enhanced due diligence and PEP (Politically Exposed Persons) checks, and document findings before any engagement or commitment
• Use internal compliance escalation processes and whistleblower channels, where available, to flag concerns and when preferential access, facilitation/side payments, gifts/hospitality pressure, or undue influence is implied or requestedMitigation Resources
Screen owners, sponsors, partners, agents, and advisers linked to project prioritisation or access decisions; verify beneficial ownership, PEP, sanctions, and related-party risks; escalate concerns and refrain from proceeding when undue-influence red flags remain.
Counterparty integrity screening and due diligenceApply the compliance system to review and escalate engagement decisions linked to project prioritisation; require formal approvals, record commitments and interactions, and address breaches or requests for preferential treatment.
Compliance management systemFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes stranded‑asset risk; policy reversal risk; reputational exposure; dispute and renegotiation risk; and poor returns when projects lack strategic and economic justification.
Decision Point
Before committing resources, test project strategic alignment and value-for-money justification; and require transparency, disclosure obligations and a clear decision trail as a condition for investment approval.
Mitigation Actions
• Require a documented strategic alignment assessment, demand rationale and alternative analysis before start engagement and treat missing evidence as a pause/no-go condition
• Conduct enhanced due diligence on key counterparties and intermediaries as well as conflict-of-interest, beneficial ownership and PEP checks where relevant
• Use independent review to test benefits, risks, and distributional impacts in case of mega projects
• Include covenants on disclosure, social consultation, and decision logs to trace material changes
• Track record of who decided what/when and avoid “off-process” commitments
• Include term-sheet protections for material changes: suspension/exit rights and verification/audit rights if strategic criteria shift without justification or undisclosed influence emergeMitigation Resources
Conduct integrity due diligence on sponsors, investees, counterparties, and intermediaries linked to project prioritisation; use covenants, monitoring, escalation, and pause or no-go conditions when strategic alignment evidence is weak or undue-influence risks remain unresolved.
Investor integrity due diligence and monitoringApply stage-gate reviews, readiness checks, and documented approval logs before approving investment engagement or financing linked to project prioritisation decisions; return cases for further work when strategic alignment, demand rationale, or value-for-money is weak.
Stage-gate governance and independent assuranceBenchmark integrity controls governing project prioritisation decisions; identify gaps in strategic alignment assessment, disclosure, decision logging, and control over off-process influence, and prioritise corrective action.
Integrity benchmarking, self-assessment, and control-gap diagnosticsFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes policy inconsistency; weak accountability; inter‑sector/regional grievances; loss of public trust; and inefficient investment when private interests distort priorities.
Decision Point
During project prioritisation, require consistent policy alignment, conformity with planning rules, evidence of needs and publication of the rationale for project prioritisation.
Mitigation Actions
• Publish the project pipeline
• Publish the rationale/criteria of project prioritisation
• Require justification for projects approved without alignment with strategic plans and document instances where planning, appraisal and prioritisation rules were not followed
• Require early, meaningful social consultation and record how feedback influenced decisions
• Maintain an auditable and transparent decision log capturing selection criteria changes and written justifications
• Require conflict-of-interest checks for decision makers and advisers during project approval processes
• Record and manage external representations (e.g., lobbying relations/political direction) through a formal register
• Publish key assumptions and appraisal documentation as a transparency rule
• Refer allegations of undue influence to independent oversight bodies for investigation, documenting outcomes and corrective actionsMitigation Resources
Apply stage-gate reviews, readiness checks, and documented approval logs before approving project prioritisation decisions; return cases for further work where strategic alignment, justification, or value-for-money is weak.
Stage-gate governance and independent assuranceAssess institutional corruption risks in project prioritisation decisions; assign mitigation actions to responsible units, set deadlines, and track whether risks linked to undue influence, rule bypass, or weak strategic alignment are addressed.
Institutional integrity risk assessment and mitigationPublish and maintain public access to the project pipeline, project prioritisation criteria, decision logs, key assumptions, and written justifications for approvals, changes, or departures from strategic plans.
Transparency and data disclosure standardsFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes community exclusion from priority‑setting and increased inequality when projects favour narrow interests.
Decision Point
During budget cycle allocation and/or pipeline publication, assess whether priorities match needs. Decide whether to (a) use access to information to request evidence of appraisal documentation and social consultation processes and escalate through oversight channels, or (b) monitor while gathering evidence safely.
Mitigation Actions
• Track budget allocations and/or project pipeline and compare proposed projects against existing policies/strategic plans to highlight misalignment
• Track budget allocations and/or project pipeline and compare proposed projects against social/service needs to highlight misalignment
• Use access to information to request clarification on criteria and selection rationale of projects when concerns may exist regarding potential policy and needs misalignment
• Engage oversight bodies to report instances of policy and needs misalignment (use safe, confidential reporting and anonymisation where retaliation risk is material)
• Advocate for early disclosure of appraisal documentation
• Support community participation and document concerns for oversight bodies regarding lack of community participation in project selection
• Mobilise communities affected by inadequate participation to raise concerns about lack of 'Free, Prior and Informed Consent'Mitigation Resources
Request access to non-public strategic planning and prioritisation records, such as alignment assessments, prioritisation notes, or records explaining deviation from national, regional, or sector plans, so hidden preferences, unexplained changes, or weak justifications can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed strategic planning and prioritisation records at an early stage; identify missing alignment rationale, omitted prioritisation criteria, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
Good Practices
-
Phase 1: Project Identification
Conflicts-of-interest and revolving‑door influence in early decisions
Conflicts-of-interest, intermediaries, and revolving‑door movements enable undue influence over project prioritisation and early choices, including design-related choices and project location.
Red Flags & Indicators
- Conflicts-of-interest are not declared for decision makers, advisers and consultants.
- Roles, relationships (such as related-party links and beneficial ownership) and fees of advisers and intermediaries are unclear.
- Advisers and intermediaries are appointed without transparent selection and independence safeguards.
- Key meetings occur off‑record or without minutes and approvals
- Officials move to private firms soon after decisions affecting those firms and cooling-off/recusal rules are absent or inconsistently applied.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes limitation to fair competition; pressure to hire connected advisers/intermediaries; reputational harm; and increased legal risk when access is transactional and conflicts are hidden.
Decision Point
Before committing resources, request clarification on any adviser/intermediary and beneficial owners of companies involved in early project shaping.
Mitigation Actions
• Require disclosure of advisers and intermediaries involved in the project
• Require disclosure of beneficial ownership of companies and entities involved in the project
• Avoid arrangements, contracts or financial structures where parties connected to the project, the client, or the government can remain hidden and undisclosed
• Use written contracts with defined deliverables and transparent fees applied to advisers and intermediaries
• Ban/reject contractual clauses where success fees paid to advisers and consultants is linked to access, selection, or approval of projects
• Apply third‑party due diligence and conflict-of-interest checks for partners, advisers and intermediaries (including former officials)
• Maintain clear records of engagement with public officials/former officials (meetings, attendees, topics and commitments)
• Adopt internal policies regulating a cooling-off period between a public official could take up a role within the company
• Adopt a lobbying policy that sets clear limits on gifts and hospitality and applies to agents and intermediaries
• Use internal compliance escalation processes and whistleblower channels, where available, to report internally if “political access” is offered or requestedMitigation Resources
Declare and manage conflicts-of-interest, gifts, lobbying contacts, secondary roles, and revolving-door risks affecting early project decisions and adviser appointments; exclude conflicted advisers, intermediaries, or former officials from the decision process or engagement until conflicts are resolved and documented.
Conflict-of-interest management and ethics controlsScreen owners, sponsors, partners, agents, advisers, and intermediaries linked to early project decisions or adviser appointments; verify beneficial ownership, PEP, sanctions, and related-party risks, and escalate concerns or decline engagement where red flags remain.
Counterparty integrity screening and due diligenceGood Practices
Stakeholder Exposure
Exposure includes governance failures; reputational damage; debarment contagion via advisers or contractors; and project underperformance due to biased early decisions.
Decision Point
Before preparing letter of intent or term sheet, assess conflict-of-interest, adviser independence, and any revolving‑door risks. Continue only once conflict-of-interest is cleared.
Mitigation Actions
• Require full disclosure (identity, role, scope, fees, beneficial ownership, prior public roles/PEP checks where relevant) and conflict-of-interest declarations for advisers and intermediaries
• Screen intermediaries and key counterparties for sanctions and debarment
• Include integrity covenants in term sheets and relevant agreements: no success fees linked to access or project approval; transparent terms of reference and fee schedule applicable to advisers and intermediaries; written reporting of material contacts and any lobbying relations/representation; a track record of decision; cooling-off requirements
• Include enforceable pause/suspension and exit triggers when covenants are breached, disclosures remain incomplete, cooling-off requirements are waived without documented justification, or adviser appointments create credible undue-influence riskMitigation Resources
Require conflict-of-interest declarations and conflict management for advisers, intermediaries, and relevant decision-makers in early project decisions; document gifts, lobbying contacts, secondary roles, and revolving-door risks, and exclude conflicted parties from the decision process until conflicts are resolved and documented.
Conflict-of-interest management and ethics controlsConduct integrity due diligence on intermediaries, advisers, and key counterparties linked to early project decisions; use covenants, reporting requirements, enhanced due diligence triggers, and pause, suspension, or exit rights where red flags or undue-influence risks remain unresolved.
Investor integrity due diligence and monitoringGood Practices
Stakeholder Exposure
Exposure includes biased prioritisation; advice and decisions not based on credible evidence; poor project choices; higher audit, investigation and legal challenge risk; and loss of institutional credibility when conflicts are not managed.
Decision Point
Before appointing advisers and approving project selection, ensure conflict-of-interest controls are in place and verification process can be documented.
Mitigation Actions
• Require conflict-of-interest declarations and recusals for officials and advisers
• Maintain a conflict-of-interest register and document any waivers/exceptions with written justification
• Apply cooling‑off rules and document post‑employment restrictions for key roles
• Maintain a transparent record of meetings and lobbying relations/representation relevant to project approvals
• Use independent reviewers for high profile and mega projects and rotate panels when prior relationships/related-party links exist
• Document appointment decisions, mitigations, and the rationale for the final project recommendationMitigation Resources
Require conflict-of-interest declarations, maintain conflict-of-interest registers, enforce recusal, and document gifts, lobbying contacts, secondary roles, and revolving-door risks affecting early project decisions; exclude conflicted officials or advisers from the decision process until conflicts are resolved and documented.
Conflict-of-interest management and ethics controlsAssess corruption risks in early project decisions, including conflicts of interest, adviser influence, lobbying contacts, and revolving-door risks; assign mitigation actions to responsible units, set deadlines, and revise controls where new red flags emerge.
Institutional integrity risk assessment and mitigationPublish and maintain public access to early project decision records, including conflict-management measures, meeting and lobbying records where disclosure rules allow, appointment decisions, and reasons for changes, waivers, or exceptions.
Transparency and data disclosure standardsGood Practices
Stakeholder Exposure
Exposure includes captured priorities; reduced trust; and limited accountability when decisions are shaped by hidden relationships and revolving‑door influence.
Decision Point
During budget cycle allocation and/or pipeline publication, request disclosure of conflict-of-interest arrangements. Decide whether to (a) escalate through oversight channels, or (b) monitor while gathering evidence safely.
Mitigation Actions
• Use access to information to request disclosure of companies, advisers and intermediaries involved in the project, as well as their roles, contractual scope, fees and commissions, and declared interests
• Use access to information to request information on conflict-of-interest declarations and beneficial ownership checks conducted in relation to officials, intermediaries and advisers
• Monitor the use of intermediaries and raise concerns with oversight bodies when a lack of transparency in the engagement of advisers and intermediaries transpires, or when other issues emerge (late appointments, repeat firms, waived cooling-off – anonymise sources and use secure reporting routes when coercion or retaliation risks are material)
• Advocate for a transparent record of meetings and lobbying relations/representation relevant to project approvals
• Advocate for a transparent conflict-of-interest register relevant to instances of project approvalMitigation Resources
Request access to non-public decision records, such as adviser appointment records, conflict-of-interest declarations, meeting records, fee arrangements, and records of lobbying or representation relevant to early project decisions, so hidden influence, undeclared interests, or unexplained decisions can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyCollect and use beneficial ownership data on companies, advisers, intermediaries, and connected parties involved in early project decisions to identify hidden control, shell entities, or conflicts-of-interest.
Beneficial ownership transparency and interoperabilityGood Practices
Phase 2 6 risks during the Financing & Appraisal phase
-
Phase 2: Financing & Appraisal
Bribery or undue influence to secure financing or guarantees
Payments or influence are used to steer financing decisions, guarantees, or approvals toward preferred sponsors or delivery models.
Red Flags & Indicators
- Financing or guarantee decisions advance without a transparent rationale and documented criteria.
- Unusual conditions, fees, intermediaries, or side arrangements appear in the financing package and are poorly explained.
- Approvals bypass or alter normal appraisal and budgeting process
- Lack of a track record of funding and financing decisions.
- Material terms change late in the process with limited disclosure or audit trail.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to offer inducements (often via intermediaries) to secure budget approval or guarantor support; distorted terms and contingent liabilities; delayed and denied financing if refusing; and reputational and legal risks connected to bribery exposure, including internationally.
Decision Point
Before accepting indicative terms or engaging authorities, lenders and guarantors, conduct due diligence checks on stakeholders including financial advisers involved in the project.
Mitigation Actions
• Document all financing and guarantee interactions with public officials and private lenders involved in the project, including offers and material term changes
• Require dual internal approvals for commitments, fees, intermediaries, and side letters
• Conduct enhanced due diligence on financial advisers, lenders, agents, and intermediaries
• Require transparent fee terms and ban/reject success fees clauses tied to approvals of project funds, private financing, guarantees, or access
• Use internal compliance escalation processes and whistleblower channels, where available, to report internally if any solicitation, facilitation, gift, or “special access” request arises.Mitigation Resources
Apply anti-bribery controls to financing and guarantee decisions; refuse improper payments, gifts, facilitation, or other inducements intended to influence approvals, and escalate and pause where concerns arise.
Anti-bribery management and controlsScreen financial advisers, agents, intermediaries, and counterparties linked to financing or guarantee decisions; verify beneficial ownership, PEP, sanctions, and related-party risks, and escalate concerns or decline engagement where red flags remain.
Counterparty integrity screening and due diligenceFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes endorsing biased financing package; risks of hidden fees; sanctions contagion via sponsors and agents; and delays or write‑downs if approvals are later challenged.
Decision Point
Before term sheet signing, agreeing on guarantees, or committing resources, conduct due diligence checks, including on financial advisers involved in the project.
Mitigation Actions
• Conduct enhanced due diligence on financial advisers, lenders, agents, and intermediaries
• Conduct beneficial ownership, PEP checks as well as verification of how fees and commissions are paid to advisers or intermediaries
• Verification of side letters conditions to identify undisclosed benefits
• Condition approval on full disclosure of financing terms, advisory contracts, and payment instructions
• Request clarification on opaque structures, unexplained payments and late provision changes that cannot be properly tracked or audited
• Include anti-corruption covenants as well as audit/information rights
• Include exit rights when covenants are breached, disclosures remain incomplete, intermediaries remain undisclosed and credible bribery allegations ariseMitigation Resources
Conduct integrity due diligence on sponsors, lenders, advisers, intermediaries, and counterparties involved in financing or guarantee decisions; require full disclosure of beneficial ownership, fee flows, commissions, side letters, and advisory arrangements, and use covenants, monitoring, and escalation triggers before approval, disbursement, or waiver where red flags remain.
Investor integrity due diligence and monitoringApply anti-bribery controls to financing and guarantee decisions; refuse improper payments, gifts, or other inducements, and suspend, escalate, or exit where irregular payments, undisclosed intermediaries, or credible bribery concerns arise.
Anti-bribery management and controlsFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes authorising funding and guarantees on weak justification; higher fiscal and contingent‑liability; higher audit and legal risks; loss of credibility; and lock‑in to poor financing terms.
Decision Point
Before authorising funding and project financing, review fiscal commitments as well as stakeholders involved in approval processes, including advisers and lenders.
Mitigation Actions
• Select financial advisers and lenders through transparent and documented processes
• Publish funding and financial contractual as well as any fees paid to intermediaries
• Publish appraisal documentation as a transparency rule
• Review financing proposals for red flags (unusual commissions, offshore structures, related-party links, and hidden side letters conditions)
• Require explanations for late material term changes in financing conditions
• Refer red flags to independent oversight bodies for investigation, documenting outcomes and corrective actions
• Ensure that the evaluation and approval of project financing are carried out by separate functions
• Maintain a transparent record of meetings and lobbying relations/representation relevant to budget and financing approvalsMitigation Resources
Apply anti-bribery controls to financing and guarantee decisions; require written records, prohibit improper payments, gifts, hospitality, facilitation, or other inducements intended to influence approvals, and escalate suspected breaches.
Anti-bribery management and controlsPublish and maintain public access to financing and guarantee records, including key terms, evaluation rationale, and reasons for material changes, with only lawful redactions, to support auditability and public accountability.
Transparency and data disclosure standardsRequire conflict-of-interest declarations, maintain registers, enforce recusal, and document gifts, lobbying contacts, and revolving-door risks affecting financing and guarantee decisions before approval.
Conflict-of-interest management and ethics controlsFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes restricted access to appraisal and financing terms; constrained scrutiny of guarantees and liabilities; and weakened accountability related to project sponsors and financiers.
Decision Point
During the budget allocation cycle and/or pipeline publication, request disclosure of stakeholders involved in the project, including advisers and lenders, as well as contractual and financing arrangements. Decide whether to (a) escalate through oversight channels, or (b) monitor while gathering evidence safely.
Mitigation Actions
• Use access to information to request disclosure of stakeholders involved in the project, including intermediaries, advisers and lenders
• Use access to information to request disclosure of project financing and guarantee terms, advisory contracts, and fees agreements with consultants and advisers
• Cross-check stakeholders named in project contracts with those named in financial and guarantee arrangements to identify potential opaque intermediaries, hidden beneficiaries, and related-party links
• Advocate for early disclosure of complete project financing documentation, financing structure, beneficiaries, and payment flows
• Use oversight channels to raise credible concerns about unexplained commissions, side arrangements, or late term changes linked to project financing (use safe, confidential reporting and anonymisation where retaliation risk is material)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Request access to non-public financing and guarantee decision records, such as committee minutes, approval memoranda, advisory contracts, fee records, or records of changes to financing terms or guarantees, so hidden influence, irregular payments, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed financing, guarantee, and appraisal records at an early stage; identify disclosure gaps, omitted terms, unexplained changes, or opaque intermediary arrangements, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsSubmit credible complaints or protected reports through safe reporting and oversight channels where irregular payments, undue influence, or unexplained financing changes are identified; use confidentiality and source-protection measures where retaliation risk is material.
Grievance, complaints, and protected reportingFailure Cases
Good Practices
-
Phase 2: Financing & Appraisal
Manipulated feasibility and appraisal (economic, environmental & social, technical)
Feasibility and appraisal results are distorted to facilitate decision approval, concealing risks and inflating expected benefits.
Red Flags & Indicators
- Appraisal relies on selective assumptions, with limited sensitivity testing or independent challenge.
- Project needs and demand are not supported by verifiable evidence and credible baselines.
- Project benefits are inflated to provide justification for project approval.
- Key cost drivers are understated or omitted (lifecycle costs, operations & maintenance costs, contingencies and safeguards).
- Adverse environmental or social impacts are understated or omitted.
- Revisions to project assumptions are handled informally, with weak version control and accountability for changes.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to turn a blind eye to unverifiable project assumptions; liability for misrepresentation of key assumptions (such as enviromental and social impacts); flawed baselines drive later variations, overruns and higher dispute risk; and reputational exposure.
Decision Point
Before early engagement and bid/no‑bid decision, verify whether feasibility and appraisal are based on documented assumptions, alternatives, and evidence.
Mitigation Actions
• Request disclosure of the full feasibility and appraisal documentation (models, assumptions, baselines, alternatives)
• Document gaps and data limitations and other issues related to poor and inconsistent feasibility and appraisal documentation
• Use internal compliance escalation processes and whistleblower channels, where available, to flag internally any pressure to turn a blind eye to unrealistic assumptions or omitted or understated environmental and social impacts
• Decline to endorse unsupported appraisal documentation and document the reasons
• Request independent review for material project assumptions (cost, demand, benefits, impacts) and maintain version control with an auditable change log for revisionsMitigation Resources
Evaluate the assumptions, costs, benefits, and scenarios underpinning feasibility and appraisal records; challenge the appraisal where weak analysis, narrowed alternatives, omitted environmental & social impacts, or unsupported claims conceal risks or overstate expected benefits.
Appraisal and cost-estimate assuranceFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes investment case built on inflated benefits and understated costs; hidden environmental and social risks; mispriced returns; higher claims and renegotiation risk; and reputational risk.
Decision Point
At financing and investment committee stage and before signing sheet commitments and committing resources, verify whether project assumptions and risks are validated through a robust appraisal process, and require independent verification of assumptions and downside impacts if appraisal seems unreliable. Proceed only if the appraisal is evidence-based and independently reviewed; otherwise pause/exit.
Mitigation Actions
• Require independent feasibility analysis (demand, environmental and social impact, sensitivity test, downside scenarios) before any commitment
• Condition further engagement on full disclosure of appraisal documentation, evidence baselines, key assumptions and revisions
• Include covenants requiring re-appraisal if scope, cost, schedule, demand or other key assumption changes materially
• Include exit triggers when covenants are breached and disclosures remain incompleteMitigation Resources
Evaluate the assumptions, costs, benefits, and scenarios underpinning feasibility and appraisal records; challenge the appraisal where weak analysis, incomplete options appraisal, omitted environmental and social risks, or unsupported assumptions conceal risks or overstate expected benefits.
Appraisal and cost-estimate assuranceFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes project approval based on manipulated evidence; funding gaps due to underestimated costs; higher risk of scope change and budget renegotiation; increased risk of disputes; and loss of public trust.
Decision Point
Before approving a feasibility analysis, verify whether the assumptions and risks are validated through a robust appraisal process, and require rework or peer review if assumptions and downside impacts seems unreliable.
Mitigation Actions
• Mandate a standard appraisal methodology
• Publish key assumptions and appraisal documentation as a transparency rule
• Adopt appraisal with mandatory feasibility analysis prior to project approval and justification in cases where feasibility requirements are exempted
• Adopt appraisal with independent review for high‑value, high-impact projects
• Commission independent review when appraisal documentation is weak or contested
• Document reasons for selecting the preferred option and rejecting credible lower-cost alternatives
• Maintain a complete appraisal file with version control and an auditable change logMitigation Resources
Evaluate the assumptions, costs, benefits, and scenarios underpinning feasibility and appraisal records; benchmark and challenge the appraisal where risks are understated, alternatives are narrowed, or expected benefits are overstated.
Appraisal and cost-estimate assuranceApply stage-gate reviews, readiness checks, and documented approval logs before approving feasibility and appraisal records; return the case for further work where key risks are omitted, evidence is incomplete, or value-for-money is weak.
Stage-gate governance and independent assurancePublish and maintain public access to feasibility and appraisal records, including key results, assumptions, sensitivity tests, reasons for selecting the preferred option, and reasons for material changes, with only lawful redactions.
Transparency and data disclosure standardsFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes downplayed land, resettlement, and enviromental and social impacts; restricted access to baseline and project assumption information; limited ability to contest assumptions; and unmitigated community harm.
Decision Point
During the budget allocation cycle and/or pipeline publication, request disclosure of appraisal documentation. Decide whether to (a) escalate through oversight channels, or (b) monitor while gathering evidence safely.
Mitigation Actions
• Use access to information to request disclosure of complete appraisal documentation, including feasibility studies, assumptions, alternative analysis and lifecycle costs
• Use access to information to request disclosure of scope changes, cost and schedule revisions
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDS
• Engage oversight bodies to raise credible concerns about unreliable and incomplete appraisal documentation (use safe, confidential reporting and anonymisation where retaliation risk is material)
• Mobilise communities affected by inadequate project delivery to raise concerns about poor project planningMitigation Resources
Request access to non-public feasibility and appraisal records, such as internal review comments, revised assumptions, sensitivity tests, alternatives analysis, or records explaining changes to risk or benefit estimates, so concealed risks, inflated benefits, or unexplained revisions can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed feasibility and appraisal records at an early stage; identify disclosure gaps, omitted risks, missing sensitivity tests, narrowed alternatives, or unexplained revisions, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
Good Practices
-
Phase 2: Financing & Appraisal
Insider trading in land and right of way (misuse of confidential route/site information)
Individuals with access to non-public route/site/right of way information misuse or leak it (directly or via intermediaries) to acquire land/rights or influence valuations/compensation, driving inflated acquisition costs.
Red Flags & Indicators
- Shortly before a project becomes publicly known, there is an unusual concentration of land sales, speculative purchases, ownership transfers, or sharp increases in land values in or around the proposed project area.
- Beneficial ownership is concealed through proxies, nominees, or shell entities, while ownership, transaction, or valuation records are incomplete, inconsistent, or difficult to verify.
- Confidential information on proposed routes, sites, or land acquisition plans circulates outside authorised channels and coincides with price spikes, speculative purchasing, or unusual changes in land ownership.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes inflated land and right of way costs and associated delays in securing land; anti‑bribery exposure; and reputational harm if linked to contested acquisition.
Decision Point
During land negotiations, approve route/site information release and appoint agents and valuers under controlled protocols, including conflict-of-interest and beneficial ownership checks.
Mitigation Actions
• Require a documented land acquisition plan and agree compensation principles beforehand
• Classify route/site information, and restrict access on a need-to-know basis
• Use secure sharing and non-disclosure agreements during land negotiations, and maintain a disclosure and contact log for any third-party releases of information
• Appoint land agents/brokers/valuers through documented selection and clear terms
• Require conflict-of-interests and beneficial ownership checks where feasible to stakeholders involved in land negotiations
• Ban/reject undisclosed commissions, and use traceable payments with a payment and beneficiary record
• Adopt a lobbying policy that sets clear limits on gifts and hospitality and applies to agents and intermediaries
• Monitor for speculative buying, or valuation anomalies before a project becomes publicly known
• Escalate and pause land negotiations when documentation is weak, leaks are suspected, or preferential access signals ariseMitigation Resources
Require conflict-of-interest declarations and documented conflict management before sharing or acting on confidential route, site, or right of way information; exclude conflicted staff, advisers, agents, or valuers from the decision process until conflicts are resolved and documented, and record gifts, lobbying contacts, secondary roles, and revolving-door risks that could influence those decisions.
Conflict-of-interest management and ethics controlsScreen land agents, brokers, valuers, advisers, and other counterparties linked to route, site, or right of way decisions; verify beneficial ownership, PEP, sanctions, and related-party risks, and escalate concerns or exclude parties where red flags remain.
Counterparty integrity screening and due diligenceGood Practices
Stakeholder Exposure
Exposure includes inflated capex and schedule risk; opaque ownership applied in land structures; higher legal risk; delays due to disputes and social conflict; and reputational exposure if beneficiaries are hidden.
Decision Point
Before agreeing a term sheet and committing resources, establish a land acquisition plan with due diligence checks on stakeholders, including agents and intermediaries.
Mitigation Actions
• Require a land acquisition and resettlement plan with transparent valuation and compensation rules
• Confirm roles, approvals, and information controls before commitment to any land acquisition and resettlement plan
• Conduct enhanced due diligence on land intermediaries, agents, and related parties
• Require conflict-of-interests and beneficial ownership checks where feasible to stakeholders involved in land negotiations
• Require verification/audit rights related to payments and the identify of final beneficiaries
• Condition disbursements on an independent verification of land acquisition outcomes and suspend disbursements if irregularities or suspicious transactions persistMitigation Resources
Conduct integrity due diligence on land intermediaries, agents, related parties, and counterparties with access to confidential route, site, or right of way information; require beneficial ownership disclosure where feasible, use covenants and monitoring requirements, and trigger enhanced due diligence, audit rights, or suspension before approval, disbursement, or waiver where red flags remain.
Investor integrity due diligence and monitoringAppoint an independent technical adviser to test whether route changes, land requirements, valuation assumptions, and compensation rules are justified and properly reflected in acquisition costs, and to flag anomalies that may indicate misuse of confidential route or site information.
Independent technical due diligence and monitoringGood Practices
Stakeholder Exposure
Exposure includes scalating acquisition and compensation costs; delays from land disputes and litigation; social tension and unrest; and loss of public trust in land governance.
Decision Point
Before approving land budget and compensation, authorise disclosure of the land acquisition plan (registry checks, valuation method, acquisition steps, and information controls).
Mitigation Actions
• Publish land acquisition plans, valuation methods, and compensation decisions
• Publish the budget available for land compensation and do not authorise budget increase
• Maintain a record of approvals related to land acquisition values and compensation, and publish correponding decision log
• Separate valuation, negotiation, and approval roles
• Require written justification and sign-off for deviations from standard valuation and compensation rules
• Monitor and identify unusual price movements and beneficiary patterns before a project becomes publicly known
• Pause land acquisitions and refer cases to independent oversight bodies for investigation when red flags emerge, documenting outcomes and corrective actionsMitigation Resources
Verify compensation and payments linked to route, site, and right of way decisions through beneficiary checks, compensation registers, payment reconciliation logs, and review of unusual price movements or beneficiary patterns; investigate mismatches before payment.
Resettlement planning and grievance managementPublish and maintain public access to land acquisition plans, valuation methods, compensation decisions, and parcel-level registers with approval trails, disclosure logs, and reasons for material deviations, with only lawful redactions.
Transparency and data disclosure standardsGood Practices
Stakeholder Exposure
Exposure includes community displacement and price inflation from speculative buying; opaque ownership on land negotiations; intimidation and retaliation risks when land issues are reported; and loss of trust in land decisions.
Decision Point
When project information starts circulating or land prices/ownership shift unusually near the proposed project expected location, request disclosure of land acquisition plans and the budget available for land compensation. Decide whether to (a) escalate through oversight channels, or (b) monitor while gathering evidence safely.
Mitigation Actions
• Monitor land price changes, ownership transfers, and acquisition notices near the expected project location
• Document community observations of coercion, misinformation, and speculative buying
• Use access to information to request disclosure of land acquisition plans, the budget available for land compensation, land acquisition agreements, including status, valuation method, and compensation decisions
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDS
• Engage oversight bodies to raise credible concerns about land negotiations and transfers (use safe, confidential reporting and anonymisation where retaliation risk is material)
• Mobilise communities affected by land issues to raise concerns about poor project planningMitigation Resources
Request access to non-public route, land, and right-of-way decision records, such as route-change approvals, valuation notes, meeting records, or records explaining ownership changes, compensation decisions, or acquisition sequencing, so unusual ownership transfers, valuation anomalies, or unexplained decisions can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed route, land, and right-of-way records at an early stage, including parcel-level registers, acquisition status, valuation methods, and compensation decisions; identify disclosure gaps, unexplained changes, or missing records, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsGood Practices
-
Phase 2: Financing & Appraisal
Conflicts-of-interest and revolving-door influence in appraisal
Decision makers or advisers have undisclosed interests that influence appraisal outcomes.
Red Flags & Indicators
- Conflict-of-interest declarations for advisers, reviewers, and decision-makers involved in the appraisal process are absent, incomplete, outdated, or not independently verified.
- Appraisal officials, advisers, or reviewers hold overlapping roles or have prior professional, financial, political, or personal relationships that compromise—or appear to compromise—their independence.
- Advisers, experts, or appraisal panel members are selected through non-competitive or poorly documented processes, with unclear selection criteria, qualifications, roles, or terms of reference.
- Recusal, cooling-off, and independence safeguards are absent, applied inconsistently, or waived without documented justification during the appraisal process.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to accept appraisal prepared by “connected” advisors; skewed appraisal criteria reducing access for bidders; and higher compliance and reputational risk via conflicted relationships.
Decision Point
Before considering appraisal results, verify whether conflict-of-interest and independent checks have been conducted regarding advisors and decision makers involved in appraisal.
Mitigation Actions
• Maintain clear records of engagement with public officials and former officials, including meetings, attendees, topics discussed, and commitments made
• Require conflict-of-interest declarations from advisers, consultants, or intermediaries engaged by the company
• Request evidence that conflict-of-interest systems are in place to manage engagement of public officials, public-sector advisers, and appraisal decision makers
• Screen former officials engaged by the company for applicable cooling-off restrictions and document results, recusals and any restrictions applied
• Use documented selection processes and clear terms of reference for advisers, consultants, and intermediaries
• Ban/reject contractual clauses where success fees paid to advisers and consultants is linked to access, selection, or approval of projects
• Adopt a lobbying policy that sets clear limits on gifts and hospitality and applies to agents and intermediariesMitigation Resources
Require conflict-of-interest declarations and documented conflict management for advisers, panel members, and relevant decision-makers involved in appraisal and financing decisions; exclude conflicted parties from the decision process until conflicts are resolved and documented, and record gifts, lobbying contacts, secondary roles, and revolving-door risks that could influence appraisal outcomes.
Conflict-of-interest management and ethics controlsScreen advisers, agents, intermediaries, and counterparties involved in appraisal and financing decisions; verify beneficial ownership, PEP, sanctions, and related-party risks, and escalate concerns or decline engagement where red flags remain.
Counterparty integrity screening and due diligenceStakeholder Exposure
Exposure includes reliance on conflicted advisors conducting appraisal processes; biased recommendations regarding risk and returns; ESG and reputational exposure if revolving‑door links emerge; decrease of project value from flawed appraisal; and higher risk of overruns and disputes.
Decision Point
Before investment committee decision, agreeing term sheet conditions and committing resources, verify whether conflict-of-interest and independent checks have been conducted regarding advisors and decision makers involved in appraisal.
Mitigation Actions
• Require full disclosure (identity, role, scope, fees, beneficial ownership, prior public roles/PEP checks where relevant) and conflict-of-interest declarations for advisers and decision makers involved in appraisal
• Conduct enhanced due diligence on for advisers involved in appraisal
• Condition engagement on clear terms of reference and independence clauses for advisers involved in appraisal
• Pause investment decision and trigger independent review when appointments, undisclosed ties, or late scope/assumption changes indicate potential undue influence
• Include re-appraisal triggers for material scope and cost growth
• Include audit rights and step-in, holdback, or exit rights if feasibility risks escalate and issues are resolvedMitigation Resources
Require conflict-of-interest declarations and documented conflict management for advisers, intermediaries, and relevant decision-makers involved in appraisal and financing decisions; record gifts, lobbying contacts, secondary roles, and revolving-door risks, and exclude conflicted parties from the decision process until conflicts are resolved and documented.
Conflict-of-interest management and ethics controlsConduct integrity due diligence on advisers, intermediaries, and relevant counterparties involved in appraisal and financing decisions; require disclosure of roles, fees, commissions, beneficial ownership where feasible, prior public roles, and any waivers to cooling-off rules, and use independence clauses, audit rights, and pause, suspension, or exit rights where red flags remain unresolved.
Investor integrity due diligence and monitoringStakeholder Exposure
Exposure includes weak appraisal process; decisions more vulnerable to audit and legal challenge; biased appraisal lock in poor project options; loss of public trust; and higher renegotiation pressure.
Decision Point
Before appointing the appraisal official, conduct conflict-of-interest checks.
Mitigation Actions
• Request conflict-of-interest check for officials and appraisal reviewers and document any waivers/exceptions with reasons and approvals
• Run periodic compliance spot-checks and document any waivers/exceptions with reasons and approvals
• Document selection criteria for appointing appraisal officials and reviewers
• Adopt and enforce internal policies regulating a cooling-off period
• Assign independent appraisal reviewers when prior relationships or related-party links could affect independence of the appraisal process
• Adopt appraisal with independent review for high‑value projects
• Publish key assumptions and appraisal documentation as a transparency rule
• Maintain a meeting register and record material representations/lobbying inputs relevant to the appraisal (including via advisers/intermediaries), documenting how each input was evaluated, addressed, or rejectedMitigation Resources
Require conflict-of-interest declarations from decision-makers, advisers, and appraisal reviewers; maintain registers, enforce recusal, apply cooling-off requirements, and document gifts, lobbying contacts, secondary roles, revolving-door risks, waivers, and mitigation measures affecting appraisal and financing decisions.
Conflict-of-interest management and ethics controlsPublish and maintain public access to appraisal decision records, including conflict declarations, adviser appointments, meeting registers, material representations relevant to the appraisal, approval records, and reasons for changes, waivers, or exceptions, with only lawful redactions.
Transparency and data disclosure standardsStakeholder Exposure
Exposure includes opaque adviser links; reduced transparency in appraisal; limited ability to contest appraisal assumptions; and captured decisions driving community impacts.
Decision Point
During budget cycle allocation and/or pipeline publication, request disclosure of appraisal documentation and conflict-of-interest arrangements. Decide whether to (a) escalate through oversight channels, or (b) monitor while gathering evidence safely.
Mitigation Actions
• Use access to information to request disclosure of officials and reviewers involved in appraisal
• Use access to information to request disclosure of advisors and consultants involved in appraisal, as well as their roles, contractual scope, fees/commissions, and declared interests
• Use access to information to request information on conflict-of-interest declarations and beneficial ownership checks conducted in relation to officials, intermediaries and advisers involved in appraisal
• Engage oversight bodies to raise credible concerns about unreliable and incomplete appraisal documentation or when a lack of transparency in the engagement of advisers and intermediaries transpires (use safe, confidential reporting and anonymisation where retaliation risk is material)
• Advocate for a transparent record of meetings and lobbying relations/representation relevant to project approvals
• Advocate for a transparent conflict-of-interest register relevant to instances of project approvalMitigation Resources
Request access to non-public appraisal decision records, such as conflict declarations, adviser appointment records, meeting records, documented exceptions to cooling-off or recusal rules, and approval notes, so undisclosed interests, opaque appointments, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed appraisal decision records, including conflict declarations, adviser appointments, meeting registers, declared interests, and approval records; identify disclosure gaps, opaque appointments, undocumented exceptions, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsSubmit formal complaints or protected reports through oversight channels where undisclosed conflicts, opaque appointments, access-for-fee claims, or non-compliance with cooling-off or recusal rules are identified; use confidentiality and source-protection measures where retaliation risk is material.
Grievance, complaints, and protected reporting -
Phase 2: Financing & Appraisal
Undue influence over delivery model selection
Procurement and delivery modalities are chosen or designed under undue influence to allocate responsibilities and risks in ways that benefits particular actors rather than maximise value-for-money.
Red Flags & Indicators
- The delivery model is selected before the options appraisal is completed or is inconsistent with the documented value-for-money assessment and supporting evidence.
- Risk allocation, technical requirements, or contractual conditions are structured in ways that unnecessarily restrict competition or favour particular counterparties.
- Unnecessary interfaces, exceptions, bespoke terms, or contractual complexity reduce the comparability of options and limit effective review and scrutiny.
- Independent review, market sounding, challenge, or assurance processes are limited in scope, rushed, inadequately documented, or bypassed without justification.
- Broad change provisions, weak performance triggers, or poorly defined renegotiation mechanisms are embedded at an early stage, increasing the risk of cost escalation, value leakage, or post-award manipulation.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes a reduced access for bidders due to a model designed for specific parties; pressure to endorse skewed risk allocation; higher costs to prepare bids; higher renegotiations and claims risk; and reputational exposure from “rigged” model choice.
Decision Point
Before decision to bid under the proposed delivery model and risk allocation, assess whether appraisal is documented and supported by evidence.
Mitigation Actions
• Disclose advisers supporting bid preparation
• Avoid adviser-and-bidder dual roles, or apply independence safeguards where separation is permitted
• Provide evidence-based input on delivery options and risk allocation (cost drivers, risks, performance), documenting assumptions, limitations, and any deviations from standard practice
• Decline or pause engagement when the delivery model or risk allocation is selected without documented appraisal or a value-for-money rationale, or where terms seem shaped to favour a specific counterpartyMitigation Resources
Evaluate the assumptions, costs, benefits, and scenarios underpinning delivery-model appraisal; benchmark and challenge cases where the preferred model, risk allocation, or value-for-money case is not supported by reliable analysis.
Appraisal and cost-estimate assuranceRequire conflict-of-interest declarations and documented conflict management for advisory roles, bidder-adviser dual roles, and other interests affecting delivery-model selection; exclude conflicted parties from the decision process until conflicts are resolved and documented.
Conflict-of-interest management and ethics controlsStakeholder Exposure
Exposure includes biased investability analysis; delivery model that misallocates risks; higher renegotiation risk; higher ESG and reputational risks; and decrease in project value from flawed delivery model.
Decision Point
Before investment committee decision, agreeing term sheet conditions and committing resources, verify whether delivery model and risk allocation are documented and supported by appraisal evidence.
Mitigation Actions
• Require a transparent delivery-model appraisal and risk-allocation rationale consistent with the value-for-money evidence
• Treat missing analysis/evidence to support the delivery model or inconsistencies as a no-go condition
• Commission independent review for complex contracting structures (including analysis related to risk transfer, interfaces, renegotiation pathways)
• Document decision rationale to invest based on available evidence
• Include covenants on disclosure and renegotiation rights regarding side letters, material deviations and need of approvals
• Provide suspension/exit rights if terms are reshaped to favour specific counterpartiesMitigation Resources
Apply stage-gate reviews, readiness checks, and documented approval logs before approving delivery-model selection; return the case for further work where the preferred model, risk allocation, or value-for-money rationale is not supported by transparent appraisal or independent review.
Stage-gate governance and independent assuranceConduct integrity due diligence on sponsors, investees, and counterparties linked to delivery-model selection; use covenants, monitoring requirements, and enhanced due diligence triggers where counterparty influence, opaque terms, side letters, or renegotiation risks could distort model selection.
Investor integrity due diligence and monitoringStakeholder Exposure
Exposure includes a poor risk allocation; reduced competition and higher life‑cycle costs; higher legal challenge risk; higher renegotiations risk; and loss of public trust.
Decision Point
Before approving the procurement strategy, assess whether appraisal is documented and evidenced, as well as consistent with the selected delivery model and risk allocation.
Mitigation Actions
• Apply published criteria for delivery-model selection and risk allocation
• Document the rationale for the delivery model selection
• Require a documented appraisal
• Publish appraisal documentation as a transparency rule
• Use independent review for complex structures
• Commission independent review when appraisal documentation is weak or contested
• Maintain an auditable record of internal conversations, responses and decisions taken regarding the procurement strategy
• Pause decisions and refer to independent oversight bodies for investigation when conflicts-of-interest, lobbying pressure, or unclear arrangements in appraisal is detected, documenting outcomes and corrective actionsMitigation Resources
Apply stage-gate reviews, readiness checks, and documented approval logs before approving delivery-model selection; return the case for further appraisal where the preferred model, risk allocation, or value-for-money case is not adequately justified.
Stage-gate governance and independent assuranceEvaluate the assumptions, costs, benefits, and scenarios underpinning delivery-model selection; benchmark and challenge cases where the preferred model, risk allocation, or value-for-money case is not supported by reliable analysis.
Appraisal and cost-estimate assurancePublish and maintain public access to delivery-model appraisal and approval records, including selection criteria, value-for-money evidence, risk-allocation rationale, committee papers, and reasons for material changes, with only lawful redactions.
Transparency and data disclosure standardsStakeholder Exposure
Exposure includes opaque rationale for delivery model choices; unclear project costs and risks; poor social value from project choices; and increased intimidation and retaliation risk when challenging “tailored‑to‑fit” terms.
Decision Point
During budget cycle allocation and/or pipeline publication, request disclosure of appraisal documentation and rationale of the delivery model choice. Decide whether to (a) escalate through oversight channels, or (b) monitor while gathering evidence safely.
Mitigation Actions
• Use access to information to request disclosure of the procurement strategy, delivery model appraisal, and risk allocation rationale
• Use access to information to request disclosure of the officials involved in procurement strategy decision making
• Use access to information to request disclosure of advisers and consultants involved in the procurement strategy, including their roles, contractual scope, fees/commissions, and declared interests
• Use access to information to request information on conflict-of-interest declarations and beneficial ownership checks conducted for officials, intermediaries, and advisers involved in the procurement strategy
• Engage oversight bodies to raise concerns about unsupported delivery model choices and suspected conflicts-of-interest (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Mobilise communities affected by poor project planning to highlight the importance of assessing fiscal risks before deciding on the procurement strategy
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Request access to non-public decision records on delivery-model selection, such as committee minutes, option appraisal notes, records explaining changes in risk allocation, declared interests, adviser roles or fees, and approval recommendations, so unexplained shifts in the preferred model, opaque advisory influence, or weak justification can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed delivery-model appraisal and approval records at an early stage; identify disclosure gaps, unexplained changes in the preferred model, missing reasons for key decisions, or missing information on adviser roles, fees, or conflict management, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standards -
Phase 2: Financing & Appraisal
Insufficient transparency on appraisal and financing terms
Key appraisal information and material financing terms are not disclosed in a timely, complete, and consistent way, limiting scrutiny and enabling undue influence or discretion.
Red Flags & Indicators
- Appraisal documents are unpublished, released late, limited to summaries, or missing key annexes needed to test assumptions.
- Financing terms and contingent liabilities are undisclosed or incomplete, obscuring fees, guarantees, and repayment conditions.
- Published information is inconsistent, incomplete, or access-restricted, preventing timely scrutiny.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes higher reputational risk; greater uncertainty around bid terms; increased bid costs and partnership risks; and a higher risk of disputes and renegotiation.
Decision Point
Before early engagement and bid/no‑bid decision, assess timing, completeness, and consistency of the appraisal documentation and financing terms.
Mitigation Actions
• Request a disclosure package that covers appraisal documentation including assumptions and financing terms (fees, guarantees, repayment conditions)
• Avoid side-letters or undisclosed fees
• Use internal compliance escalation processes and whistleblower channels, where available, to report internally any request to omit or turn a blind eye to material appraisal and financing information
• Document gaps and data limitations and other issues related to poor transparency in appraisal and financing documentation
• Require internal sign-off that disclosures and representations are complete, consistent, and accurate before submitting committing to the bidMitigation Resources
Maintain internal oversight of the company’s appraisal and financing disclosures; require complete and accurate disclosure of key assumptions, fees, guarantees, side letters, and material changes, and track corrective action for control failures.
Risk-based internal audit planningUse the company’s compliance process to review and escalate requests to omit, delay, or restrict key appraisal information, findings, or financing information without documented justification; require documented rationale and compliance or legal sign-off before term sheets, guarantee requests, or deal commitments proceed.
Compliance management systemFailure Cases
Stakeholder Exposure
Exposure includes hidden financial conditions; appraisal flaws; misprice risk; heightened ESG and reputational risk; approval delays; and higher risk of incomplete material information disclosure.
Decision Point
Before investment committee decision, require complete appraisal pack.
Mitigation Actions
• Require a complete disclosure pack including alternative analysis, value-for-money, key assumptions, full financing terms, guarantees, risk allocation, contingent liabilities
• Treat material gaps or lack of transparency as a no-go condition
• Pause engagement if disclosures are late, inconsistent, or access-restricted such that assumptions cannot be tested or governance requirements cannot be metMitigation Resources
Conduct integrity due diligence on counterparties linked to appraisal and financing decisions; require complete disclosure of key appraisal information and financing terms, use disclosure covenants and reporting requirements, and withhold approval, disbursement, or waivers where material gaps, opacity, or inconsistencies remain.
Investor integrity due diligence and monitoringReview publicly disclosed appraisal and financing records before financing decisions; identify disclosure gaps, omitted terms, or unexplained changes early.
Transparency and data disclosure standardsFailure Cases
Stakeholder Exposure
Exposure includes approval of projects based on incomplete appraisal and financing information; erosion of public trust; risk of cost overruns; and renegotiation pressure when costs and liabilities become visible.
Decision Point
Before approving the project, assess whether appraisal and financing analysis is complete, documented and evidenced.
Mitigation Actions
• Publish appraisal documentation as a transparency rule
• Publish financing agreements, with only lawful and justified redactions
• Require formal approval and maintain an auditable record of side-letters, waivers, and amendments
• Use independent approval review for complex projects and financing structures
• Commission independent appraisal review when appraisal and financing documentation is incompleteMitigation Resources
Apply stage-gate reviews, readiness checks, and documented approval logs before approving appraisal and financing records; return the case for further work where disclosure is incomplete, evidence is weak, or material terms are withheld without documented lawful grounds.
Stage-gate governance and independent assurancePublish and maintain public access to appraisal and financing records, including key terms, annexes needed to test assumptions, approval records, side letters, waivers, amendments, and reasons for material changes, with only lawful redactions.
Transparency and data disclosure standardsFailure Cases
Stakeholder Exposure
Exposure includes limited scrutiny of costs and impacts; limited ability to test value-for-money and fiscal risk; capture concerns; and risk of retaliation when requesting information.
Decision Point
During budget cycle allocation and/or pipeline publication, request disclosure of appraisal and financing documentation. Decide whether to (a) escalate through oversight channels to raise missing items and gaps, or (b) monitor while gathering evidence safely.
Mitigation Actions
• Use access to information to request disclosure of appraisal information and financing agreements (including amendments and side letters)
• Engage oversight bodies when appraisal and financing information is incomplete, restricted or inconsistent (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDS
• Mobilise communities affected by poor project planning to highlight the importance of complete disclosure of appraisal and financing informationMitigation Resources
Request access to non-public appraisal and financing records, such as committee minutes, approval notes, records explaining changes in financing terms, or records showing why appraisal findings or material terms were withheld, so incomplete or inconsistent disclosure can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed appraisal and financing records at an early stage; identify omitted material terms, missing appraisal documents, unexplained changes, or gaps between versions, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsSubmit formal complaints or protected reports through audit, committee, or other oversight channels where appraisal or financing disclosures are materially incomplete, inconsistent, or restricted in ways that prevent scrutiny; use confidentiality and source-protection measures where retaliation risk is material.
Grievance, complaints, and protected reportingFailure Cases
Phase 3 6 risks during the Planning & Design phase
-
Phase 3: Planning & Design
Design and technical specifications tailored to preferred bidders
Design requirements and technical specifications are drafted to advantage specific suppliers or technologies, reducing competition and increasing cost and lock-in.
Red Flags & Indicators
- Technical specifications name specific brands, standards, materials, or technologies without a clear technical reason, and equivalent alternatives are restricted.
- Qualification and experience requirements are higher than necessary for the contract, limiting the number of capable bidders.
- Specifications are changed after contact with suppliers, without a clear written reason or formal approval.
- Tender documents include data, drawings, or performance requirements that closely match the products or materials of one supplier.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to follow brand or bidder specific requirement; higher bid costs; and reputational exposure if favoritism and restrictive specifications are identified.
Decision Point
Before bid/no‑bid decision, request technical clarification on the tender and design specifications, documenting the reasoning provided by the authorities.
Mitigation Actions
• Document technical and design specifications that appear to favour a preferred supplier or technology, including brand-specific or proprietary requirements without functional justification and clear equivalency
• Maintain an auditable record of technical inputs, meetings, and the rationale for decisions to bid or not bid, when technical or design specifications appear biased
• Use internal compliance escalation processes and whistleblower channels, where available, to flag cases in which bidding proposals are repeatedly prepared in response to tailored specific supplier or technology specification
• Request that authorities publish a clear justification for restrictive technical and design specifications, when this information is not publicly available
• Use formal administrative mechanisms to challenge restrictive technical and design specifications
• Avoid participating in bids where specifications are unlawfully restrictive, undisclosed, or designed to pre-select a vendor (including through late changes in specifications)Mitigation Resources
Require conflict-of-interest declarations and documented conflict management for staff, advisers, and technical contributors involved in specification drafting or design decisions; exclude conflicted parties from the decision process until conflicts are resolved and documented.
Conflict-of-interest management and ethics controlsReview publicly disclosed design and tender records, including specifications, qualification requirements, lotting decisions, and late design changes; identify restrictive requirements, missing functional justification, absent equivalency language, or unexplained revisions early.
Transparency and data disclosure standardsFailure Cases
Stakeholder Exposure
Exposure includes inflated capex and O&M; increased performance risk due to restrictive bidding conditions; higher challenge and delay risk during the tender process; and reputational risk from perceived bid manipulation.
Decision Point
At design-readiness/procurement gateway, verify if technical and design specifications restrict competition.
Mitigation Actions
• Require documented justification for key technical and design requirements, standards, and packaging in tender documents
• Assess whether technical and design requirements unduly restrict competition or limit equivalency
• Condition engagement on the disclosure of specifications, evaluation criteria, and supporting rationale, including timely notice and justification of any material change
• Trigger an independent technical and procurement review when specifications or late changes appear to favour a single supplier without documented need or supporting evidence
• Pause approvals, commitments, or funding until findings are adequately addressed and documentedMitigation Resources
Condition approval on a documented procurement approach, disclosure of specifications and evaluation criteria where lawful and available, and tender launch controls that challenge restrictive specifications, unjustified packaging, constrained equivalency, or late changes before tender launch.
Procurement governance and planningAppoint an independent technical adviser to test whether key technical requirements, standards, packaging, and late design changes are justified, proportionate, and not tailored to a single supplier.
Independent technical due diligence and monitoringFailure Cases
Stakeholder Exposure
Exposure includes reduced competition and higher costs; lock-in to specific suppliers or technologies; increased risk of bid challenges and legal disputes; and loss of public trust in bidding outcomes.
Decision Point
Before approving final technical and design specifications, lotting/packaging, and qualification criteria, verify that competitive conditions are ensured.
Mitigation Actions
• Require written justification for key technical and design specifications, interfaces, and packaging provisions
• Ensure that, where brands or standards are referenced in tender provisions, clear “or equivalent” criteria are included, together with justification for the restrictive provisions
• Adopt performance- or outcome-based requirements in tender specifications, where possible
• Publish draft specifications and qualification criteria for comment, where feasible, and record and respond to stakeholder inputs
• Maintain an auditable change log (what/why/who/when), with documented approvals, particularly for late specification changes
• Apply independent technical peer review to high-risk or potentially restrictive requirements
• Revise or remove constraints that lack evidence, proportionality, or a documented functional needMitigation Resources
Set the procurement approach, market-engagement rules, and tender launch controls for design and tender requirements; prevent restrictive specifications, unjustified packaging, constrained equivalency, and late design changes before tender launch.
Procurement governance and planningAppoint an independent technical or procurement adviser to review the justification for restrictive design and tender requirements; require peer review before approving high-risk requirements that lack a documented functional need.
Independent technical due diligence and monitoringPublish and maintain public access to design and tender records, including draft specifications where lawful, qualification criteria, packaging decisions, change logs, and reasons for late or material changes, with only lawful redactions.
Transparency and data disclosure standardsFailure Cases
Stakeholder Exposure
Exposure includes reduced transparency and value-for-money in tender processes; higher costs, potentially affecting tariffs and service delivery; limited ability to challenge technical criteria; and risk of retaliation when raising concerns.
Decision Point
At the time of pipeline publication or, where this is not available, during site mobilisation, submit access to information to request technical and design specifications in order to verify that competitive conditions are maintained. Decide whether to (a) escalate through oversight channels to raise restrictive criteria and request justification, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Track relevant tender processes and use access to information to request disclosure of technical and design specifications, lotting/packaging rationale, and market-engagement records
• Identify and flag tender processes that rely on single-supplier provision, constrained equivalency provision, brand/proprietary references or disproportionate qualification criteria lacking functional justification
• Engage oversight bodies to report biased technical and design specifications (use safe, confidential reporting and anonymisation where retaliation risk is material)Mitigation Resources
Screen published design and tender records, market-engagement records, and complaint signals for red flags such as brand references, single-supplier indicators, disproportionate qualification criteria, unjustified lotting, or late specification changes; file procurement complaints or oversight referrals where requirements favour a specific supplier without documented functional justification.
Procurement red-flag detection, analytics, and escalationReview publicly disclosed design and tender records at an early stage; identify missing functional justification, restrictive requirements, unjustified lotting, constrained equivalency, or unexplained late changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
-
Phase 3: Planning & Design
Design imprecision (overdesign or incomplete specifications), gold plating, and scope inflation
Scope and design are left incomplete to allow for later adjustments or expanded beyond functional requirements to increase contract value and extract rents, while more cost-effective or phased alternatives are disregarded.
Red Flags & Indicators
- Design specifications are incomplete or unclear, allowing the scope, quantities, materials, or costs to be changed later without proper control.
- Capacity, performance, or design standards are higher than needed for expected demand and service requirements, without clear justification.
- Design revisions add new work or higher-cost features without a clear reason or an updated cost-benefit assessment.
- Alternative design options are not properly assessed, and lower-cost options are rejected without supporting evidence.
- Quantities, unit rates, or contingency amounts are higher than comparable benchmarks without explanation, increasing the estimated project cost.
- Affordability, user charges, or other financial impacts are not updated when the design scope expands or higher-cost features are approved.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to add premium features beyond need; inflated designs; higher cost and schedule risk and later claims; and reputational risk if intentional design imprecision, scope inflation and 'gold-plated' projects are identified.
Decision Point
Before endorsing or proposing premium scope or design specification or change, request documented rationale and approvals.
Mitigation Actions
• Request documented justification and approvals for design and scope decisions
• Retain evidence, benchmarks, and cost-benefit or alternative/phasing analysis
• Document scope, design and standard assumptions and cost implications for any change
• Require internal approval for material scope/design changes
• Do not submit or accept scope increases without a clear service need and documented decision trail
• Seek independent technical and value-for-money review when scope expands materially beyond demand/service requirements and lower-cost alternatives are dismissed without evidenceMitigation Resources
Evaluate the justification for scope changes, standards, and alternatives; challenge proposals that exceed functional need or dismiss lower-cost or phased options without evidence.
Appraisal and cost-estimate assuranceIdentify corruption risks in scope changes and alternatives analysis; assign internal responsibilities, define follow-up actions, and track red flags linked to scope inflation, overdesign, or unsupported design changes.
Project integrity planning and action trackingGood Practices
Stakeholder Exposure
Exposure includes inflated capex and reduced returns; increased affordability and demand risks; higher risks of delays, claims, and renegotiation; and higher reputational risks.
Decision Point
At the design-freeze or updated budget milestone, request reasoning for project scope and design.
Mitigation Actions
• Require re-appraisal in case of scope and design material changes
• Condition continued engagement on documented service need, alternative/phasing review, and affordability impacts
• Commission an independent cost estimate for major scope, design and standard changes (quantities, unit rates, contingencies) and record the conditions for continued support
• Include covenants on disclosure and approval requirements for material design changes and change orders/variations
• Include suspension/exit rights if scope and design expands without supporting evidenceMitigation Resources
Evaluate the case for scope expansion; challenge changes that exceed functional need or sideline lower-cost or phased options before approval.
Appraisal and cost-estimate assuranceAppoint an independent technical adviser to review the case for scope expansion; challenge changes that exceed functional need or displace lower-cost or phased options before approval.
Independent technical due diligence and monitoringGood Practices
Stakeholder Exposure
Exposure includes fiscal waste and affordability pressure; higher lifecycle O&M burden; higher audit and legal challenge risk; and public backlash over overbuilt assets.
Decision Point
Before approval of design or design change, request technical justification and alternative analysis.
Mitigation Actions
• Require updated alternative/phasing analysis and withhold approval when justification is weak or benchmarks are unsupported
• Adopt a formal process to control design and scope changes, with documented service rationale, cost/schedule impacts, affordability implications, and approvals
• Request review for material scope, design and standard changes
• Publish material scope changes and their justification
• Maintain an auditable record of approvals and decisions regarding design and scope changes, with version control and sign-offsMitigation Resources
Evaluate the justification for scope changes, service need, cost implications, and lower-cost or phased alternatives; challenge changes that inflate scope or standards without documented functional need.
Appraisal and cost-estimate assuranceApply stage-gate reviews and documented approval logs to material scope or standards changes; return cases for rework where service need, affordability, or alternatives analysis is weak.
Stage-gate governance and independent assurancePublish and maintain public access to records of significant scope changes, including the justification, alternatives considered, approval records, and reasons for each change.
Transparency and data disclosure standardsGood Practices
Stakeholder Exposure
Exposure includes increased environmental and social impacts; higher costs that divert funds from priority needs; weak alternatives analysis; and risk of retaliation when challenging project scope.
Decision Point
At the time of pipeline publication or, where this is not available, during site mobilisation, submit access to information to request supporting evidence for the project scope and design. Decide whether to (a) challenge project planning (due to incompleteness, overdesign, and over-specification) or to (b) continue monitoring, escalating through formal oversight channels once sufficient evidence has been gathered during project implementation. During project implementation, submit access to information to request clarification of major cost and scope revisions.
Mitigation Actions
• Use access to information to request disclosure of design and planning documents
• Use access to information to request disclosure of design and scope changes, including technical justification, alternative analysis, service needs study, associated costs, and approvals
• Mobilise communities affected by design and scope changes to identify associated land and environmental impacts
• Engage oversight bodies to raise concerns about unsupported scope and design changes (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Request access to non-public records on significant scope changes, such as change justifications, alternatives or phasing analysis, approval records, or records explaining added land, environmental, or affordability impacts, so unjustified scope expansion can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed records of significant scope changes at an early stage; identify missing justifications, omitted lower-cost or phased alternatives, unexplained changes, or gaps in disclosure, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsGood Practices
-
Phase 3: Planning & Design
Bribery and extortion for permits, approvals and safeguards sign‑off
Procurement officials, regulatory bodies and gatekeepers demand bribes to issue approvals (planning, environmental, social, utility, right of way) and to sign-off on safeguards.
Red Flags & Indicators
- Requests or indirect pressure are made for gifts, facilitation payments, or the use of intermediaries to speed up approvals or avoid negative findings.
- Permit or inspection procedures involve repeated delays, changing requirements, or unexplained refusals that do not follow the standard process.
- Some applicants receive faster or more favourable treatment without clear and consistent criteria.
- Permit conditions or safeguard requirements are changed or applied in ways that weaken obligations or create room for discretionary decisions.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to pay via intermediaries; schedule and cost escalation; and increased reputational and debarment risk if such conduct becomes public.
Decision Point
When permit or safeguard approvals stall or solicitation signals arise, refuse any improper payments and escalate through internal compliance channels.
Mitigation Actions
• Implement a written anti-bribery policy
• Adopt a zero-tolerance policy regarding facilitation payments
• Adequate records of all engagements related to obtaining permits, approvals, and safeguards, including communications and meetings with officials, intermediaries, private partners, company employees, requests, and decisions
• Use formal channels to submit permits and safeguard requests
• Whistleblower policy for reporting solicitation or extortion
• Consider using judicial courts to obtain injunctions imposing the issuance of required approvals and sign-offsMitigation Resources
Apply anti-bribery controls to permit submissions and safeguard sign-off; log official contacts, prohibit facilitation payments, and escalate and pause where requests for unofficial payments, gifts, or favours arise.
Anti-bribery management and controlsFailure Cases
Stakeholder Exposure
Exposure includes permit delays that stall progress; compliance risks spreading through contractors; cost escalation and claims; and risk of pause or suspension if integrity concerns persist.
Decision Point
At permitting milestones, decide whether to continue or pause disbursements, proceeding only when permits are verified or incidents are reported through appropriate channels.
Mitigation Actions
• Require disclosure of complete permitting processes, files, and interaction logs
• Treat credible solicitation and extortion concerns as a disbursement risk
• Include covenants requiring anti-bribery controls for permitting and inspections, the use of formal channels, and prompt incident reporting
• Provide suspension and exit rights in cases of unresolved or unreported incidents
• Request independent review when permitting outcomes show unexplained discretion, repeated delays tied to informal contacts, or weakening of safeguard conditions without written justificationMitigation Resources
Condition support on anti-bribery controls for permit and safeguard approvals; require use of formal channels, written logs of contacts with permitting officials, and prompt reporting of bribe, extortion, or facilitation-payment demands.
Anti-bribery management and controlsConduct integrity due diligence on permitting and safeguard approval processes and the parties involved; require complete permit files, interaction logs, and written reasons for delays or weakened conditions, and trigger enhanced review or pause support where solicitation, repeated delays, or unexplained discretion is identified.
Investor integrity due diligence and monitoringFailure Cases
Stakeholder Exposure
Exposure includes a weakened perception of integrity; non-compliant approval processes; increasing liability; audit, investigation, and legal challenge risk; and loss of public trust.
Decision Point
Before issuing permits and approvals, require compliance checks, returning or refusing with documented reasons and audit trail.
Mitigation Actions
• Standardise permit criteria, fees, and timelines
• Publish requirements and reasons for approvals, denials and any deviations from standard process
• Separate assessment, inspection, and approval roles
• Maintain a permit decision register with disclosure logs and an auditable file for each permit
• Refer credible solicitation/extortion concerns to independent oversight bodies for investigation, documenting outcomes and corrective actions
• Ensure confidential channels for whistleblowers and complainants, and enforce non-retaliation measuresMitigation Resources
Set and enforce anti-bribery controls for permit decisions and safeguard sign-off; require contact logs, prohibit facilitation payments, and refer bribery or extortion allegations through formal channels.
Anti-bribery management and controlsSet approval limits, sign-off steps, and separation of duties for permit decisions and safeguard sign-off; ensure no single official assesses, approves, and records the same case.
Approval authority and segregation of dutiesPublish and maintain public access to permit and safeguard records, including criteria, fees, timelines, decisions, reasons for approval or denial, and any deviation from standard process.
Transparency and data disclosure standardsFailure Cases
Stakeholder Exposure
Exposure includes weakened safeguards and approvals; increased community harm; restricted access to permit and safeguard records; limited accountability; and risk of retaliation when reporting bribes.
Decision Point
At the time of pipeline publication or, where it is not available, during site mobilisation, submit access to information to request clarification on permits, approvals and safeguards processes. If access is declined or information is incomplete, decide whether to (a) escalate through oversight channels, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of permits, approvals and safeguards processes, including applicable criteria used, fees, decisions, and reasons for approvals and denials
• Mobilise communities around the importance of full transparency in permits, approvals, and safeguard processes, given their social and environmental impacts
• Mobilise communities to collect and document reports of solicitation, extortion, or coercion linked to permit and safeguard inspections
• Engage oversight bodies to raise concerns about delays in the issuance of permits and safeguards connected to solicitation, extortion and coertion (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Submit protected complaints or reports through independent complaints, ombud, audit, or other oversight channels where bribery, extortion, or coercion affects permit decisions or safeguard sign-off; document evidence and timelines, and use source-protection measures where retaliation risk is material.
Grievance, complaints, and protected reportingRequest access to non-public records on permit decisions and safeguard sign-off, such as fee schedules, decision notes, inspection records, or reasons for delay or denial, so suspected bribery, extortion, or coercion can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyFailure Cases
-
Phase 3: Planning & Design
Bribery for favourable impact assessments
Improper payments are made to secure favourable social or environmental impact assessments, facilitating approval despite material risks.
Red Flags & Indicators
- Assessors or consultants are selected through unclear or non-competitive processes, and possible conflicts of interest or affiliations are not properly disclosed.
- Baseline data, models, or key assumptions are unclear, incomplete, or presented in ways that reduce the apparent scale of important impacts.
- Mitigation and monitoring requirements are weakened, delayed, or left without a clear budget, without sufficient evidence or justification.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to soften or conceal findings; liability for misleading assessments; community conflict over undisclosed, unmitigated impacts; delays and redesign costs; and reputational risk.
Decision Point
Before considering environmental and social impact assessments for design and permit decisions, assess the independence of the process and the strength of the supporting evidence.
Mitigation Actions
• Maintain an auditable record of environmental and social assessments, baseline data, models, and assumptions
• Adopt an anti-bribery policy to prohibit any payments, gifts, or incentives linked to “favourable” findings
• Require conflict-of-interest declarations for environmental and social consultants and assessors, documenting the selection process
• Separate impact assessment work from engagement with officials related to approvals and from any lobbying activities
• Adopt a lobbying policy that sets clear limits on gifts and hospitality and applies to agents and intermediaries
• Use internal compliance escalation processes and whistleblower channels, where available, to report any pressure to alter findings or omit impacts
• Pause engagement and re-scope where integrity or data quality seems compromisedMitigation Resources
Apply anti-bribery controls to the E&S assessment process; prohibit payments, gifts, or incentives linked to favourable findings, keep a record of important interactions with approving authorities relevant to the assessment or approval process, and escalate any request to alter, delay, or omit findings.
Anti-bribery management and controlsRequire conflict-of-interest declarations and documented conflict management for assessors, consultants, and relevant staff involved in the E&S assessment process; exclude conflicted parties until conflicts are resolved and recorded, and record any prior role in approval or lobbying before relying on the assessment findings.
Conflict-of-interest management and ethics controlsStakeholder Exposure
Exposure includes hidden impacts; ESG backlash; a higher risk of stoppages, litigation, and cost escalation; decrease of project value; and reputational risk.
Decision Point
Before signing the term sheet and committing resources, request environmental and social impact results or commission an independent review.
Mitigation Actions
• Commission an independent review of environmental and social impact assessments and mitigation plans for high-value, high-impact projects
• Verify consultant independence, conflicts, data integrity and reproducibility
• Condition financing on disclosure of complete assessment findings, mitigation commitments, budget allocation for monitoring and mitigation plan compliance, and covenants covering mitigation compliance and progress reporting
• Request enhanced due diligence and review assessment when findings or mitigation requirements change materially without evidence or when pressure, conflicts or irregularities are reportedMitigation Resources
Apply anti-bribery controls to impact assessment processes; prohibit payments, gifts, or incentives linked to favourable findings, condition support on formal channels and auditable records, and escalate any request to alter, delay, or omit findings.
Anti-bribery management and controlsAppoint an independent technical adviser to review impact assessments, test key assumptions, verify consultant independence, and challenge findings or mitigation plans that lack evidential support.
Independent technical due diligence and monitoringRequire conflict-of-interest declarations and documented conflict management for advisers and reviewers involved in impact assessments; exclude conflicted parties until conflicts are resolved and recorded, and record gifts, financial interests, and any prior role in project approval or lobbying before relying on the assessment findings.
Conflict-of-interest management and ethics controlsStakeholder Exposure
Exposure includes approvals based on biased environmental and social impact assessments; a higher risk of legal challenges and project stoppages; community conflict over undisclosed, unmitigated impacts; and loss of trust in safeguards.
Decision Point
Before approving environmental and social impact assessments, verify the credibility of the findings and the team responsible for preparing the analysis, and return them for correction and further verification if the findings are not reliable and based on evidence.
Mitigation Actions
• Apply transparent requirements for environmental and social impact assessments (methods, baselines, quality assurances)
• Require early, meaningful social consultation, recording feedback on social and environmental impacts
• Publish environmental and social impact assessments, along with mitigation plans and monitoring commitments as a transparency rule
• Publish project information based on recognised infrastructure data standards such as the OC4IDS
• Ensure consultant independence and manage conflicts (selection, declarations, recusals)
• Maintain a record of approvals and decisions issued during the preparation of environmental and social impact assessments, along with an evidence file containing reproducible data and models where applicable
• Refer credible allegations of bribery or manipulation to independent oversight bodies for investigation, documenting outcomes and corrective actions
• Pause permitting decisions pending review of challenged assessments, documenting outcomes and corrective actions
• Ensure confidential channels for whistleblowers and complainants, and enforce non-retaliation measures
• Commission independent review when assessments are weak or contestedMitigation Resources
Set and enforce anti-bribery controls for impact assessments; prohibit unofficial payments, gifts, or incentives linked to assessment findings, keep a record of important interactions with applicants and assessors relevant to the assessment or approval process, and refer credible bribery allegations through formal channels.
Anti-bribery management and controlsRequire conflict-of-interest declarations and documented conflict management for assessors, consultants, reviewers, and approving officials involved in impact assessments; exclude conflicted parties until conflicts are resolved and recorded, and record gifts, financial interests, and any prior role in approval or lobbying before review or approval.
Conflict-of-interest management and ethics controlsPublish and maintain public access to impact assessment records, including key findings, consultant declarations, mitigation and monitoring commitments, review comments, and reasons for approval, with only lawful redactions.
Transparency and data disclosure standardsStakeholder Exposure
Exposure includes biased environmental and social impact findings; restricted access to assessment data; limited ability to assess and test mitigation measures; unmitigated community harm; conflict over undisclosed impacts; and risk of retaliation against communities.
Decision Point
At the time of pipeline publication or, where it is not available, during site mobilisation, submit access to information to request clarification on environmental and social impact assessments. Decide whether to (a) escalate through oversight channels to report material gaps, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of environmental and social impact assessments, including complete baseline data, findings, consultation processes, mitigation plans and commitments, and monitoring requirements and enforcement over time
• Mobilise communities around the importance of full transparency in environmental and social impact processes, and the need to ensure 'Free, Prior and Informed Consent'
• Collect community evidence on actual impacts and on the types of consultation and engagement processes conducted
• Engage oversight bodies to raise concerns about manipulated assessments, implausible baselines and relevant omissions (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Compare disclosed impact assessment findings and mitigation commitments with observed impacts, consultation records, and community evidence; document gaps between the published assessment and on-the-ground conditions, and escalate unexplained discrepancies through oversight channels.
Independent monitoring, assurance, and social accountabilityRequest access to non-public impact assessment records, such as baseline studies, reviewer comments, or records explaining changes to findings or mitigation measures, so suspected manipulation, omitted impacts, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed impact assessment records at an early stage; identify omitted impacts, weak mitigation commitments, unexplained changes, or gaps in disclosure, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standards -
Phase 3: Planning & Design
Collusive practices in subcontracting and conflicts-of-interest involving consultants during project design
Design and supervision functions are compromised when consultants and subcontractors collude or maintain undisclosed relationships that affect quality, cost and integrity.
Red Flags & Indicators
- Design and supervision packages are steered to affiliated firms, or competition is limited without a documented justification.
- Unclear segregation of duties: designers, consultants, reviewers, and approvers overlap, and sign‑offs occur without a documented review process.
- Deliverables show quality deficiencies (missing calculations, inconsistencies, copy‑paste sections) but are accepted without review.
- Conflict-of-interest checks are absent, incomplete, or not updated as subcontractors and consultants change throughout the design phase.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to use affiliated firms; weak review processes; increased rework and defect risk; cost escalation and higher liability risk; and reputational risk.
Decision Point
Before design approval, conduct conflict-of-interest checks on consultants and subcontractors, and ensure the selection process is documented.
Mitigation Actions
• Require and document conflict-of-interest and beneficial ownership declarations for consultants, designers, reviewers, and advisers across the supply chain
• Avoid dual roles and maintain separation of duties for review and sign-off across the supply chain
• Use competitive selection for design and supervision consultants and document the entire process, justifying exceptions, across the supply chain
• Retain evaluation records, approvals, and an auditable contract file, across the supply chain
• Update conflict-of-interest checks when subcontractors or key personnel change
• Adopt a lobbying policy that sets clear limits on gifts and hospitality and applies to agents and intermediaries
• Use internal compliance escalation processes and whistleblower channels, where available, to flag any requests for side payments, undisclosed commissions, or favouritism toward firmsMitigation Resources
Apply anti-corruption and disclosure requirements to consultants, subcontractors, agents, and other third parties involved in design or supervision; require disclosure of beneficial ownership, subcontracting arrangements, and any changes in key personnel or subcontractors.
Supplier and subcontractor integrity controlsRequire conflict-of-interest declarations and documented conflict management for personnel involved in consultant selection, subcontracting, design review, and sign-off; exclude conflicted parties until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controlsFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes conflicted supervision; weakened quality assurance; a higher risk of defects and safety incidents; increased delays and claims; reduced project value; and ESG and reputational risk.
Decision Point
At the design delivery or milestone payment stage, require independent review of conflict-of-interest declarations and subcontract awards.
Mitigation Actions
• Require disclosure of consultants’ and subcontractors’ roles, fees, beneficial ownership (where feasible), and conflicts-of-interests declarations
• Apply enhanced due diligence for advisers and affiliated firms involved in high-value, high-impact projects
• Condition engagement on documented selection and award rationale for consultants and subcontractors, and on quality-assured deliverable
• Require independent technical review when conflicts or weak segregation of duties are identified
• Include covenants for ongoing conflict disclosure, audit and information rights, and remediation
• Retain suspension/exit rights if undisclosed affiliations, steering toward firms, or quality failures persistMitigation Resources
Conduct integrity due diligence on consultants, subcontractors, advisers, and affiliated firms involved in design or supervision; require disclosure of roles, fees, conflicts, and beneficial ownership where feasible, use issue tracking and enhanced review where red flags arise, and retain audit, remediation, and suspension or exit rights until issues are resolved.
Investor integrity due diligence and monitoringScreen sponsors, advisers, consultants, subcontractors, and counterparties involved in consultant selection and subcontracting; verify beneficial ownership, related-party links, PEP exposure, and sanctions risks, and escalate concerns or withhold support where unresolved red flags remain.
Counterparty integrity screening and due diligenceFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes undermined quality and competition; cost overruns and poor performance; higher risks of safety failures and legal liability; and loss of public trust.
Decision Point
Before approving design teams and subcontractors, verify that conflict-of-interest checks are in place and document the outcomes.
Mitigation Actions
• Select consultants through transparent processes with documented evaluation
• Require conflict-of-interest declarations, beneficial ownership disclosure where feasible, and recusals for conflicted reviewers
• Publish consultants’ contracts and key deliverables
• Separate design and supervision advisory roles from tender evaluation and approval roles
• Maintain an auditable consultant file (terms of reference, scoring, approvals, change orders)
• Update conflict-of-interest checks when teams and subcontractors change
• Request an independent review of design and supervision contracts and appointments when poor performance and cost overruns are not addressed
• Refer credible conflict and collusion concerns to independent oversight bodies for investigation, documenting outcomes and corrective actionsMitigation Resources
Require and document conflict-of-interest declarations, recusals, and conflict reviews for officials and advisers involved in consultant selection, subcontracting decisions, design review, and approval; exclude conflicted individuals until conflicts are assessed, resolved, and recorded.
Conflict-of-interest management and ethics controlsRequire consultants, subcontractors, and affiliated firms to disclose beneficial ownership where feasible, related-party links, and relevant commercial relationships during design appointments and subcontracting; screen these disclosures and escalate unresolved red flags through the competent authority.
Counterparty integrity screening and due diligencePublish and maintain public access to consultant selection records, contracts, key design deliverables, change orders, and relevant conflict-management and ownership-disclosure records, with only lawful redactions.
Transparency and data disclosure standardsFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes opaque consultant and subcontractor ties; reduced accountability around design quality; higher risk of safety and quality failures affecting communities; blurred responsibility; and increased risk of retaliation against communities when collusion is reported
Decision Point
At the time of pipeline publication or, where it is not available, during site mobilisation, submit access to information to request clarification on design and supervision scope of work and contracts. Decide whether to (a) escalate through oversight channels to report information gaps, or (b) monitor while safely gathering evidence on potential conflict/collusion.
Mitigation Actions
• Use access to information to request disclosure of consultants’ contracts related to design and supervision functions, key deliverables, and conflict declarations
• Use access to information to request disclosure of time and cost overruns associated with design and supervision contracts
• Collect community evidence on potential conflicts in the appointment of consultants, such as revolving-door indicators and favouritism toward affiliated and connected firms
• Engage oversight bodies to raise concerns about opaque consultant appointments, non-competitive awards, material design scope changes and overruns in design and supervision contracts (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Request access to non-public decision records on consultant selection, subcontracting, conflict declarations, consultant deliverables, and material design changes, so opaque appointments, undeclared affiliations, unexplained design changes, or undisclosed payments can be examined and raised through oversight, complaint, or referral channels.
Access-to-information and demand-side transparencyReview publicly disclosed consultant selection records, contracts, key design deliverables, change orders, and conflict declarations; identify opaque appointments, non-competitive awards, unexplained design changes, or gaps in disclosure, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
Good Practices
-
Phase 3: Planning & Design
Insufficient disclosure of designs, assumptions, and the rationale for changes
Limited transparency on designs, key assumptions and rational for changes reduces accountability and enables discretionary decisions that favour narrow interests.
Red Flags & Indicators
- The design basis, key assumptions, and cost calculations are missing, submitted late, or lack clear technical support and version records.
- Major design changes are approved without a complete change log, clear justification, or assessment of cost, risk, and safeguard impacts.
- Stakeholder feedback is not properly recorded, addressed, or linked to design decisions.
- Scope, cost, and safeguard commitments are spread across different documents, making it difficult to understand the full set of obligations.
- Information is released inconsistently or access is restricted, preventing timely and meaningful review.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes increased bid uncertainty and design change risk; a higher risk of disputes and claims; reputational risk from perceived secrecy; and rising transaction costs.
Decision Point
Before design approval, require procuring entities to publish the complete design basis and the change log from the design review process.
Mitigation Actions
• Maintain a complete design package (key assumptions, standards, baseline quantities/cost drivers) with version control
• Implement a formal system to control material design changes, documenting the rationale of the design change, costs involved, schedule, risk, safeguard impacts and approvals
• Do not implement design changes until the change record is complete and justified
• Record stakeholder inputs relevant to design (issues raised, responses, decisions) and keep a consolidated register linking scope, cost, and safeguard commitments to design versions
• Use internal compliance escalation processes and whistleblower channels, where available, to flag unsubstantiated design changesMitigation Resources
Maintain internal oversight of the company’s design disclosures and change records; require complete and accurate disclosure of key assumptions, standards, baseline quantities, cost drivers, design changes, and material updates, and track corrective action where control failures are identified.
Risk-based internal audit planningUse the company’s compliance process to review and escalate requests to omit, delay, or restrict key design information without documented justification; require documented rationale and compliance or legal sign-off before design changes, submissions, or releases proceed.
Compliance management systemFailure Cases
Stakeholder Exposure
Exposure includes hidden design changes; a higher risk of inflated capex and misallocated risk; governance and ESG risks; and delays until independent review is obtained.
Decision Point
Before committing resources, require full disclosure of designs, key assumptions and rational for changes.
Mitigation Actions
• Condition funding on disclosure of the design basis package (assumptions, standards, baseline quantities and cost drivers) with version history and a consolidated obligations register
• Require formal change control for material design changes (rationale, cost, schedule, risk, safeguard impacts, approvals) and timely notice of revision, treating missing change logs as a no-go condition
• Commission independent technical review to verify key assumptions, reproducibility of calculations and models where applicable, and completeness of the change record
• Retain suspension/exit rights if disclosure remains incompleteMitigation Resources
Conduct integrity due diligence on design disclosure and change-control processes; require disclosure of the design basis package, key assumptions, baseline quantities, cost drivers, version history, and material change records through financing conditions, and retain audit, suspension, or exit rights where disclosure remains incomplete or inconsistent.
Investor integrity due diligence and monitoringCommission an independent technical adviser to test key assumptions, review design outputs, and verify the completeness of version history, change records, and supporting calculations before continued funding or milestone approval.
Independent technical due diligence and monitoringFailure Cases
Stakeholder Exposure
Exposure includes higher risks of scope and cost increase; increased auditand legal challenge risk; poor accountability for decisions; and loss of public trust.
Decision Point
Before approval of material design changes, request a complete record of the design basis and change log .
Mitigation Actions
• Publish the design basis package, including key assumptions, standards, baseline quantities and cost drivers, and maintain a disclosure register with version history and release dates
• Implement a formal change log for material design and cost-base changes (rationale, cost, schedule, risk, safeguard impacts, approvals)
• Do not approve design changes without complete documentation
• Record stakeholder design inputs and responses and keep a consolidated register linking scope, cost, and safeguard commitments to each design version
• Commission independent design review when information is withheld or inconsistencies persist
• Publish project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Publish and maintain public access to design basis packages, including key assumptions, standards, baseline quantities, cost drivers, version history, release dates, and reasons for material changes, with only lawful redactions.
Transparency and data disclosure standardsSet clear approval limits, sign-off steps, and separation of duties for design basis packages, material design changes, and release approvals; ensure no single official initiates, approves, and records the same action.
Approval authority and segregation of dutiesMaintain and use digital publication or procurement logs for design basis packages and release approvals, including version history, notices, addenda, submissions, awards, and access changes, through an auditable trail.
Digital procurement, traceability, and audit logsFailure Cases
Stakeholder Exposure
Exposure includes missing design basis and change rational; constrained scrutiny of cost and safeguard impacts; limited ability to contest design changes; higher risk of unmitigated community harm; and risk of retaliation.
Decision Point
At the time of pipeline publication or, where it is not available, during site mobilisation, submit access to information to request clarification on design process and associated documentation. Decide whether to (a) escalate through oversight channels to report information gaps, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of the design basis package, key assumptions, and the change log for material design revisions, including track version history and release dates
• Use access to information to request disclosure of needs analysis, lifecycle costs, alternative analysis, safeguard commitments and cost/time overruns associated with design revisions
• Mobilise communities around the importance of full transparency in design processes and associated documentation, due to environmental, social and budgetary impact
• Engage oversight bodies to raise concerns about opaque design processes, misalignment between design change and service needs, missing documentation, and unexplained changes in project scope and footprint (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Request access to non-public design records, including design basis documents, change logs, version history, release approvals, and records explaining material design revisions, so missing rationales, withheld documents, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed design records, including design basis documents, key assumptions, change logs, version history, and release approvals; identify disclosure gaps, hidden changes, or unexplained decisions, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsCompare disclosed design records with actual design revisions, service needs, lifecycle costs, and safeguard commitments; document unexplained gaps and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilityFailure Cases
Phase 4 8 risks during the Tender Management phase
-
Phase 4: Tender Management
Restricted competition through non-transparent tendering
Tender process is conducted with limited advertising, unjustified use of restricted procedures, including related to qualification and pre-qualification, or short timelines, reducing competition and increasing discretion in award decisions.
Red Flags & Indicators
- Tender opportunities are not widely advertised, or are published through channels that limit practical access.
- Restricted procedures, emergency contracting, shortlisting, or direct awards are used without a clear and documented justification.
- Tender timelines are compressed in ways that hinder preparation, clarification, and competitive participation.
- Qualification or eligibility requirements are higher than necessary for the project, including unnecessary tender registration documents or excessive experience and qualification requirements.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes limited access to tender opportunities; rushed timelines and incomplete information; higher bid costs with low win odds; pressure to rely on intermediaries/insiders; and higher compliance and reputational risk.
Decision Point
Before bid/no‑bid decision, verify whether tender has been properly advertised and conditions are competitive.
Mitigation Actions
• Bid only through properly advertised procedures and formal channels
• Avoid exclusive access arrangements or off-process commitments
• Document access and timeline constraints (publication channel, addenda timing, eligibility filters) and submit formal clarification requests when tender criteria and requirements seem inconsistent, excessive and hindering competition
• Decline participating if unfair conditions are not corrected
• Declare and manage conflicts and intermediaries (roles, fees, beneficial ownership where feasible)
• Use formal tender complaints mechanisms when requirements appear discriminatory or unjustified, retaining an auditable communications log
• Recommend that procuring entities use independent monitors and observers in high-risk tendersMitigation Resources
Review standard procurement documents and key tender records, including notices, eligibility rules, timelines, addenda, and available shortlist or direct-award records; check whether criteria remain fixed, review available bid-opening or evaluation records, and support a defensible complaint or appeal where needed.
Tendering, evaluation, and complaints integrityReview digital procurement or publication logs for key tender records to trace notices, addenda, submissions, awards, and access changes through the available audit trail.
Digital procurement, traceability, and audit logsCommit to independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes overpriced contract from restricted competition; higher legal challenge and re‑tender risk; higher risk of delays and claims arising from bidding disputes; ESG and integrity risks related to the sponsor and the tender process; and reduced project value if execution begins under a disputed award.
Decision Point
At the tender or financing milestone, assess the level of competition; condition funding on the implementation of open and competitive procurement safeguards, or pause disbursement until the tender process is reopened or strengthened.
Mitigation Actions
• Require evidence of open, competitive bidding (advertising, adequate timelines, proportionate eligibility) and documented justification for any restricted procedure
• Treat documentation and evidence gaps as a no-go
• Condition financing on disclosure of tender documents, including evaluation criteria, contracts, addenda history, amendments, and award rationale
• Require an accessible complaints mechanism, supported by a documented system for handling and reporting complaints
• Commission an independent review when competition indicators are weak (single/low bidder count, compressed timelines, restrictive criteria, late addenda), pausing disbursement pending outcome
• Request that procuring entities use independent monitors and observers for high-risk tendersMitigation Resources
Require, through financing conditions, access to standard tender documents and key tender records, including notices, eligibility rules, timelines, addenda, and any shortlist or direct-award justification; verify that criteria remain fixed, evaluation steps are documented, and complaints are handled on record.
Tendering, evaluation, and complaints integrityRequire a defined procurement approach, market-engagement rules, and pre-launch controls for the tender process; review whether tender design, eligibility rules, timelines, and any restricted procedure are likely to limit competition before launch.
Procurement governance and planningConduct integrity due diligence and issue tracking on key tender records, competition indicators, addenda history, and any shortlist or direct-award justification; set conditions and enhanced review triggers, and pause support where restricted-competition risks remain unresolved.
Investor integrity due diligence and monitoringUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the integrity of the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes higher prices and weaker quality from limited competition; increased risk of complaints, litigation, and re-tendering; heightened audit and integrity scrutiny of restricted procedures; loss of public trust; and higher risk of poor delivery performance.
Decision Point
When determining the tender process, proceed with open advertising and adequate timelines, or approve a restricted procedure only where justified, with documented rationale and appropriate oversight.
Mitigation Actions
• Publish the complete set of tender process documents, including the tender plan, eligibility criteria, evaluation methodology, timelines, and any addenda
• Publish the rationale and justification for any restrictions in the selection of the bidding method and the shortlisting process
• Ensure mechanisms to protect bid integrity (secure submission, controlled access, formal bid opening minutes)
• Maintain a complete tender file and auditable evaluation record
• Use independent monitors and observers for high-risk tenders
• Implement a timely complaints mechanism, documenting responses and corrective actions transparently
• Publish project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Apply standard procurement documents and maintain formal tender records, including notices, eligibility rules, timelines, shortlist decisions, direct-award justifications, and addenda; keep criteria fixed, document bid opening and evaluation, and record complaints handling.
Tendering, evaluation, and complaints integritySet the procurement approach, market-engagement rules, and tender launch controls; prevent unjustified restrictions, restrictive criteria, compressed timelines, or weak competition controls before launch.
Procurement governance and planningPublish and maintain public access to key tender records, including notices, eligibility rules, timelines, shortlist decisions, direct-award justifications, and addenda, so bidders and oversight bodies can identify missing reasons, hidden changes, and unexplained decisions early.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the integrity of the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes opaque tender conditions; limited scrutiny and accountability; higher project costs reducing service value; elevated risk of low-quality delivery; restricted access to tender records and rationale; and increased risk of retaliation when challenging the process.
Decision Point
When the tender notice is published, submit access to information to request complete documentation and clarification on the tender method. Decide whether to (a) escalate through oversight channels to report information gaps and lack of justification for limited restrictive method, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of entire tender process documentation, including justification for restricted procedures, shortlists, or direct awards
• Monitor competition indicators (bidder count, compressed timelines, restrictive criteria, frequent late addenda) to identify unexplained exclusions or repeated awards to the same firms
• Mobilise communities around the importance of full transparency in tender processes and equal conditions for all bidders, given the impact on competition and fiscal outcomes
• Engage oversight bodies to raise concerns about opaque tender process and method (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for independent monitors and observers for high-risk tenders
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Screen key tender records and complaints for red flags, such as restricted procedures, short timelines, restrictive eligibility rules, unexplained shortlist decisions, direct awards, repeated awards to the same firms, or late addenda; raise suspected irregularities through oversight or complaints channels.
Procurement red-flag detection, analytics, and escalationReview publicly disclosed tender records at an early stage, including notices, eligibility rules, timelines, addenda, shortlist decisions, and direct-award justifications; identify disclosure gaps, missing justifications, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsRequest access to non-public decision records, such as justifications for restricted procedures, shortlist decisions, direct-award approvals, or internal evaluation memoranda, so hidden decisions, missing reasons, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Good Practices
-
Phase 4: Tender Management
Bid rigging and collusion among bidders
Bidders coordinate prices, rotate winners or share markets to inflate contract values and undermine competition.
Red Flags & Indicators
- Bid prices show unusual similarities, such as identical rates, consistent price differences, or the same ranking pattern across bids.
- The same firms repeatedly win contracts in rotation, or bidders divide contracts by location or package.
- Bidders appear connected through shared subcontractors, unexplained joint bids, or the same addresses, contact details, or representatives.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes unfair access unless firms “play along”; pressure to coordinate pricing; risk of debarment, anti-competitive conduct, and criminal practices; higher bid costs and reputational harm; and delays if collusion unravels mid-project.
Decision Point
During the bid proposal process, compete independently with documented pricing controls, and withdraw if collusion is proposed or credible signals arise.
Mitigation Actions
• Adopt anti-collusion measures for tenders (no coordination with competitors; joint-venture and subcontracting only with documented rationale and approvals)
• Train bid staff on anti-collusion measures
• Maintain a complete bid record, including pricing model inputs, approvals, and a communications log
• Retain evidence that pricing and terms were developed independently
• Use formal tender complaints mechanisms to report credible market-division signals, retaining an auditable communications log
• Use internal compliance escalation processes and whistleblower channels, where available, to report any collusion approach
• Recommend that procuring entities use independent monitors and observers in high-risk tendersMitigation Resources
Require suppliers, consultants, subcontractors, agents, and other third parties involved in the bid process to comply with anti-collusion and anti-corruption requirements; require reporting of suspected collusion, market-sharing, bid rotation, or improper bidder contact.
Supplier and subcontractor integrity controlsSet and test conduct rules, training, and supervisory checks for the bid process, including anti-collusion controls, restrictions on competitor contact, documented approvals for JV or subcontracting arrangements, and bid-record handling requirements.
Codes of conduct and compliance programme effectivenessCommit to independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes inflated contract prices and weaker returns; risk of antitrust investigations; sanctions and debarment contagion through sponsors and contractors; higher risks of delays and claims; and reduced project value if re-tendering occurs.
Decision Point
At the bid evaluation and award milestone, verify whether competition conditions and safeguards are in place, and pause if signs of collusion arise.
Mitigation Actions
• Require the procuring entity to conduct bid-rigging screening and document red flags and responses
• Treat lack of a bid-rigging screening policy and supporting implementation system as a no-go financing condition
• Condition financing on disclosure of bid submission and award data, including bidder counts, disqualifications, pricing summaries, and how competition issues and challenges were handled
• Commission an independent tender review when pricing patterns or bidder behaviour suggests coordination (rotation, clustering, identical rates), pausing disbursement pending outcomes
• Request that procuring entities use independent monitors and observers for high-risk tendersMitigation Resources
Conduct integrity due diligence and issue tracking on tender and bid records, including bidder counts, disqualifications, bid-opening records, pricing summaries, and collusion indicators; set financing conditions, enhanced review triggers, and pause support where bid-rigging risks remain unresolved.
Investor integrity due diligence and monitoringScreen available tender and bid records for collusion red flags, including suspicious bidding patterns, bidder rotation, clustering, identical rates, market contacts, bid-opening anomalies, or other indicators of coordination; escalate concerns for independent procurement or competition review before award or continued support.
Bid-rigging prevention and detectionUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the integrity of the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes fiscal losses and inflated prices; reduced value-for-money; increased risks of complaints, investigations, and legal challenges; tender delays and re-awards; and loss of trust in tender competition.
Decision Point
Before bid award, verify the presence of red flags (identical rates, the same firms winning in rotation, subcontractor sharing); pause the award decision if such indicators are present.
Mitigation Actions
• Apply bid-rigging red-flag screening (pricing patterns, bidder links, rotation indicators), documenting results and decisions
• Publish the complete set of tender process documents, including bid opening, participants information, award information (bidder count, disqualifications, summary prices, rationale, decision, challenges)
• Maintain a complete tender file and auditable evaluation record
• Use independent monitors and observers for high-risk tenders
• Apply integrity measures to reduce coordination opportunities (secure bid submission, formal bid opening minutes, controlled communications, proportionate lotting, and structured debriefs)
• Implement a timely complaints mechanism, documenting responses and corrective actions transparently
• Refer credible cases to competition and independent oversight bodies for investigation, documenting outcomes and corrective actions
• Publish project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Screen tender and bid records for collusion red flags, such as pricing patterns, bidder links, bid-opening anomalies, rotation indicators, and other signs of coordination; document checks and refer credible cases for review before award.
Bid-rigging prevention and detectionApply standard procurement documents and maintain formal tender records for the tender process; keep criteria fixed, retain bid-opening and evaluation records, and document complaints handling.
Tendering, evaluation, and complaints integrityMaintain and use digital procurement or publication logs for the tender process to trace notices, addenda, submissions, awards, and access changes through an auditable trail.
Digital procurement, traceability, and audit logsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the integrity of the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes overpriced contracts; high risk of weaker service outcomes; limited transparency on bid process; reduced ability to contest awards; diversion from priority needs; and risk of retaliation when collusion is reported.
Decision Point
During the tender process, submit access to information to request complete documentation and clarification on the bidding proposals and award criteria. Decide whether to (a) escalate through oversight channels to report information gaps and suspected collusion or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of entire tender process documentation, including bidding proposals, evaluation summaries, bid opening minutes, tender communication rules, addenda history
• Monitor tender and award information for collusion indicators (rotating winners, identical/near-identical pricing, clustering by lots/regions, repeat subcontract patterns)
• Mobilise communities around the importance of full transparency in tender processes given the impact on competition and fiscal outcomes
• Engage oversight and competition bodies to raise concerns about opaque tender process and signs of collusion (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Support formal tender complaints with structured evidence (timeline, bidder patterns, pricing comparisons)
• Advocate for independent monitors and observers for high-risk tenders
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Screen tender and award records for collusion red flags, such as rotating winners, near-identical pricing, bidder links, bid-opening anomalies, repeat subcontracting patterns, or other signs of coordination; document patterns and escalate suspicious cases through oversight or competition channels.
Bid-rigging prevention and detectionRequest access to non-public decision records, such as bid-opening minutes, evaluation summaries, disqualification reasons, communication-rule records, or anomaly-review notes, so hidden decisions, missing reasons, or unexplained award outcomes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed tender and award records at an early stage, including notices, addenda, shortlist information where available, award data, and published justifications; identify disclosure gaps, missing reasons, or unexplained award anomalies, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Good Practices
-
Phase 4: Tender Management
Bribery and kickbacks for favourable evaluation, shortlisting and award decisions
Officials, advisers or intermediaries solicit or receive kickbacks in exchange for favourable evaluations, shortlisting, contract awards or contract terms.
Red Flags & Indicators
- Unofficial contact between evaluators, advisers, intermediaries, and bidders increases during shortlisting or scoring stages.
- Gifts, hospitality, or personal benefits are offered or requested to influence access to evaluators or tender outcomes.
- Agents or consultants have unclear roles, unusually high fees, hidden payment arrangements, or payments linked to winning the tender.
- Scoring sheets, evaluation reports, or award decisions contain inconsistencies, unexplained changes, missing records, or weak technical justification.
- Conflicts of interest involving evaluators or advisers are not fully disclosed, checked, or properly managed.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes solicitation pressure via officials or agents; anti‑bribery, debarment and criminal risk; unfair evaluation outcomes and lost opportunities; higher bid costs (agents, hospitality, “facilitation” attempts); and reputational risk if linked to kickbacks.
Decision Point
During the bid process, use official tender channels, and withdraw if solicitation signals arise.
Mitigation Actions
• Adopt a zero tolerance policy for tender regarding facilitation payments and unmanaged gifts or hospitality
• Adopt a lobbying policy that sets clear limits on gifts and hospitality and applies to agents and intermediaries
• Whistleblower policy for reporting and handling unethical or illegal activities within the organisation
• Require pre-approval and adequate record keeping of all tender interactions with officials, sponsors and intermediaries, meetings, and hospitality exceptions (if any are permitted by policy)
• Document all tender communications and submissions
• Use formal tender clarification channels only
• Require transparent contractual and fee terms from agents, consultants and intermediaries and ban/reject unclear scope, opaque payments and success fees linked to award outcomes
• Use internal compliance escalation processes and whistleblower channels, where available, to report any solicitation, irregular scoring signals, or undue influence attempt
• Recommend that procuring entities use independent monitors and observers in high-risk tendersMitigation Resources
Set and enforce anti-bribery controls for tender interactions linked to evaluation and award decisions; prohibit gifts, kickbacks, facilitation payments, and other inducements, require logged contacts and controls on agents or intermediaries, and escalate solicitation or improper payment risks.
Anti-bribery management and controlsUse a senior reporting or escalation channel to raise suspected bribery, kickbacks, solicitation, or bid interference linked to tender interactions, evaluation, or award decisions quickly and safely.
Rapid escalation and resolution of suspected bribery or unfair business practicesCommit to independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes elevated risks to project bankability due to vulnerabilities in award integrity; potential financing delays or withdrawal if allegations arise; contagion of debarment or sanctions through contractors and agents; reduced returns due to inflated pricing; and reputational risk.
Decision Point
At the bid evaluation and award milestone, verify whether integrity policies are in place, and require independent review of evaluation documents if signs of bribery arise.
Mitigation Actions
• Require the procuring entity to adopt evaluation integrity controls (conflict-of-interest declarations/recusals, secure tender records, documented scoring) and independent review for high-risk awards
• Treat lack of integrity controls as a no-go financing condition
• Treat credible solicitation/bribery concerns as a suspension trigger for investment
• Condition financing on disclosure of award rationale, evaluator/adviser conflict management, and any material communications/addenda
• Include disclosure covenants and verification/audit rights
• Require an accessible complaints mechanism, supported by a documented system for handling and reporting complaints
• Pause disbursement if tender complaints are unresolved or records are incomplete
• Request that procuring entities use independent monitors and observers for high-risk tendersMitigation Resources
Conduct integrity due diligence and issue tracking on evaluation and award decisions, including scoring records, procurement interactions, complaints, and award rationale; set conditions, enhanced-review triggers, and pause support where bribery or kickback risks remain unresolved.
Investor integrity due diligence and monitoringRequire, through financing conditions, standard procurement documents and formal tender records for evaluation and award decisions, including scoring records, conflict management, procurement interactions, complaints, and award rationale; verify that key decisions and complaints are documented and traceable.
Tendering, evaluation, and complaints integrityUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the integrity of the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes overpricing and weak contractor selection; increased risk of audit, investigation, and legal liability; a higher likelihood of bid challenges and re-tendering delays; and loss of public trust in award decisions.
Decision Point
Before bid award, verify application of documented evaluation criteria, pause the award decision if credible kickbacks/bribery concerns are present.
Mitigation Actions
• Apply secure evaluation protocols (controlled access to bids, formal bid opening minutes, locked scoring sheets), alongside segregation of duties for officials involved in evaluation and approval roles, and conflict-of-interest declarations/recusals
• Maintain a complete tender file and auditable evaluation record, documenting the scoring and rationale with evidence
• Publish the complete set of tender process documents, including the award decisions and evaluation summaries
• Use independent monitors and observers for high-risk tenders
• Implement a timely complaints mechanism, documenting responses and corrective actions transparently
• Refer credible solicitation and bribery concerns to independent oversight bodies for investigation, documenting outcomes and corrective actions
• Decide to re-tender when integrity is compromised
• Publish project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Set and enforce anti-bribery controls for evaluation and award decisions; prohibit gifts, kickbacks, facilitation payments, and other inducements, require auditable records of material evaluation-related interactions and secure handling of bids and scoring records, and refer credible bribery or solicitation concerns through formal channels.
Anti-bribery management and controlsRequire conflict-of-interest declarations and documented conflict management for evaluators, advisers, and decision-makers involved in evaluation and award decisions; exclude conflicted parties until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controlsPublish and maintain public access to key evaluation and award records, including evaluation summaries, award decisions, complaints outcomes, and reasons for award, with only lawful redactions.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the integrity of the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes opaque scoring and award criteria; increased safety, quality and impact risks; limited access to evaluation records; reduced accountability for costs and outcomes; and retaliation risk when bribery allegations are reported.
Decision Point
During the tender process, submit access to information to request clarification on the evaluation rationale. Decide whether to (a) escalate through oversight channels to report suspected credible irregularities or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of entire tender process documentation, including scoring rationale and conflicts-of-interest safeguards
• Monitor tender awards and evaluation patterns (repeat winners, disqualifications, score anomalies, disclosure gaps, unexplained award decisions)
• Mobilise communities around the importance of full transparency in tender processes and equal conditions for all bidders, given the impact on competition and fiscal outcomes
• Engage oversight and competition bodies to raise credible solicitation or irregularity concerns (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Support formal tender complaints with structured evidence (timeline, concerns of solicitation or retaliation)
• Advocate for independent monitors and observers for high-risk tenders
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Use protected complaints and grievance channels to report suspected solicitation, bribery, kickbacks, or irregular evaluation and award decisions; document evidence, timelines, case handling, and remedies sought, and protect complainants from retaliation.
Grievance, complaints, and protected reportingScreen evaluation and award records, complaints, and related procurement documents for red flags, such as score anomalies, repeat winners, unexplained disqualifications, conflicted interactions, or other irregular patterns; raise suspected irregularities through oversight or complaints channels.
Procurement red-flag detection, analytics, and escalationReview publicly disclosed evaluation and award records at an early stage, including evaluation summaries, award decisions, and available reasons for award; identify disclosure gaps, missing scoring rationales, or unexplained award decisions, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
-
Phase 4: Tender Management
Leakage of confidential tender information and manipulation of evaluation criteria
Confidential information is leaked and evaluation criteria are adjusted to benefit specific bidders, compromising fairness.
Red Flags & Indicators
- Tender documentation or evaluation criteria change late, with uneven communication or limited time for bidders to respond.
- Clarification meetings or site visits are selective, and access to decision makers is not applied consistently.
- Bid opening records, timestamps, or document control logs show gaps, alterations, or inconsistencies.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes unequal access; unfair competition; wasted bid effort and sunk costs; pressure to seek insider information; higher dispute and bid challenge costs; and reputational risk associated with leaked tender information.
Decision Point
During tender process, use official channels for clarifications, and request re-issue of decision or deadline extension when late changes seem to undermines fair outcomes.
Mitigation Actions
• Restrict internal access to tender information and pricing (need-to-know staff)
• Maintain access logs and secure document handling/version control
• Use formal tender clarification channels only
• Document all tender communications and submissions
• Do not seek or rely on non-public procurement information
• If addenda/criteria change late or access is uneven (selective meetings/site visits), submit a formal request to ensure equal access to information, extend deadlines, or re-issue the decision
• Use internal compliance escalation processes and whistleblower channels, where available, report any offer of confidential information
• Recommend that procuring entities use independent monitors and observers in high-risk tendersMitigation Resources
Maintain auditable digital logs for tender access, clarifications, addenda, evaluation-criteria changes, and confidentiality controls, including access, version, approval, and change history, so unequal disclosure or unexplained changes can be traced and reviewed.
Digital procurement, traceability, and audit logsSubmit documented complaints or protected reports on suspected information leakage, unequal access, or unexplained criteria changes; use safe reporting channels where retaliation risk is material, and track whether the concern receives a formal response.
Grievance, complaints, and protected reportingCommit to independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityStakeholder Exposure
Exposure includes re‑tender and delay risk; inflated prices; reduced project value; higher litigation and suspension risk; ESG and integrity risk if process is compromised; and uncertainty over award decisions.
Decision Point
At the bid evaluation and award milestone, verify whether tender security policies are in place, and require independent review of the tender process if signs of leakage arise.
Mitigation Actions
• Require the procuring entity to adopt tender security and information-access controls (secure submission, controlled access, audit logs)
• Treat lack of tender security controls as a no-go financing condition
• Treat credible leakage concerns as a governance and legal risk, and a suspension trigger for investment
• Condition financing on equal, documented disclosure of clarifications/addenda to all bidders and an auditable record of criteria changes and decision rationale
• Trigger independent integrity review when leakage indicators appear (late uneven addenda, selective access, bid patterns suggesting insider knowledge)
• Require an accessible complaints mechanism, supported by a documented system for handling and reporting complaints
• Pause disbursement if tender complaints are unresolved or records are incomplete
• Request that procuring entities use independent monitors and observers for high-risk tendersMitigation Resources
Require, through financing conditions, auditable digital tender logs for access, clarifications, addenda, and criteria changes, including access history, change history, and approval records, so unequal disclosure, unusual access, or unexplained criteria changes can be traced and reviewed.
Digital procurement, traceability, and audit logsAssess the e-procurement or tender-control environment for secure submission, controlled access, equal bidder access, audit logs, publication steps, and oversight; identify control gaps and require remediation through financing conditions or pause rights where risks remain unresolved.
E-Procurement ecosystem assessment and multi-stakeholder oversightUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the integrity of the process.
Independent monitoring, assurance, and social accountabilityStakeholder Exposure
Exposure includes higher risk of complaints and legal challenge from compromised confidentiality; re‑tendering delays; reduced competition and higher costs; increased audit risk; and loss of public trust in award decisions.
Decision Point
During the tender process, lock evaluation criteria and issue addenda equally. Re-tender if there are signs of leakage of confidential tender information or manipulation of evaluation criteria.
Mitigation Actions
• Apply tender security protocols (secure submission, controlled access to bids and estimates, audit logs) and conduct periodic compliance checks
• Maintain a complete tender file and auditable record, documenting access and all changes to evaluation criteria
• Publish the complete set of tender process documents, including all clarifications/addenda to all bidders simultaneously through formal channels
• Use independent monitors and observers for high-risk tenders
• Implement a timely complaints mechanism, documenting responses and corrective actions transparently
• Investigate suspected leaks and refer credible concerns of favouritism to independent oversight bodies for investigation, documenting outcomes and corrective actions
• Decide to re-tender when equal treatment is compromisedMitigation Resources
Maintain and use auditable procurement or publication logs for tender access and change records, including access logs, clarification history, addenda, criteria changes, and approval history, so unequal disclosure, suspicious access, or unexplained revisions can be traced and reviewed.
Digital procurement, traceability, and audit logsApply standard procurement documents and maintain formal tender records for tender security and criteria changes; keep criteria fixed unless formally revised, retain bid-opening and evaluation records, and document complaints handling.
Tendering, evaluation, and complaints integrityPublish and maintain public access to clarifications, addenda, criteria changes, and reasons for those changes, so unequal disclosure or unexplained revisions can be identified early.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the integrity of the process.
Independent monitoring, assurance, and social accountabilityStakeholder Exposure
Unequal access and favoritism risks; limited access to addenda and bid records; reduced ability to verify equal treatment; higher waste risk; and risk of retaliation when challenging leaks.
Decision Point
During the tender process, submit access to information to request clarification on addenda/criteria changes. Decide whether to (a) escalate through oversight channels to report credible breach of equal treatment or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of entire tender process documentation, including publication of clarification logs, addenda history, and document access controls
• Monitor addenda and late clarifications for unequal timing/access and asymmetric information indicators (selective site visits, uneven Q&A responses, short notice changes)
• Mobilise communities around the importance of full transparency in tender processes and equal conditions for all bidders, given the impact on competition and fiscal outcomes
• Engage oversight and competition bodies when confidential information appears to have been shared or criteria shift without justification (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Support formal tender complaints with structured evidence (documented timelines for access)
• Advocate for independent monitors and observers for high-risk tenders
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Request access to non-public decision records, such as records of criteria changes, selective access decisions, internal decisions on late clarifications or addenda, or records explaining why some bidders received different information, so hidden decisions, missing rationales, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyUse protected complaints and grievance channels to report suspected information leakage, selective access, or unjustified criteria changes; document evidence, timing, case handling, and remedies sought, and protect complainants from retaliation.
Grievance, complaints, and protected reportingReview publicly disclosed tender change records, such as clarification logs, addenda history, published notices of criteria changes, and available explanations for those changes; identify disclosure gaps, missing justifications, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountability -
Phase 4: Tender Management
Undue influence of political agents and intermediaries in the tender process
Political agents (politicians, government bureaucrats) and intermediaries (agents, lobbyists, political connectors) shape tender outcomes through informal influence, opaque commissions and conflicts-of-interest.
Red Flags & Indicators
- Undisclosed contact with political figures or their representatives occurs during the tender process.
- Intermediaries play a central role in gaining access or advancing the tender, but their responsibilities, fees, and services are not clearly documented.
- Success fees or unusual commissions are included in bid prices without clear information on how they are calculated or who receives them.
- Beneficial ownership, related‑party links, or political connections are obscured, including across agents, subcontractors, “dormant partner” within bidder or consortium partners.
- Tender packaging and bundling, lot structure, or eligibility rules align closely with specific networks or political “gatekeepers” without a clear justification.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to use political “connectors” to access decision‑makers; opaque fees; inflated bid costs and price; increased conflict‑of‑interest, ownership and related‑party risk; and reputational risk from perceived influence peddling.
Decision Point
Before instructing intermediaries or agents, conduct conflict-of-interest checks and document results and engagement.
Mitigation Actions
• Conduct enhanced due diligence on agents and intermediaries (beneficial ownership, conflicts-of interest, related-party risks and PEP checks where feasible)
• Adopt a lobbying policy that sets clear limits on gifts and hospitality and applies to agents and intermediaries
• Obtain internal compliance approval before engagement with agents and intermediaries
• Use written contracts with agents and intermediaries, with defined and transparent scope, agreed services and traceable fees
• Ban/reject contractual clauses where success fees paid to agents and intermediaries is linked to “political access” as a deliverable
• Maintain clear records of engagement with intermediaries and public officials (meetings, attendees, topics and commitments) throughout the tender process
• Monitor deliverables and payments against contract terms
• Terminate engagements that deviate from contractual scope or show red flags
• Use internal compliance escalation processes and whistleblower channels, where available, to report any solicitation, “access for fee” offers, or signs of undue influence
• Recommend that procuring entities use independent monitors and observers in high-risk tendersMitigation Resources
Set and enforce anti-bribery controls for intermediary engagement and procurement contacts; prohibit opaque or contingent fees tied to award, access, or approvals, require logged meetings and communications, third-party approvals, fee transparency, and escalation of solicitation, gift, or improper payment risks.
Anti-bribery management and controlsScreen agents, intermediaries, and related counterparties involved in tender engagement; verify beneficial ownership where feasible, PEP exposure, sanctions, and related-party risks, and stop or escalate unresolved red flags.
Counterparty integrity screening and due diligenceCommit to independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes elevated sanctions and anti-bribery and corruption risk; low visibility on commissions to intermediaries; delays to mitigate integrity issues; debarment contagion through contractors and agents; and reputational risk from financing a tainted tender process.
Decision Point
Before bid submission or tender-linked disbursement, verify transparency in the engagement and payment of intermediaries and agents.
Mitigation Actions
• Require full disclosure of all agents, advisers, and commission arrangements (agreements, fees, beneficiaries)
• Conduct enhanced due diligence on third parties (beneficial ownership, conflicts-of interest, related-party risks and PEP checks where feasible)
• Condition financing on a ban on contingent/success fees tied to award, access, and approvals
• Include audit/verification rights and exit rights over agent payments and subcontract flows
• Trigger remediation and pause/suspend support when agents cannot demonstrate legitimate services and transparent fees, or when “access” is marketed as the deliverable
• Request that procuring entities use independent monitors and observers for high-risk tendersMitigation Resources
Conduct integrity due diligence and issue tracking on intermediary arrangements, adviser roles, commission structures, agent payments, and related tender contacts; require full disclosure of services, fees, and beneficiaries, ban contingent or success fees tied to award, access, or approvals, and pause or exit where legitimate services and transparent fees cannot be demonstrated.
Investor integrity due diligence and monitoringScreen agents, advisers, beneficiaries, and related counterparties linked to intermediary arrangements; verify beneficial ownership where feasible, PEP exposure, sanctions, conflicts, and related-party risks, and stop or escalate unresolved red flags.
Counterparty integrity screening and due diligenceUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the integrity of the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes tender capture through informal influence; higher prices from embedded commissions; reduced competition and weaker quality; higher audit and legal exposure for undisclosed intermediaries; and loss of public trust.
Decision Point
During the tender process, allow bidder interaction only through registered, formal channels, and treat bids involving undisclosed intermediaries as non-responsive, disqualifying where permitted.
Mitigation Actions
• Require bidders to disclose all agents, intermediaries, and respective beneficial ownership information
• Treat undisclosed intermediary arrangements as a material breach for disqualification
• Run random and surprise audits of bidder internal communications and consultant invoices during the tender process
• Maintain a complete tender file and auditable record, including communications, meetings, and clarifications exchanged with bidders, agents and intermediaries
• Implement a timely complaints mechanism, documenting responses and corrective actions transparently
• Refer credible allegations of agent bribery or opaque commissions to independent oversight bodies for investigation, documenting outcomes and corrective actions
• Decide to re-tender when equal treatment is compromised
• Use independent monitors and observers for high-risk tendersMitigation Resources
Set and enforce anti-bribery controls for intermediary involvement in procurement interactions; prohibit informal intermediaries, require logged meetings, communications, and clarifications through official channels, require approvals and fee transparency, and escalate solicitation, gift, or improper payment risks.
Anti-bribery management and controlsRequire disclosure of agents, intermediaries, related payment arrangements, and beneficial ownership where lawful or required; verify PEP exposure, sanctions, conflicts, and related-party risks, and escalate unresolved red flags or disqualify where permitted.
Counterparty integrity screening and due diligenceUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the integrity of the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes hidden ownership; reduced accountability; higher costs and weaker outcomes for communities; limited visibility of agent roles and fees; increased risk of captured decisions; and higher retaliation risk when challenging intermediaries’ involvement.
Decision Point
During the tender process, submit access to information to request clarification on intermediary roles, conflicts-of-interest declarations and bid disqualifications. Decide whether to (a) escalate through oversight channels to report credible undue influence, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of entire tender process documentation, including intermediary roles, agreements, fees, ownership information, conflicts check and bid disqualifications linked to undisclosed parties
• Monitor intermediaries’ information to identify opaque provisions, and “access-as-deliverable” claims
• Mobilise communities around the importance of full transparency in tender processes and equal conditions for all bidders, given the impact on competition and fiscal outcomes
• Engage oversight and competition bodies when signs of opaque commissions and undue influence emerge (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for independent monitors and observers for high-risk tenders
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Collect and analyse available beneficial ownership, intermediary, and related-party disclosure data to identify hidden control, affiliated actors, opaque fee structures, contingent-fee arrangements, and high-risk networks influencing the tender process.
Beneficial ownership transparency and interoperabilityRequest access to non-public decision records, such as intermediary declarations, disqualification decisions for undisclosed agents, records of enforcement referrals, or internal notes explaining inaction, so hidden decisions, missing rationales, or unexplained case outcomes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
-
Phase 4: Tender Management
Tender capture by organised crime or politically exposed networks
Organised crime, coercive networks or politically exposed groups capture the tender process through intimidation, collusion or control of subcontracting and supply chains.
Red Flags & Indicators
- Bidders, evaluators, or community stakeholders report intimidation, threats, or coercion linked to participation in tender or award outcomes.
- A small set of networks dominates key inputs (materials, logistics, labour, supply chains), and competitors face barriers unrelated to capability.
- Extortion demands or “protection” arrangements emerge during the tender process, sometimes accompanied by security incidents.
- Unusual access control throughout the tender process and the presence of tender “gatekeepers”.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes higher security and operating costs; distortions in bidding and subcontracting; heightened safety risks to personnel and project sites; anti-bribery and AML exposure when “protection” payments are solicited; and reputational risks associated with captured supply chains.
Decision Point
During the tender process, assess signs of intimidation and coercion, and request a documented security and reporting plan.
Mitigation Actions
• Conduct enhanced due diligence on partners, subcontractors, and key suppliers (beneficial ownership, conflicts-of interest, PEP checks where feasible, media checks, related-party links)
• Obtain internal compliance approval before engagement with partners, subcontractors, and suppliers
• Require transparent subcontracting and traceable payments
• Ban/reject cash payment and engagement with undisclosed related parties
• Monitor subcontract award changes
• Implement a security incident and intimidation reporting protocol (site access controls, escalation routes, protected reporting), and maintain a documented track record of cases and supporting evidence
• Use internal compliance escalation processes and whistleblower channels, where available, to report signs of organised-crime, intimidation and coercion
• Refer concerns of organised-crime or coercion to independent oversight bodies for investigation, documenting outcomes and corrective actions
• Escalate and suspend/exit where credible organised-crime or coercion indicators persist
• Recommend that procuring entities use independent monitors and observers in high-risk tendersMitigation Resources
Require partners, subcontractors, suppliers, and other third parties in the bid and subcontracting chain to comply with anti-corruption and integrity requirements; require transparent subcontracting, traceable payments, disclosure of lower-tier arrangements, and reporting of coercion, intimidation, collusion, or organised-crime indicators.
Supplier and subcontractor integrity controlsScreen partners, subcontractors, and key suppliers linked to the bid and subcontracting chain; verify beneficial ownership where feasible, PEP exposure, sanctions, adverse media, and related-party risks, and stop or escalate unresolved red flags.
Counterparty integrity screening and due diligenceCommit to independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes heightened security, delay and overrun risks; increased risk of sanctions, AML and human rights non-compliance through contractors and suppliers; potential investment suspension or exit if coercion persists; reduced project value due to disrupted delivery; and reputational risk if coercive networks are linked to the project.
Decision Point
At tender and award-linked milestone, verify security and integrity controls, and suspend or exit in the absence of governance mechanisms to mitigate the risk of capture and coercion.
Mitigation Actions
• Conduct enhanced due diligence on sponsors, key suppliers, and subcontractors (beneficial ownership, conflicts-of interest, PEP checks where feasible, media checks, related-party links)
• Require transparent subcontracting and audit/verification rights
• Condition financing on tender integrity controls (secure bid handling, conflicts-of-interest management, disclosure of agents and commissions, security incident and intimidation reporting protocol, track record of incidents and documented responses)
• Treat credible signs of organised-crime, intimidation and coercion as a suspension trigger
• Pause disbursements until incidents are reviewed
• Request that procuring entities use independent monitors and observers for high-risk tendersMitigation Resources
Conduct integrity due diligence and issue tracking on high-risk parties in the tender and subcontracting chain; require subcontract transparency, audit or information rights, robust procurement-integrity controls, documented responses to intimidation or extortion reports, and pause support where organised-crime, coercion, or tender-capture risks remain unresolved.
Investor integrity due diligence and monitoringScreen sponsors, key suppliers, subcontractors, and related counterparties in the tender and subcontracting chain; verify beneficial ownership where feasible, PEP exposure, sanctions, exclusion status, adverse media, and related-party risks, and stop or escalate unresolved red flags.
Counterparty integrity screening and due diligenceUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes inability to run fair tenders; inflated costs and compromised quality; higher risk of safety incidents and worker/community harm; limited accountability; legal risks; and loss of public trust if coercion is not confronted.
Decision Point
During the tender process, assess signs of coercion and capture, proceed with protective measures and decide to re-tender if risks persist.
Mitigation Actions
• Publish the complete set of tender process documents, including beneficial ownership for bidders and key subcontractors, agent conflict-of-interest declarations, and contract award information
• Maintain an auditable tender file, documenting redactions and decisions
• Apply exclusion and debarment rules consistently
• Require subcontracting transparency and notification of subcontract changes
• Require disclosure of intermediaries, commissions, beneficiaries, payment arrangements and control structures
• Refer credible allegations of organised-crime, intimidation and coercion to independent oversight bodies for investigation, documenting outcomes and corrective actions
• Decide to re-tender when risks of capture, coercion and extortion persist
• Use independent monitors and observers for high-risk tendersMitigation Resources
Collect, publish where lawful, and use beneficial ownership data on bidders, agents, intermediaries, and key subcontractors to identify hidden control, affiliated actors, politically exposed networks, and high-risk links in the tender and subcontracting chain.
Beneficial ownership transparency and interoperabilityRequire disclosure of bidders, key subcontractors, intermediaries, and related counterparties in the tender and subcontracting chain; verify beneficial ownership, PEP exposure, sanctions, and related-party risks, and apply exclusion rules or escalate red flags where permitted.
Counterparty integrity screening and due diligencePublish and maintain public access to key tender integrity records, including ownership and agent declarations, subcontracting disclosures, exclusion or debarment decisions, and reasons for related decisions, to support external scrutiny and audit.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes increased violence and community harm; barriers to transparency and accountability; higher intimidation and retaliation risk for reporting; captured supply chains; increased risks of labor and safety abuses; and loss of public trust in public institutions.
Decision Point
During the tender process, submit access to information to request clarification on agents' and subcontractors' arrangements. Decide whether to (a) escalate through oversight channels to report credible signs of intimidation and capture, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of entire tender process documentation, including arrangements with agents and subcontractors, their ownership and control structure, payment flows and debarments
• Monitor agents’ and subcontractors' information to identify opaque structures, repeat high-risk actors, and gatekeeper control of key inputs
• Mobilise communities around the importance of full transparency of bidders’ contractual and group relationships to prevent hidden and undisclosed ties
• Support community reporting and safeguarding in high-risk areas
• Engage oversight bodies when signs of organised-crime, intimidation and coercion emerge (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for independent monitors and observers for high-risk tenders
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Analyse available beneficial ownership, intermediary, and subcontracting disclosures to identify hidden control, affiliated actors, politically exposed links, and high-risk networks in the tender and subcontracting chain.
Beneficial ownership transparency and interoperabilityRequest access to non-public decision records, such as debarment decisions, enforcement referrals, tender-integrity measures, or records explaining why high-risk bidders, agents, or subcontractors were not excluded or sanctioned, so hidden decisions, missing rationales, or unexplained inaction can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed tender-integrity records, including ownership disclosures, debarments, enforcement actions, and published integrity measures; identify disclosure gaps, missing justifications, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
-
Phase 4: Tender Management
Manipulated bid evaluation
Evaluation and award decisions are manipulated to favour a preferred bidder, despite formal procedures.
Red Flags & Indicators
- Scoring shows unexplained variance across evaluators, or criteria are applied inconsistently between bidders.
- Weights, interpretations, or thresholds shift after bid submission, without transparent approval, justification, and equal notice.
- Disqualifications rely on minor or selectively applied grounds, with limited opportunity for clarification and challenge.
- The evaluation file lacks a clear audit trail (minutes, justifications, conflict checks, and version control).
Stakeholder Guidance
Stakeholder Exposure
Exposure includes disqualification risk; sunk bid costs with limited recourse; pressure to use informal channels; increased risk of challenge and litigation; and reputational risk in a contested award process.
Decision Point
At the award decision, decide whether to accept the evaluation outcome or file a formal challenge, using evidence and avoiding informal approaches.
Mitigation Actions
• Request clarification on evaluation criteria, scoring methodology, and any post-submission changes
• Use formal tender channels to submit clarification requests and complaints
• Document concerns where equal notice or approvals were unclear
• Do not engage in any conversation regarding the evaluation process outside formal, transparent procedures
• Maintain an auditable record of submissions, responses, and timelines
• Use internal compliance escalation processes and whistleblower channels, where available, to report any attempt or approach to manipulate evaluation and award decisions
• Recommend that procuring entities use independent monitors and observers in high-risk tendersMitigation Resources
Review standard procurement documents and available evaluation records, including evaluation criteria, scoring methodology, disqualification notices, approvals, and any released evaluation summaries; identify inconsistencies, post-submission changes, or missing reasons, and support a structured clarification, complaint, or appeal.
Tendering, evaluation, and complaints integrityUse protected complaints or grievance channels to report suspected manipulation of evaluation or award decisions, informal scoring approaches, or retaliation linked to a complaint or appeal; document evidence, submission dates, case handling, and remedies sought, and protect complainants from retaliation.
Grievance, complaints, and protected reportingCommit to independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes award uncertainty; high risk of disputes and delays; integrity concerns and elevated ESG risk; weak contractor selection; increased performance and claims risk; re-evaluation and re-tender risk; and reduced project value if the tender is later overturned.
Decision Point
During the tender process, require disclosure of evaluation documentation; proceed only when evaluation records are complete and consistent; otherwise, require independent review before relying on the award.
Mitigation Actions
• Require an evaluation evidence pack, including scoring sheets, criteria and weights approvals, conflict-of-interest declarations and recusals, and minutes of meetings with bidders
• Treat lack of information and credible irregularity concerns as a suspension trigger
• Condition financing on disclosure of evaluation summaries, award rationale, and complaint outcomes
• Include audit/verification rights over the tender records
• Request independent review for high-value, high-impact awards, pausing disbursement until review results are issued
• Request that procuring entities use independent monitors and observers for high-risk tendersMitigation Resources
Conduct integrity due diligence and issue tracking on evaluation and award decisions, including scoring sheets, approved criteria and weights, COI declarations or recusals, evaluation summaries, award rationale, and complaint outcomes; set conditions, enhanced-review triggers, and pause support where manipulation or irregularity concerns remain unresolved.
Investor integrity due diligence and monitoringRequire, through financing conditions, standard procurement documents and formal evaluation records for evaluation and award decisions, including approved criteria, scoring records, COI declarations or recusals, minutes, award rationale, and complaint outcomes; verify that evaluation steps and key decisions are documented and traceable.
Tendering, evaluation, and complaints integrityUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes selection of an unsuitable bidder; poor value-for-money; higher risk of challenges, disputes, renegotiations, and overruns; increased risk of audit and investigation; and loss of public trust in the tender process.
Decision Point
Before validating the scoring, verify any inconsistencies and deviations; proceed only with a complete audit trail.
Mitigation Actions
• Apply a formal evaluation protocol with documented scoring rationale and evidence
• Enforce segregation of duties between bid evaluation and award decisions
• Require conflict-of-interest declarations and recusals from evaluators
• Lock scoring criteria and require approval for weights changes
• Maintain a complete evaluation evidence pack (minutes, scoring sheets, justifications, conflict-of-interest records, version control)
• Publish evaluation summaries and award decisions
• Implement a timely complaints mechanism, documenting responses and corrective actions transparently
• Request independent review when scoring anomalies, selective disqualifications, or manipulation indicators arise
• Use independent monitors and observers in high-risk tenders
• Document re-evaluation reports and decisionsMitigation Resources
Apply standard tender documents and maintain formal evaluation and award records, including approved criteria, scoring sheets, disqualification decisions, evaluation minutes, and supporting evidence; keep criteria fixed unless formally approved, retain bid-opening and evaluation records, and document complaints handling.
Tendering, evaluation, and complaints integrityRequire conflict-of-interest declarations and documented conflict management for evaluators, advisers, and decision-makers involved in evaluation and award decisions; enforce recusals and exclude conflicted parties until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controlsPublish and maintain public access to key evaluation and award records, including evaluation summaries, disqualification decisions, complaint outcomes, and reasons for award, with only lawful redactions.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
Stakeholder Exposure
Exposure includes opaque scoring and limited justifications; higher risk of overpriced and low-quality delivery; reduced ability to contest awards; limited access to complaint outcomes; and higher retaliation risk when scoring partiality is challenged.
Decision Point
During the tender process, submit access to information to request evaluation summaries and justification. Decide whether to (a) escalate through oversight channels to report inconsistencies, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of entire tender process documentation, including evaluation summaries, scoring rationale, and conflict-of-interest declarations and recusals applied to evaluators
• Monitor evaluations to identify score anomalies, selective disqualifications, and post-submission criteria shifts
• Mobilise communities around the importance of full transparency of evaluation process to prevent favouritism
• Engage oversight bodies when credible irregularity concerns emerge (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for independent monitors and observers for high-risk tenders
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Screen evaluation and award records, complaints, and related disclosures for red flags, such as score anomalies, selective disqualifications, post-submission criteria shifts, weak conflict-of-interest safeguards, or other irregular evaluation patterns; raise suspected irregularities through complaints or oversight channels.
Procurement red-flag detection, analytics, and escalationUse protected complaints and grievance channels to report suspected manipulation of evaluation or award decisions; document evidence, timelines, and remedies sought, track case handling, and support safe reporting where retaliation risk is material.
Grievance, complaints, and protected reportingReview publicly disclosed evaluation and award records, such as evaluation summaries, disqualification decisions, award reasons, and complaint outcomes; identify disclosure gaps, missing justifications, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityFailure Cases
-
Phase 4: Tender Management
Evaluators with conflicts-of-interest
Undeclared conflicts-of-interest among officials, advisers, or consultants bias tender decisions and oversight.
Red Flags & Indicators
- Evaluators and advisers have undisclosed personal, financial, or family links to bidders, subcontractors, or sponsors.
- “Dual roles” occur (advisers supporting the procuring entity and a bidder).
- Recusals are absent despite apparent conflicts.
- Panel composition changes late, or conflict declarations are incomplete, unverified, or not updated during the process.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes unfair evaluation; biased contract terms; pressure to engage conflicted consultants; higher risks of challenge and complaints; and reputational risk if linked to conflicted relationships.
Decision Point
Before instructing advisers and consultants, conduct conflict-of-interest checks; and request clarification on any conflicts involving evaluators raising concerns through formal tender channels.
Mitigation Actions
• Declare and manage the company’s own conflicts (including advisers, consultants, joint-venture partners, and key subcontractors)
• Maintain an auditable record of conflicts declarations, recusals, responses, appointment approvals, applied mitigations and timelines
• Avoid dual roles that compromise independence (e.g., adviser and bidder)
• Implement countermeasures to mitigate conflicts, including separating teams, establishing information firewalls, and requiring independent sign-offs
• Use formal tender channels to submit clarification requests and complaints to raise credible evaluator and adviser conflict
• Use internal compliance escalation processes and whistleblower channels, where available, to report any conflict-of-interest
• Recommend that procuring entities use independent monitors and observers in high-risk tendersMitigation Resources
Require declaration, review, and documented management of the company’s own conflicts of interest, including advisers, consultants, JV partners, and key subcontractors; enforce recusals, role separation, access restrictions, and approvals so conflicted parties are excluded until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controlsUse protected complaints or grievance channels to report credible evaluator or adviser conflict-of-interest concerns, preferential treatment, or retaliation linked to tender participation; document evidence, submission dates, case handling, and remedies sought, and support safe reporting where retaliation risk is material.
Grievance, complaints, and protected reportingCommit to independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityStakeholder Exposure
Exposure includes decreased award reliability; higher litigation and re‑tender risk; governance and ESG risk if dual roles surface; decrease project value from biased contractor selection; and delays until independence is verified.
Decision Point
Continue engagement only if evaluator and adviser conflicts checks and recusals are evidenced.
Mitigation Actions
• Conduct enhanced due diligence on advisers and key counterparties (beneficial ownership, conflicts-of interest, PEP checks where feasible, media checks, related-party links)
• Require disclosure of conflict-of-interest management measures for the evaluation process
• Condition engagement on independent review of material conflicts (dual roles, late panel changes, missing recusals), documenting decisions
• Treat lack of information and unresolved issues as a no-go, documenting decisions
• Include covenants for ongoing conflict-of-interest disclosure, remediation, and notification of panel and adviser changes through the tender and contracting process
• Include suspension and exit rights if conflicts are not addressed
• Request that procuring entities use independent monitors and observers for high-risk tendersMitigation Resources
Require disclosure, review, and documented remediation of conflicts of interest affecting evaluator and adviser roles, including recusals, panel changes, and conflict-management measures; treat unresolved conflicts as a no-go or suspension trigger.
Conflict-of-interest management and ethics controlsConduct investor due diligence and issue tracking on evaluator and adviser roles, conflict disclosures, recusals, panel changes, and related safeguards; set conditions, enhanced-review triggers, and pause support until risks are resolved.
Investor integrity due diligence and monitoringUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityStakeholder Exposure
Exposure includes higher risk of award challenge; overpricing and poor performance; increased audit and investigation risk for unmanaged conflicts-of-interest; and loss of trust in the tender process.
Decision Point
Before validating the scoring, verify inconsistencies and conflict-of-interest declarations and recusals from evaluators.
Mitigation Actions
• Require conflict-of-interest declarations (and updates) for evaluators, advisers, and tender officials
• Maintain a conflict-of-interest register, documenting recusals and applied mitigation
• Separate advisory, evaluation, and approval roles
• Document access to bids and scoring materials
• Maintain an evaluation file, with panel changes, decisions, and conflict handling information
• Refer material and unresolved conflicts to independent oversight bodies, pause scoring and award decisions until mitigations are implemented
• Request independent review when signs of conflict arise, documenting outcomes and corrective actions
• Use independent monitors and observers in high-risk tendersMitigation Resources
Require conflict-of-interest declarations, updates, and documented conflict management for evaluators, advisers, and procurement staff; verify disclosures, record recusals and mitigations, and exclude conflicted parties until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controlsSet clear approval limits, sign-off steps, and separation of duties for evaluator and adviser roles, conflict declarations, recusals, panel changes, access to bids and scoring materials, and award decisions so no single official can shape the process end to end.
Approval authority and segregation of dutiesPublish and maintain public access to key evaluation and conflict-management records, including panel changes, complaint outcomes, and reasons for related decisions, with only lawful redactions.
Transparency and data disclosure standardsUse independent monitoring to oversee the tender process, reducing risks of bribery, corruption, and collusion, and strengthening transparency, accountability, and confidence in the process.
Independent monitoring, assurance, and social accountabilityStakeholder Exposure
Exposure includes undisclosed evaluator conflicts; biased decisions; limited access to conflict-of-interest and recusal records; reduced accountability; and higher retaliation risk when conflict is reported.
Decision Point
During the tender process, submit access to information to request conflict-of-interest and recusal records. Decide whether to (a) escalate through oversight channels to report inconsistencies and unamaged conflicts, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of entire tender process documentation, including evaluator and adviser roles, fees, conflict-of-interest declarations and recusal records, and evaluator panel decisions
• Monitor evaluation composition and decision-making to identify late panel changes, dual-role indicators, and revolving-door links
• Mobilise communities around the importance of full transparency of evaluation process to prevent favouritism and conflicted decisions
• Engage oversight bodies when conflicts are undisclosed, recusals are absent, or conflict controls are waived without justification (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for independent monitors and observers for high-risk tenders
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Request access to non-public decision records, such as evaluator or adviser role declarations, recusal logs, conflict waivers, panel change approvals, ethics review findings, or records explaining late role changes, so hidden conflicts, missing rationales, or unexplained departures from conflict controls can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyUse independent monitoring or social accountability to oversee the tender process, compare disclosed conflict-management records with panel changes, recusals, adviser roles, fee arrangements, and related decisions in practice; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilityReview publicly disclosed evaluation and conflict-management records, such as panel changes, complaint outcomes, published reasons for related decisions, and any disclosed conflict safeguards; identify disclosure gaps or missing justifications, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standards
Phase 5 8 risks during the Project Execution phase
-
Phase 5: Project Execution
False invoicing, overbilling and theft of materials during execution
Contractors, supervisors or officials enable overbilling, inflated quantities and theft of materials through weak measurement and poor inspection and inventory controls.
Red Flags & Indicators
- Delivery notes, measurement records, or timesheets do not match site records or supervision reports.
- Invoices contain repeated corrections, duplicate charges, or billing for the same work in different periods.
- Inventory records show unexplained shortages, unusual waste, or missing high-value materials and fuel.
- Payment certificates are approved with limited inspection evidence or by the same person across several contract packages.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes invoice approval pressure; risk of being solicited to collude or accused of overbilling; cash leakage via theft and diversion; payment delays, increased risk of disputes and rework; and reputational risk.
Decision Point
For each payment request, submit a progress invoice and material claim for certification proceed, with reconciled measurement and stock records.
Mitigation Actions
• Maintain verifiable records for quantities, deliveries, and labour (measurement books, delivery notes, timesheets)
• Reconcile measurement records to site diaries and supervision logs
• Use three-way match for high-value materials and fuel
• Segregate invoice preparation, verification, and approval roles
• Require independent sign-off for corrections and duplicates
• Retain a complete audit file for each payment claim, including related to corrections and duplicates
• Use inventory and wastage controls (stock counts, issue registers, loss reports)
• Conduct internal investigation to clarify discrepancies, unexplained shrinkage or repeat variances before submitting payment claims, pausing payments pending investigation
• Use internal compliance escalation processes and whistleblower channels, where available, to report any pressure to certify false invoices or conceal theftMitigation Resources
Control invoices, quantities, delivery records, site receipts, payment support, and material movements through formal evidence requirements, independent verification, segregation of duties, and approval before claim submission, certification, or payment.
Change control, delivery verification, and payment integrityAssess fraud risks and apply prevention, detection, investigation, and corrective-action controls to invoices, quantities, delivery records, site receipts, payment records, and material movements, including unexplained variances, duplicate claims, or suspected theft.
Fraud control managementFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes release of funds against inflated progress; leakage and value loss; higher audit and ESG risk; and delays due to disbursement pauses during verification and disputed quantities.
Decision Point
At drawdown milestones, require certified progress reports on measurements and deliveries; initiate independent verification when discrepancies are identified and not explained.
Mitigation Actions
• Condition disbursement on certification backed by verified quantities and deliverables (measurement reconciliation, delivery notes, timesheets)
• Require spot checks and independent verification for high-risk items
• Require transparent payment system, inventory controls (material registers, fuel logs, stock counts) and timely disclosure of corrections and duplicates
• Treat unexplained variances as a suspension trigger
• Secure audit/verification rights over invoices, delivery records, and subcontractor payment flows (including changes in key suppliers/subcontractors)
• Request targeted independent review in case of discrepancies, suspending payments pending reviewMitigation Resources
Require, through financing conditions, formal evidence and independent verification for invoices and supporting execution records, including quantities, deliveries, payments, and material-control records, before disbursement or release of funds.
Change control, delivery verification, and payment integrityUse an independent technical adviser to verify quantities, delivered outputs, and material-control evidence, and to challenge weak support for invoices, delivery records, payment records, or material movements.
Independent technical due diligence and monitoringFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes budget leakage; inflated quantities and theft; higher risk of audit review and investigations; delays over payment disputes; risk of reduced service outcomes; and loss of public trust.
Decision Point
Before approving payments, certify quantities and verify site and inventory checks; withhold certification and initiate audit review when discrepancies are identified and not explained.
Mitigation Actions
• Apply invoice validation and payment certification controls (measurement reconciliation, delivery note checks, timesheet verification)
• Maintain a complete auditable record for each payment certificate
• Maintain materials receiving and traceability records (goods received notes, stock/fuel logs, wastage reports)
• Investigate unexplained variances or repeat corrections before certifying payments, suspending payments pending review
• Publish payment records, including certified quantities, payment certificates, and reasons for material corrections or withholding decisions
• Refer signs of credible fraud and theft to independent oversight bodies, suspending payments pending review
• Publish project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Apply invoice validation and payment certification controls through formal evidence requirements, measurement reconciliation, goods-received records, timesheet verification, and independent approval before certification or payment.
Change control, delivery verification, and payment integrityMaintain internal oversight of controls governing invoices, quantity records, delivery records, goods-received records, payment records, and material movements; test controls, follow up findings, and focus assurance on high-risk transactions and certification decisions.
Risk-based internal audit planningPublish and maintain public access to key execution and payment records, such as certified quantities, payment certificates, and reasons for material corrections or withholding decisions.
Transparency and data disclosure standardsFailure Cases
Stakeholder Exposure
Exposure includes limited oversight and accountability over quantities, payments and measurement records; budget leakage and higher costs; risk of reduced service outcomes; increased safety and environment impacts from poor controls; and retaliation risk when reporting discrepancies.
Decision Point
During project execution, submit access to information to request payment, measurement and delivery records. Decide whether to (a) escalate through oversight channels to report inconsistencies and lack of transparency, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project execution documentation, including payment certificates, milestone definitions, and supporting delivery and measurement records
• Monitor visible progress, deliveries, and quality outcomes against reported payment milestones to identify repeated claims, rework, and discrepancies that do not match site conditions
• Mobilise communities around the importance of full transparency of payment information to ensure value-for-money
• Engage oversight bodies when discrepancies and signs of theft and falsified records are identified (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Track reported payments, deliveries, quantities, and outputs against visible site progress, material use, and quality outcomes; flag repeated claims, delivery gaps, rework, or other anomalies that suggest overbilling, false invoicing, theft, or leakage.
Expenditure tracking and leakage analysisUse independent monitoring or social accountability to compare disclosed execution and payment records with site conditions, delivered outputs, and observed material use; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilityReview publicly disclosed execution and payment records, including payment certificates, milestone definitions, and delivery or measurement records; identify disclosure gaps, missing justifications, or inconsistencies with site conditions, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
Good Practices
-
Phase 5: Project Execution
Manipulated change orders and variation claims to extract rents
Change orders, claims and renegotiations are used strategically to increase prices after award, exploiting incomplete and weak design maturity, and gaps in supervision and approval controls.
Red Flags & Indicators
- High volume of variations soon after award, with recurring design and bill of quantities omissions cited as justification.
- Variations split into multiple small approvals below contractual thresholds, or fragmented across packages.
- Cost increases lack accurate justification, with unit rates materially above contract or market benchmarks.
- Claims bundled together into a final account and settled through side agreements or accelerated approvals without independent review or evidence.
- Contingency is consumed rapidly, and schedule impacts are repeatedly reclassified to avoid accountability.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes inconsistent cost variation process; inflated project scope and price; pressure to push unjustified changes or informal settlements; higher risk of disputes and delay from weak approvals; audit and anti-bribery risk; and reputational risk.
Decision Point
For each claim request, submit or accept variations and change orders only through formal contractual procedures, with validated scope, pricing, and supporting evidence.
Mitigation Actions
• Maintain updated records for each variation and claim request (reason, instructions, measurements, cost and time impacts)
• Ensure each variation and claim request is justified with reference to updated drawings, bill of quantities revisions, and site records
• Require independent cost estimate and benchmarking for material changes
• Require internal compliance approval before submitting, negotiating, or accepting change orders
• Avoid splitting variation and claim requests to bypass value thresholds
• Do not approve side agreements or accelerated approvals outside the contract procedure
• Maintain an auditable track record and version-controlled pricing build-ups for each renegotiation and contractual amendment
• Use internal compliance escalation processes and whistleblower channels, where available, to report any pressure to inflate claims, reclassify delays, or approve unjustified scope changesMitigation Resources
Control variation proposals, internal change approvals, supporting evidence, pricing build-ups, and change logs through formal evidence requirements, independent review, site or measurement records, and internal approval before submission, negotiation, or payment processing.
Change control, delivery verification, and payment integrityEmbed anti-corruption, audit-access, cooperation, and remedy clauses in agreements governing variation proposals, supporting records, pricing build-ups, and change logs; invoke them when red flags escalate during claim preparation, negotiation, or payment processing.
Contracting integrity clauses and legal safeguardsStakeholder Exposure
Exposure includes scope increase; cost overruns and lower returns; weak governance and high risk of funds leakage; higher delay claim and renegotiation risk; decrease of project value; and higher risk of ESG and reputational exposure if approvals are opaque.
Decision Point
At drawdown milestones, approve variation and contingency funding only after independent review and auditable justification.
Mitigation Actions
• Condition funding on a formal change-order dossier for material variations (scope, reason, instruction trail, measurement, cost and time impacts)
• Request independent estimate and benchmarking for material variations
• Treat inconsistent or missing information as a no-go
• Require a transparent process for variation approvals (threshold sign-offs, change log, no side agreements)
• Include disclosure and audit/verification rights over variation pricing, renegotiations and payments
• Request independent review when variation frequency and value exceed agreed thresholds, changes and renegotiations are split to avoid approvals, and contingency drawdown accelerates without explanation, suspending payments disbursement pending reviewMitigation Resources
Require, through financing conditions, formal evidence and independent verification for material variation proposals, supporting records, pricing build-ups, and change logs before disbursement decisions.
Change control, delivery verification, and payment integrityUse an independent technical adviser to review material variations, test quantity and pricing support, and challenge weak evidence in variation proposals, supporting records, and change logs.
Independent technical due diligence and monitoringStakeholder Exposure
Exposure includes scope change, budget overruns and fiscal stress; fragmented approvals to bypass thresholds; higher risk of audit and legal challenge; corruption leakage risk; risk sof delays and disputes; and loss of public trust.
Decision Point
Before approving change orders and renegotiations, verify documented need and cost review; reject and require rework and alternative options when discrepancies are identified and not explained.
Mitigation Actions
• Implement a formal change order approval process (written instruction trail, scope and bill of quantities explanation, cost and time impact assessment, independent estimate and benchmarking) with threshold approvals and segregation between review and approval roles
• Maintain a complete auditable record for each change order and renegotiation claim with version control and supporting evidence
• Publish project variations, justifications, and cumulative contingency use
• Monitor patterns of splitting, repeat omissions, inflated unit rates, and side agreements
• Refer discrepancies to independent oversight bodies, suspending approvals and payments pending review, and documenting corrective actions
• Publish project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Apply formal evidence requirements, site or measurement verification, pricing checks, and independent approval to variation proposals, supporting records, and change logs before certification or payment.
Change control, delivery verification, and payment integritySet clear approval limits, sign-off steps, and separation of duties for variation proposals, pricing records, approvals, and change logs; ensure no single official initiates, approves, and records the same action.
Approval authority and segregation of dutiesPublish and maintain public access to key variation records, including approved variations, justifications, cumulative contingency use, and reasons for material changes, with only lawful redactions.
Transparency and data disclosure standardsStakeholder Exposure
Exposure includes unexplained scope and cost increases; reduced accountability; higher impacts and disruption from expanded works; limited disclosure of claims justifications; diversion of funds from community needs; and retaliation risk when challenging changes.
Decision Point
During project execution, submit access to information to request variations and renegotiations records. Decide whether to (a) escalate through oversight channels to report inconsistencies in cost and scope increases and lack of transparency, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project execution documentation, including change orders, renegotiation claims, cost and time impacts, and cumulative contingency use
• Monitor claims frequency, value, and justifications (including splitting below thresholds) to identify repeated, accelerated, or weakly justified variations and well as side agreements, inflated rates and missing evidence
• Mobilise communities to identify impacts of scope changes (footprint, access, safety, affordability, lack of mitigation measures and community consultation)
• Engage oversight bodies when discrepancies in claims and lack of evidence are identified (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Request access to non-public decision records on material variations, including approvals, pricing justifications, records of cost or time impacts, and decisions on contingency use, so hidden decisions, missing rationales, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyUse independent monitoring or social accountability to compare disclosed variation records with actual scope changes, site conditions, and service impacts; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilityReview publicly disclosed variation records, including material change orders, published justifications, cost or time impacts, and cumulative contingency use; identify disclosure gaps, missing justifications, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standards -
Phase 5: Project Execution
Bribery for payment certificates, inspection and acceptance of works
Payments, progress certificates and acceptance decisions are influenced by bribes or extortion, leading to premature payments, poor quality and weak accountability.
Red Flags & Indicators
- Requests or indirect suggestions for gifts, unofficial “fees”or "speed payments", or use of intermediaries to book inspections, obtain certificates, clear customs or unlock payments.
- Completion and acceptance certificates issued despite incomplete works, failed tests, or unresolved punch lists and defects.
- Retentions reduced or released early, or defects liability remedies waived, without written justification and documented approvals.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes extortion pressure; anti-bribery and debarment risk via intermediaries; premature certification and increased defect liability risk; higher risk of cashflow delays and disputes; and reputational risk.
Decision Point
At inspection and acceptance milestones, proceed through scheduled formal processes with test evidence, or pause and escalate if any improper payment request arises
Mitigation Actions
• Enforce a zero-facilitation policy for inspections, certifications, and payments
• Require pre-approval and adequate record-keeping for all official interactions and site meetings
• Submit certification requests with complete evidence (test results, punch list status, as-built and measurement records)
• Maintain an auditable track record of inspection and certification activities, approvals and engagements
• Avoid informal and “expedite” arrangements or intermediaries, requiring documented approvals
• Identify and record early retention release or waiver of defects-liability actions without written justification
• Use internal compliance escalation processes and whistleblower channels, where available, to report any solicitation, extortion, inconsistency or pressure to certify incomplete work or approve early release
• Suspend certification and payment requests pending internal reviewsMitigation Resources
Set and enforce anti-bribery controls for inspection, certification, and payment requests; prohibit facilitation payments and other inducements, require logged interactions and controls on intermediaries, and escalate any solicitation, extortion, or gift risk.
Anti-bribery management and controlsControl inspection and certification requests, supporting evidence, internal approvals, and interaction records through formal evidence requirements, measurement and as-built records, and verification before submission or internal sign-off.
Change control, delivery verification, and payment integrityGood Practices
Stakeholder Exposure
Exposure includes premature payments; lower asset quality; integrity and ESG risk around certifications; higher risk of rework, accidents, and claims; disbursement suspension risk; and reduced project value.
Decision Point
At drawdown milestones, disburse only against verified certificates and test results; hold payments pending independent verification when signs of bribery or extortion arise.
Mitigation Actions
• Condition disbursement on a complete certification pack (inspection reports, test results, punch list and defects status, retention calculations)
• Include independent verification for high-risk milestones
• Treat credible signs of solicitation, extortion and integrity failure (early retention release, waived defects actions, unexplained approvals) as a suspension trigger
• Require accessible grievance and whistleblowing channels for workers and contractors and timely incident reporting on solicitation, coercion, and pressure to certify incomplete works or approve early release
• Include covenants enabling payment holds, independent re-inspection, and audit/verification rightsMitigation Resources
Require, through financing conditions, formal evidence and independent verification for certification records, supporting inspection evidence, defects status, and payment-related records before disbursement decisions.
Change control, delivery verification, and payment integrityGood Practices
Stakeholder Exposure
Exposure includes accelerated or false certification; acceptance of incomplete and failed work; higher risk of audit, investigation and legal liability; higher risk of failures and service disruption; and loss of public trust.
Decision Point
Before issuing payments and acceptance decisions, request documented evidence that work is complete and tests have been passed.
Mitigation Actions
• Separate inspection, testing, certification, and payment approval roles
• Use inspection logs and certification checklists
• Maintain a complete auditable record for each certification file (tests, punch list status, retentions, approvals)
• Establish and enforce grievance and whistleblowing channels to report solicitation and extortion linked to inspections and payments
• Request independent or second-line checks for high-risk certifications and payments (large milestones, early retention release, waived defects actions)
• Suspend approvals when evidence is incomplete
• Include tender provisions enabling direct payment flows from the financier to the company
• Refer credible cases to independent oversight bodies, suspending approvals and payments pending review, and documenting corrective actions
• Publish project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Set and enforce anti-bribery controls for inspections, certifications, and payment approvals; prohibit facilitation payments and other inducements, keep auditable records of important interactions relevant to inspection, certification, and payment decisions, and refer credible bribery or extortion allegations through formal channels.
Anti-bribery management and controlsRequire complete inspection and certification records, including test results, measurement records, punch list status, retention calculations, and payment support, and verify them before approving certification, acceptance, or payment.
Change control, delivery verification, and payment integrityPublish and maintain public access to key inspection, certification, and payment records, including payment certificates, acceptance decisions, and reasons for early retention release or waived defects actions.
Transparency and data disclosure standardsGood Practices
Stakeholder Exposure
Exposure includes increased safety and community harm; limited access to test and certification records; weaker accountability for defects; and retaliation risk when reporting irregular approvals.
Decision Point
During project execution, submit access to information to request disclosure of certification and payment records. Decide whether to (a) escalate through oversight channels to report credible signs of premature approval and lack of transparency, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project execution documentation, including payment certificates, inspection records and acceptance approvals
• Monitor payments and acceptance approvals for red flags (unusual delays, repeated “fees” requests, early retention release)
• Engage oversight bodies when credible of solicitation and extortion concerns are identified (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Submit protected complaints or reports through complaints, ombud, audit, or other oversight channels where bribery, solicitation, or extortion affects inspection, certification, acceptance, or payment decisions; document evidence and timelines, and support safe reporting where retaliation risk is material.
Grievance, complaints, and protected reportingUse independent monitoring or social accountability to compare disclosed inspection, certification, and payment records with site conditions and reported decisions in practice; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilityReview publicly disclosed inspection, certification, and payment records, including payment certificates, acceptance decisions, and published reasons for early retention release or waived defects actions; identify disclosure gaps, missing justifications, or unexplained decisions, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsGood Practices
-
Phase 5: Project Execution
Fraudulent quality assurance and safety non‑compliance
Testing, quality assurance, and safety controls are compromised through falsified results, substitution of materials, or bribery or conflicts-of-interest involving inspectors, increasing the risk of failures and accidents.
Red Flags & Indicators
- Test certifications and reports lack end-to-end traceability (sample IDs, custody records, timestamps) or show suspiciously consistent results.
- Materials delivered or installed diverge from approved specifications without justification, or substitutions are made without documented approval.
- Safety incidents and near-misses are not reported or underreported, and corrective actions repeatedly exceed past due dates.
- Inspector/lab independence is questionable (repeat engagements, undeclared conflicts, templated and identical sign-offs).
- Non-conformities are closed without verifiable evidence, and the same defects recur across inspections.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes increased risk of substandard materials, falsified tests and operational failure; costly rework and stop-work events; higher accident and liability risk; warranty and insurance impacts; and higher reputational risk.
Decision Point
During testing, proceed only with traceable quality assurance systems, approved materials, and established health and safety standards.
Mitigation Actions
• Adopt quality assurance and quality control (QA/QC) processes, streamlining workflows, standardising procedures across all projects, ensuring consistent quality standards, and automating documentation where possible
• Maintain complete quality assurance, quality control, and health, safety and environment (HSE) records (sample IDs, chain-of-custody, test results, inspection logs, non-conformance reports)
• Use digital tools that auto timestamp entries to avoid falsification or backdating of quality and safety documentation
• Maintain a full audit trail of quality and safety documentation (who created, edited, when, and what changed in each document version)
• Verify materials against approved specifications (receiving inspection report, batch and heat numbers, traceability)
• Adopt a system to red flag unapproved materials substitutions
• Quarantine non-conforming materials and document what is done with those materials
• Separate quality verification from production, payment, and certification roles
• Use independent or second-line checks for critical tests and retain evidence for audits
• Use internal compliance escalation processes and whistleblower channels, where available, to report pressure to bypass tests, close non-conformance reports without evidence, or underreport incidents
• Stop work when critical controls fail until corrective actions are verifiedMitigation Resources
Assess fraud risks and apply prevention, detection, investigation, and corrective-action controls to quality and safety records, including test results, inspection records, non-conformance reports, material traceability records, and corrective actions.
Fraud control managementControl quality and safety records, including test results, inspection records, non-conformance reports, material traceability records, and corrective actions, through formal evidence requirements, independent review, and verification before internal sign-off, certification requests, or payment claims.
Change control, delivery verification, and payment integrityFailure Cases
Stakeholder Exposure
Exposure includes catastrophic failure and downtime risk; ESG and safety risk; reputational harm; costly remediation and delays; insurance and liability events; and decrease of project value.
Decision Point
At drawdown milestones, disburse only where quality assurance and safety evidence is independently verified; hold payments pending re-testing and implementation of corrective actions.
Mitigation Actions
• Condition disbursements on independent quality assurance, quality control, and health, safety and environment (HSE) verification (traceable test results, chain-of-custody, approved materials evidence)
• Include audit/verification rights over quality assurance and quality control records and labs/inspectors used
• Treat repeated anomalies (uniform results, missing traceability, repeat sign-offs, closed non-conformance reports without evidence) as a suspension trigger
• Commission third-party re-testing or site verification after repeated anomalies
• Require disclosure of timely incident and near-miss reporting and corrective-action tracking (owners, deadlines, verification of closure)
• Pause disbursements in case of lack of disclosure on incident reporting and corrective actions, or where corrective actions are overdue or being bypassedMitigation Resources
Require, through financing conditions, formal evidence and independent verification for quality and safety records, including test results, inspection records, non-conformance reports, and corrective actions, before disbursement decisions.
Change control, delivery verification, and payment integrityUse an independent technical adviser to verify test results, traceability, inspection records, non-conformance reports, and corrective-action evidence, and to challenge weak or inconsistent support in quality and safety records.
Independent technical due diligence and monitoringStakeholder Exposure
Exposure includes higher risk of unsafe assets and service disruptions; higher lifecycle costs from defects; legal liability and investigations after incidents; increased risk of rework and delays; and loss of public trust.
Decision Point
Before accepting critical works and material, require evidence that quality assurance and safety tests are complete and traceable; otherwise, order re-testing and corrective actions.
Mitigation Actions
• Implement and enforce quality assurance, quality control, and health, safety and environment (HSE) testing plans (traceable samples, chain-of-custody, inspection logs, non-conformance reports closure evidence)
• Conduct random surprise audits and risk-based spot checks
• Maintain a complete auditable record for inspection and certification
• Separate contractor and supervision from inspection and certification roles
• Document access to quality assurance records
• Require conflict-of-interest declarations for labs and inspectors
• Rotate and independently verify critical tests where feasible
• Commission re-testing in case of critical inconsistencies (missing traceability, repeat uniform results, unapproved substitutions, or closed non-conformance reports without evidence)
• Quarantine critical materials, and withhold acceptance and payment until verification against approved specifications
• Refer credible falsification and bribery concerns to independent oversight bodies, suspending approvals pending review, and documenting corrective actions
• Publish material quality failures and corrective actionsMitigation Resources
Require complete quality and safety records, including traceable test results, inspection records, non-conformance reports, corrective-action evidence, and material traceability records, and verify them before certification, acceptance, or payment.
Change control, delivery verification, and payment integrityAssess fraud risks and apply prevention, detection, investigation, and corrective-action controls to quality and safety records, including falsified test results, closed non-conformance reports without evidence, unapproved substitutions, and missing traceability.
Fraud control managementPublish and maintain public access to key quality and safety records, including material quality failures, major non-conformance findings, and corrective actions, with only lawful redactions.
Transparency and data disclosure standardsStakeholder Exposure
Exposure includes higher risk to community safety and environmental harm; limited transparency on testing and incidents; higher grievance burden; retaliation risk for whistleblowers; and reduced accountability for corrective actions.
Decision Point
During project execution, submit access to information to request test certification and inspection reports. Decide whether to (a) escalate through oversight channels to report credible signs of serious issues and lack of transparency, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project execution documentation, including test certifications and reports, inspection findings, safety incidents and near-misses, non-conformance reports, and corrective action status
• Mobilise communities to identify issues related to visible work quality and safety outcomes (defects recurring, unsafe practices, incident patterns)
• Engage oversight bodies when serious or repeated issues are identified (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Use independent monitoring or social accountability to compare disclosed quality and safety records with visible site conditions, recurring defects, incident patterns, and corrective action in practice; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilitySubmit protected complaints or reports through complaints, ombud, audit, or other oversight channels where falsified test results, substituted materials, unsafe practices, or suppressed non-conformance findings are identified; document evidence and timelines, and support safe reporting where retaliation risk is material.
Grievance, complaints, and protected reportingReview publicly disclosed quality and safety records, including inspection findings, non-conformance reports, corrective-action status, and published reasons for major quality failures or safety incidents; identify disclosure gaps, missing justifications, or unexplained decisions, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standards -
Phase 5: Project Execution
Corrupt subcontracting, labour exploitation and ghost workers
Subcontracting, labour hiring, and payroll are subject to patronage, extortion, and fraudulent practices, including ghost workers and inflated staffing.
Red Flags & Indicators
- Subcontracts are awarded or changed without competition and repeatedly favour connected, newly established, or non-transparent firms.
- Payroll and attendance records do not match the number of workers on site, including duplicate names, shared bank accounts, or unusually high cash payments.
- Worker complaints report unpaid wages, coercion, or unexplained deductions, together with high staff turnover, work stoppages, or unrest.
- Labour or security providers are linked to credible reports of intimidation, unclear ownership, or connections to influential individuals or networks.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes inflated costs; labour abuse and extortion risk; increased labour, anti-money laundering, and anti-bribery and corruption risk; higher risk of workforce unrest and delays; and reputational risk.
Decision Point
Before approving payroll and labour subcontractors, verify worker records and conduct due diligence on subcontractors.
Mitigation Actions
• Verify worker identity and attendance (unique IDs, site headcounts, timesheets) and reconcile to payroll
• Use traceable wage payment systems and identify duplicate IDs, shared accounts, or unexplained cash use
• Conduct due diligence on labour subcontractors, security providers, and recruitment agents (ownership where feasible, conflicts, past violations)
• Require written contracts with defined rates and deductions, and no recruitment fees charged to workers
• Maintain complete and auditable labour records
• Maintain an accessible worker grievance mechanism, ensuring complaints are recorded and their resolution is tracked
• Use internal compliance escalation processes and whistleblower channels, where available, to report payroll inconsistencies, wage withholding, coercion, intimidation, or unsafe labour practices, documenting corrective actions
• Suspend and replace subcontractors and freeze disputed payments when credible exploitation or signs of ghost workers persistMitigation Resources
Require subcontractors, recruitment agents, security providers, and other third parties involved in workforce supply or payroll to comply with anti-corruption and integrity requirements; require reporting of ghost worker, payroll, coercion, or exploitation concerns, and apply the same requirements to lower tiers.
Supplier and subcontractor integrity controlsScreen subcontractors, recruitment agents, security providers, and related counterparties involved in labour supply and payroll arrangements; verify beneficial ownership where feasible, related-party links, PEP exposure, and sanctions risks, and escalate or stop engagement where unresolved red flags remain.
Counterparty integrity screening and due diligenceStakeholder Exposure
Exposure includes higher human rights and labour risk; sanctions and debarment contagion via subcontractors; cost increase; delays from disputes and unrest; and reputational risk.
Decision Point
Before releasing funds, verify payroll and subcontractor controls, and suspend support if exploitation or signs of ghost workers persist.
Mitigation Actions
• Condition disbursement on labour and subcontractor verification (worker ID and attendance reconciliation to payroll, traceable wage payments, disclosed labour providers)
• Treat credible exploitation and ghost worker indication as a suspension trigger
• Include covenants requiring adequate worker documentation, transparent wage deductions, and an accessible grievance mechanism with documented resolution
• Include audit/verification rights over payroll and labour-subcontract payment flows
• Commission independent labour and payroll review in higher-risk contexts or when red flags emerge (duplicate IDs, shared accounts, opaque providers, intimidation reports), pausing disbursement pending reviewMitigation Resources
Conduct integrity due diligence and issue tracking for labour subcontracting and payroll arrangements; require worker identity and attendance reconciliation, traceable wage payments, disclosed labour providers, accessible grievance records, and pause support where ghost worker, coercion, or exploitation indicators remain unresolved.
Investor integrity due diligence and monitoringScreen labour subcontractors, recruitment agents, security providers, and related counterparties involved in labour supply and payroll arrangements; verify beneficial ownership where feasible, related-party links, PEP exposure, and sanctions risks, and escalate concerns or stop engagement where red flags remain unresolved.
Counterparty integrity screening and due diligenceStakeholder Exposure
Exposure includes wasted public funds; higher risk of labour disputes and safety incidents; weak subcontract governance;risk of labour non-compliance; and loss of public trust.
Decision Point
Before approving subcontractor changes and payroll-related claims, verify worker registers, payroll records, and ownership information where available.
Mitigation Actions
• Verify worker registers and attendance against payroll submissions (site headcounts, unique IDs, traceable payments)
• Require documented approval for subcontractor appointments and changes
• Maintain auditable labour records, and document inconsistencies (e.g., duplicate worker IDs, shared accounts, unexplained cash use)
• Maintain a subcontractor and labour-provider register and require disclosure of recruitment agents, services, and fees
• Require approval for high-risk labour and security providers
• Maintain an accessible worker grievance and whistleblower channel, ensuring complaints are recorded and their resolution is tracked
• Require corrective action for wage withholding, coercion, and abusive deductions, adopting swift remedy in case of critical inconsistencies (suspend subcontractors, require replacement)
• Require the use of traceable wage payment systems, including project bank accounts, to ensure direct payment of wages into workers’ personal bank accounts
• Refer credible labour and subcontracting fraud and intimidation concerns to independent oversight bodies, documenting corrective actions
• Publish and maintain public access to key labour-provider and subcontracting records, including approved and dirt-listed subcontractorsMitigation Resources
Require subcontractors, recruitment agents, security providers, and other third parties involved in workforce supply or payroll to comply with anti-corruption and integrity requirements; require reporting of ghost worker, payroll, coercion, or exploitation concerns, and apply the same requirements to lower tiers.
Supplier and subcontractor integrity controlsRequire disclosure of labour subcontractors, recruitment agents, security providers, and related labour providers; review beneficial ownership information where available, related-party links, PEP exposure, and sanctions risks, and apply exclusion rules or escalate red flags where permitted.
Counterparty integrity screening and due diligencePublish and maintain public access to key labour-provider and subcontracting records, including approved subcontractors, labour-provider disclosures, worker grievance channels, and reasons for related decisions, with only lawful redactions.
Transparency and data disclosure standardsStakeholder Exposure
Exposure includes worker exploitation and community harm; intimidation by labour and security networks; limited access to payroll and subcontract records; retaliation risk for reporting; and reduced accountability for labour standards.
Decision Point
During project execution, submit access to information to request clarification on labour conditions. Decide whether to (a) escalate through oversight channels to report credible labour abuse and signs of ghost workers , or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project execution documentation, including labour records across the supply chain (employment contracts and subcontracting agreements, records of strikes, health and safety audit reports, grievance logs)
• Mobilise communities to identify critical labour issues (wage delays, coercion, intimidation, excessive deductions, inflated records)
• Engage available grievance channels and oversight bodies, including labour inspectorates, when serious and repeated issues are identified (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)Mitigation Resources
Submit protected complaints or reports through worker grievance, labour inspectorate, audit, ombud, or other oversight channels where ghost workers, wage withholding, coercion, abusive deductions, or opaque labour-provider practices are identified; document evidence and timelines, track case handling, and support safe reporting where retaliation risk is material.
Grievance, complaints, and protected reportingTrack labour and payroll patterns across subcontracting arrangements; compare reported staffing, wage payments, labour-provider disclosures, and grievance patterns with conditions in practice, and flag ghost worker, leakage, coercion, or exploitation indicators.
Expenditure tracking and leakage analysis -
Phase 5: Project Execution
Accounting fraud, cash leakage and money laundering through project accounts
Project accounts are used to conceal fraud and launder proceeds through opaque transactions, related-party payments and weak audit trails.
Red Flags & Indicators
- Payments flow to offshore, intermediary, or related parties for vaguely described services, with weak documentation and frequent last-minute payee changes.
- Use of shell companies, layered subcontracting, split invoicing, circular and back-to-back fund transfers to obscure ultimate beneficiaries.
- Large cash withdrawals, advances, or “petty cash” floats are not matched to verified work, deliveries, or approved payments.
- Beneficial ownership and related-party disclosures are missing, inconsistent, delayed, or actively resisted.
- Period-end adjustments, credit notes, and backdated invoices materially reallocate costs without a complete audit and approvals trail.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes payment delays from flagged transactions; increased fraud, anti-money laundering, and anti-bribery and corruption risk; contract disputes and termination risk; and reputational risk.
Decision Point
Before approving payments, verify counterparties, confirm supporting documentation for services provided, and ensure traceable bank payment trails.
Mitigation Actions
• Use controlled systems to manage accounts and payments (no cash, no undocumented advances, segregation of roles, dual approval thresholds)
• Maintain complete and auditable record for each payment
• Verify counterparties and services before payment (contract; purchase order, deliverable evidence, invoice validation)
• Require consistent payee bank details
• Establish a system to detect and flag unusual changes in payees and offshore payment routing, triggering enhanced review
• Manage related-party and ownership risks (collect beneficial ownership and affiliation information where feasible, require disclosures, document mitigations)
• Limit multi-layered subcontracting where tiers, ownership, and payment flows are not fully disclosed
• Use internal compliance escalation processes and whistleblower channels, where available, to report unusual transactions (split invoices, circular payments, backdated invoices, end-period adjustments), pausing payments pending investigation and documented resolutionMitigation Resources
Assess fraud and money-laundering risks in project accounts; apply prevention, detection, investigation, and corrective-action controls to payees, related-party payments, supporting records, unusual transaction patterns, and transaction monitoring.
Fraud control managementSet clear approval limits, sign-off steps, and segregation of duties for project accounts, payee changes, related-party payments, supporting records, and transaction review; ensure no single person initiates, approves, and records the same payment.
Approval authority and segregation of dutiesFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes a higher risk of anti-money laundering sanctions; opaque cash flows; funding suspension and reputational damage; increased risk of related-party payments; costly forensic accounting audits; and exit risk if controls fail.
Decision Point
Before releasing funds, verify whether project account controls and audit trails are verifiable, pausing disbursement pending independent review when discrepancies are identified.
Mitigation Actions
• Condition disbursements on accounting transparency and periodic transaction monitoring (supporting documentation, payee controls, segregation of duties)
• Treat unexplained cash leakage and offshore routing as a suspension trigger
• Require disclosure of related-party payments and beneficial ownership information
• Include audit/verification rights over project accounts, subcontract payment flows, and end-period adjustments
• Commission independent financial and accounting review when anti-money laundering red flags emerge (split invoices, circular transfers, unusual payee changes, backdated invoices, unexplained advances), pausing disbursement pending reviewMitigation Resources
Conduct integrity due diligence and issue tracking for project accounts, payees, related-party payments, supporting records, and transaction monitoring; set conditions, enhanced review triggers, and follow up until risks are resolved or support is paused.
Investor integrity due diligence and monitoringEmbed anti-corruption, audit-access, cooperation, and remedy clauses in financing or project agreements governing project accounts, payees, related-party payments, supporting records, and transaction monitoring; invoke them when red flags escalate or account integrity is questioned.
Contracting integrity clauses and legal safeguardsFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes diversion of public funds; increased audit, legal and anti-money laundering risk; reduced accountability over spending; delays as payments are investigated; and loss of public trust in financial controls.
Decision Point
Before approving payment certificates, require evidence of services provided and traceable audit trails; pause certification and trigger a financial audit in case of critical discrepancies.
Mitigation Actions
• Establish and enforce payee controls (approved bank accounts, verified supporting documents, restricted cash and advance payments)
• Maintain complete and auditable record for each payment certificate
• Require disclosure of related-party arrangements and key subcontracting and payment flows
• Establish a system to detect and flag unusual changes in payees, offshore payment routing, split invoices, and backdated adjustments in payees, triggering enhanced review, suspending payment pending review
• Refer credible concerns of fraud and money laundering to independent oversight bodies; suspending payment pending documented review and resolutionMitigation Resources
Assess fraud and money-laundering risks in project accounts; apply prevention, detection, investigation, and corrective-action controls to payees, related-party payments, supporting records, and unusual transaction patterns.
Fraud control managementSet clear approval limits, sign-off steps, and separation of duties for project accounts, payee changes, related-party payments, supporting records, and transaction review; ensure no single official initiates, approves, and records the same payment.
Approval authority and segregation of dutiesPublish and maintain public access to key project account and payment records, including payment decisions, related-party disclosure requirements, and reasons for material payment holds or adjustments, with only lawful redactions.
Transparency and data disclosure standardsFailure Cases
Stakeholder Exposure
Exposure includes opaque project finances and beneficiaries; limited accountability over spending; limited access to audit trails; and retaliation exposure when probing payments.
Decision Point
During project execution, submit access to information to request payment and payee information. Decide whether to (a) escalate through oversight channels to report credible signs of financial misconduct and lack of transparency, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project execution documentation, including payment certificates, information on authorised contractual payees, beneficial ownership of payees, agent disclosures and aggregate payment information
• Mobilise communities to identify payment red flags (offshore payees, repeat related parties, unusual payee changes, split invoices, unexplained advances)
• Engage available grievance channels and oversight bodies to report credible signs of financial misconduct (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)Mitigation Resources
Track available payment and contract disclosures over time; compare reported payments, related-party links, payee changes, split invoices, and unexplained advances to identify leakage or other anomalies.
Expenditure tracking and leakage analysisReview available beneficial ownership and agent disclosures linked to payees and related-party payments to identify hidden control, affiliated actors, or high-risk networks.
Beneficial ownership transparency and interoperabilityReview publicly disclosed payment and contract records, including aggregate payment information, related-party disclosures, and published reasons for material payee changes or advances; identify disclosure gaps, missing justifications, or unexplained patterns, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
Good Practices
-
Phase 5: Project Execution
Non-delivery and ghost works
The project is not executed, or is only partially delivered, despite funds being committed or spent.
Red Flags & Indicators
- Reported outputs and milestones are not supported by site verification, geotagged evidence, and independent checks.
- Advance payments or disbursements continue despite limited mobilisation, minimal equipment on site, and low physical progress.
- Schedules are repeatedly re‑baselined and delays reclassified without a credible recovery plan.
- Handover, defects, and completion documentation is incomplete, yet certificates are issued to trigger payments.
- Controls for tracking and verifying physical progress are weak or absent.
- Alignment between physical and financial progress control systems is weak or absent.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes payment freeze; higher risk of contract termination; debarment and enforcement risk; increased risk of disputes and recovery claims; severe cashflow stress; and reputational damage from non-delivery. allegations.
Decision Point
Before submitting payment claims, verify evidence of completion of on-site outputs; implement a documented remediation plan when physical progress is not demonstrated.
Mitigation Actions
• Adopt recognised, verifiable methods to measure physical progress of works
• Verify work completion before claiming payment (site diaries, measurements, photos and geotagged evidence where used, supervisor and engineer sign-offs)
• Do not process payment claims without supporting evidence of completion
• Separate site supervision and progress reporting from invoice preparation and payment certification roles
• Maintain an auditable evidence pack for each milestone and payment claim
• Document corrective actions taken to complete unfinished works (recovery plan, rework, revised milestones)
• Use internal compliance escalation processes and whistleblower channels, where available, to report any pressure to certify ghost works or issue completion certificates without evidence, pausing payments pending investigation and documented resolutionMitigation Resources
Control work progress, site evidence, delivered quantities, completion records, and records supporting claims through formal evidence requirements, site or measurement records, independent review, and verification before claim submission, internal sign-off, or payment processing.
Change control, delivery verification, and payment integrityAssess fraud risks and apply prevention, detection, investigation, and corrective-action controls to work progress, site evidence, delivered quantities, completion records, and records supporting claims, including ghost works, inflated progress claims, or unsupported completion certificates.
Fraud control managementFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes higher risk of write-downs, disbursement suspension and legal recovery costs; heightened ESG and reputational risk; litigation and fraud risk; and exit pressure.
Decision Point
Before disbursement, request evidence of physical progress; pause disbursements and apply contractual remedies where evidence is insufficient, inconsistent, or unreliable.
Mitigation Actions
• Condition disbursement on independent verification of progress (engineer and monitor reports, surprise audits and risk-based site spot checks, geotagged evidence where used)
• Require reconciliation of actual physical progress with the milestone schedule and bill of quantities
• Require complete completion and acceptance evidence for each payment (test results, punch list status, handover documentation, retention calculations)
• Treat gaps, repeated re-baselining, and weak mobilisation as suspension triggers
• Include audit/verification rights over progress records, site logs, payment certificates, and advance-payment utilisation
• Pause funding and trigger contractual remedies until evidence of completion is presentedMitigation Resources
Require, through financing conditions, formal evidence and independent verification for reported progress, delivered quantities, site evidence, completion records, and payment support before disbursement decisions.
Change control, delivery verification, and payment integrityUse an independent technical adviser to verify reported progress, delivered quantities, site evidence, and completion support, and to challenge weak or inconsistent evidence before disbursement decisions.
Independent technical due diligence and monitoringFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes fiscal loss and no service delivered; higher litigation, audit and investigation risk; increased risk of project delays and restart costs; and loss of public trust.
Decision Point
Before certifying outputs and payments, verify evidence of completion; suspend certification and trigger reviews when discrepancies persist.
Mitigation Actions
• Require application of recognised, verifiable methods to measure physical progress of works
• Certify payments only against verified completion evidence (site measurements, inspection reports, test results, punch list and handover status; geotagged evidence where feasible)
• Maintain an auditable inspection and acceptance file
• Apply surprise audits, risk-based spot checks and independent and second-line verification for high-value, high-risk milestones
• Commission independent review in case of repeat re-baselining, weak mobilisation, and inconsistencies between reported progress and site reality, suspending payments pending review
• Refer credible concerns of ghost works or falsified certification to independent oversight bodies; suspending payment pending documented review and resolution
• Publish project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Require verified progress, delivered quantities, site measurements, inspection reports, and completion evidence before approving certification, acceptance, or payment.
Change control, delivery verification, and payment integrityMaintain internal oversight of controls governing progress records, completion evidence, and payment verification; test controls, follow up findings, and focus assurance on high-risk certifications, payments, or inconsistencies between reported progress and site reality.
Risk-based internal audit planningPublish and maintain public access to key progress and completion records, including certified milestones, completion decisions, and reasons for payment holds or corrective actions, with only lawful redactions.
Transparency and data disclosure standardsFailure Cases
Stakeholder Exposure
Exposure includes community distrust and grievances; limited access to phisical evidence and records; intimidation and retaliation risk when documenting non-delivery; and weak accountability.
Decision Point
During project execution, submit access to information to clarify physical progress milestones. Decide whether to (a) escalate through oversight channels to report non-delivery and lack of transparency, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project execution documentation, including progress reports and certificates, acceptance and handover records, and major payment milestones
• Mobilise communities to identify project delays against observable outputs
• Engage available grievance channels and oversight bodies to report credible signs of non-delivery (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Use independent monitoring or social accountability to compare disclosed progress and completion records with observable outputs, site conditions, and affected services in practice; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilityTrack reported progress, payment milestones, and delivered outputs over time; compare them with observable delivery on the ground and flag repeated claims, delivery gaps, or other signs of non-delivery.
Expenditure tracking and leakage analysisReview publicly disclosed progress and completion records, such as progress certificates, acceptance or handover records, and major payment milestones; identify disclosure gaps, missing justifications, or inconsistencies with observable delivery, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
-
Phase 5: Project Execution
Manipulated progress reporting and concealment of delays or defects
Performance data and reporting are manipulated to hide delays, defects and cost overruns, weakening oversight and reducing the chance of timely corrective action.
Red Flags & Indicators
- Progress reports show repeatedly high completion that is inconsistent with site observations, material usage, and daily logs.
- Delays are routinely reclassified as excusable, and schedule updates are not supported by contemporaneous evidence.
- Defect records and supervision reports are edited, delayed, and closed without verifiable corrective action.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes hidden delays and defects; elevated risk of payment and liquidated damages disputes; unexpected rework and claims; audit exposure from inaccurate records; and reputational damage when manipulated reports are exposed.
Decision Point
Before submitting progress and defect reports, verify that supporting evidence aligns with reported progress and the updated schedule; pause submission and correct the record through internal review.
Mitigation Actions
• Adopt recognised, verifiable methods to measure physical and financial progress of works
• Adopt recognised methods to control project schedules and deadlines (document assumptions, delay evidence, and approved re-baselines; and avoid reclassifying delays without written justification and supporting records)
• Require that progress reports are grounded in verifiable evidence (site diaries, measurements, photos, test results, inspection and certification records)
• Require second-line verification of progress for high-value, high-risk milestones
• Use digital tools that auto timestamp entries to avoid falsification or backdating of progress reports
• Maintain complete and auditable registers of defects and non-conformance reports (owner, due date, closure evidence)
• Adopt a system that do not close defects without verified corrective action
• Require corrective actions and recovery plans to include documented milestones and assigned responsibilities
• Use internal compliance escalation processes and whistleblower channels, where available, to report any pressure to conceal delays, defects, or cost impactsMitigation Resources
Control progress reports, schedule records, defect logs, and supporting site evidence through formal evidence requirements, measurement records, defect-closure evidence, and verification before submission or internal sign-off.
Change control, delivery verification, and payment integrityStakeholder Exposure
Exposure includes misleading reporting; late discovery of overruns and defects; higher governance and ESG risk; decrease of project value; and risk of disbursement decisions made on unreliable data.
Decision Point
After receiving progress reports, proceed with independent verification; pause support and require enhanced monitoring where inconsistencies persist.
Mitigation Actions
• Condition disbursement on independent verification of progress, quality, and defects status (engineer and monitor reports, surprise audits and risk-based site spot checks, geotagged evidence where used)
• Require reconciliation of reported completion with measurable quantities and the schedule baseline
• Treat repeated inconsistencies (high completion vs site evidence, unsupported “excusable” delay reclassifications, closed defects without proof) as suspension triggers
• Include audit/information rights over progress, quality, and defects records
• Require timely disclosure of corrective actions, updated recovery schedules and re-baselines, and verifiable defect closure evidence for material delays and quality issues
• Pause funding and trigger contractual remedies until evidence of completion is presentedMitigation Resources
Use an independent technical adviser to verify reported progress, measurable quantities, delay status, defect status, and supporting site evidence, and to challenge weak or inconsistent evidence in progress reports, schedule updates, defect logs, or rebaselines before disbursement decisions.
Independent technical due diligence and monitoringStakeholder Exposure
Exposure includes cost overruns and poor quality; high risk of delayed interventions and remediation costs; increased audit and legal risks for inaccurate reporting; reduced accountability for delays; and loss of public trust.
Decision Point
Before approving progress report require inspection and records checks; or reject the report and require corrective actions when evidence is unsupported.
Mitigation Actions
• Verify progress reporting against recognised, verifiable evidence (inspection logs and reports; audit and test results; quality assurance and qualify control evidence) and measurable quantities (bill of quantities and measurement records)
• Apply surprise audits, risk-based spot checks and independent and second-line verification for high-value, high-risk packages and milestones
• Separate supervision and progress reporting from certification and payment approval roles
• Require verifiable defect and non-conformity report closure evidence
• Maintain an auditable record of material delays, defects, agreed remediation plans and a performance record (including baselines, revisions, approvals, and supporting evidence)
• Publish project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Require and verify progress reports, schedule records, inspection logs, measurement records, test results, defect records, and defect-closure evidence before approving certification, rebaselines, or payment.
Change control, delivery verification, and payment integritySet clear approval limits, sign-off steps, and separation of duties for progress reports, schedule updates, defect records, rebaseline decisions, and payment approvals; ensure no single official prepares, approves, and records the same action.
Approval authority and segregation of dutiesPublish and maintain public access to key progress and defect records, including approved rebaselines, material delays, defect status, remediation plans, and reasons for material changes, with only lawful redactions.
Transparency and data disclosure standardsStakeholder Exposure
Exposure includes mislieading progress reporting; limited access to true performance data; high risk of defects; delayed accountability; and risk of retaliation when challenging project delivery.
Decision Point
During project execution, submit access to information to clarify project progress and delivery milestones. Decide whether to (a) escalate through oversight channels to report non-delivery and lack of transparency, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project execution documentation, including progress reports and certificates, acceptance and handover records, major payment milestones, inspection summaries, defect and non-conformity report status
• Mobilise communities to identify evidence of project delays, defects, and service impacts against public milestones and observable site conditions
• Engage available grievance channels and oversight bodies to report credible signs of non-delivery (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Use independent monitoring or social accountability to compare disclosed progress and defect records with observable site conditions, delivery on the ground, and service impacts; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilityReview publicly disclosed progress and defect records, such as progress certificates, inspection summaries, and defect or NCR status; identify disclosure gaps, missing justifications, or inconsistencies with observable delivery, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsRequest access to non-public decision records, such as approvals of rebaselines, decisions on defect closure, or internal explanations for delayed or incomplete works, so hidden decisions, missing rationales, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparency
Phase 6 5 risks during the Operation & Maintenance phase
-
Phase 6: Operation & Maintenance
Bribery, collusion and intimidation in O&M contract awards and renewals
Bribes or collusion influence the award, renewal, or renegotiation of operation and maintenance (O&M) contracts, locking in poor performance and inflated costs.
Red Flags & Indicators
- Single-source award, renewal and extension of O&M contract without documented competition and KPI evidence.
- KPI or performance verification reports lack raw data, show inconsistent methods, or stay uniformly positive despite service complaints.
- Undisclosed intermediaries negotiating award, renewal and extension of O&M contract.
- Unusual meetings, gift giving and hospitality, or pressure to “smooth” evaluations, decisions, or contractual terms during award and renewal period.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes unfair access to O&M awards and renewals; pressure to use agents or offer improper advantages; higher risk of debarment and termination of contracts; inflated O&M costs; increased performance liabilities; and reputational risk.
Decision Point
During bidding or renew of O&M contracts, rely on verifiable performance data, KPI evidence, and a formal documented process; escalate if signs of solicitation or collusion arise.
Mitigation Actions
• Prepare O&M renewal and extension submissions with verifiable O&M performance evidence (KPI source data where available, incident and outage logs, maintenance records, a value-for-money rationale)
• Maintain a clear record of O&M bidding and renewal-related interactions (meetings, attendees, topics, hospitality offered or received, requests, communications, decisions, approvals, commitments)
• Use formal and transparent channels during the O&M bidding and renewal process, avoiding informal, undocumented side understandings
• Use written contracts with defined deliverables and transparent fees applied to O&M advisers and intermediaries in bidding and renewal processes
• Ban/reject contractual clauses where success fees paid to advisers and consultants is linked to approvals or “access” claims
• Apply conflict-of-interest checks for partners, advisers and intermediaries
• Adopt a lobbying policy that sets clear limits on gifts and hospitality and applies to agents and intermediaries
• Use internal compliance escalation processes and whistleblower channels, where available, to report any solicitation, pressure to alter performance evidence, or collusion signalsMitigation Resources
Require consultants, agents, advisers, and other third parties involved in O&M award, renewals, extensions, or renegotiations to comply with anti-corruption and integrity requirements; require reporting of suspected bribery, collusion, or conflicts-of-interest, and apply the same requirements to lower tiers.
Supplier and subcontractor integrity controlsRequire conflict-of-interest declarations and documented conflict management for advisers, partners, and relevant staff involved in O&M award, renewals, extensions, or renegotiations; exclude conflicted parties from the decision process until conflicts are resolved and recorded, and record gifts, hospitality, and other renewal-related interactions relevant to the decision.
Conflict-of-interest management and ethics controlsFailure Cases
Stakeholder Exposure
Exposure includes locked-in underperforming operator and inflated O&M costs; decrease in project value; higher ESG and integrity risk around award and renewal decisions; higher audit, sanctions and dispute risk; and reputational risk.
Decision Point
Before committing, request independently verifiable O&M performance evidence and an auditable process.
Mitigation Actions
• Condition support on documented O&M evidence of performance (performance against KPIs, cost and service outcomes, value-for-money case, market testing)
• Require disclosure of O&M contractual terms, KPI methodology and source data, advisers’ and agents’ roles and fees
• Treat single-source O&M award or renewal without evidence as a no-go
• Treat repeated O&M performance inconsistencies as suspension triggers
• Include audit/verification rights over performance records and decision files
• Commission independent review when O&M reports lack raw data, methods change, results remain uniformly positive despite complaints, or signs of bribe and collusion emerge
• Pause funding pending review and corrective actionMitigation Resources
Conduct integrity due diligence and issue tracking for O&M award, renewal, extension, or renegotiation decisions; require documented renewal justifications, KPI source data, market-testing records where feasible, and disclosure of adviser or agent roles and fees, and pause support where red flags remain unresolved.
Investor integrity due diligence and monitoringUse an independent technical adviser to review KPI source data, service outcomes, market-testing evidence, and renewal support, and to challenge weak, inconsistent, or unsupported evidence in O&M award, renewal or extension decisions.
Independent technical due diligence and monitoringFailure Cases
Stakeholder Exposure
Exposure includes inflated O&M spend and poor service outcomes; compromised KPI verification and weak accountability; higher complaint, audit and legal challenge risk; reduced revenue and sustainability; and loss of public trust.
Decision Point
Before approving O&M awards and renewals, verify that transparent criteria and performance evidence support the process and provisions; re-tender or refer for review when red flags arise.
Mitigation Actions
• Establish and apply formal, documented processes to award, renew and extend O&M contracts (KPI performance backed by source data where available, cost and service outcomes, value-for-money, O&M plan, market testing)
• Maintain an auditable record of O&M award, renewal, and renegotiations (engagements, approvals, any KPI methodology changes)
• Apply integrity controls (conflicts-of-interest declarations and recusals, anti-bribery policies, meeting registers, disclosure of advisers and their beneficial ownership)
• Publish O&M award and renewal decisions, renewal justifications, decisions on single-source renewal, advisers appointed, contract and extension terms, applicable KPI and methodology, performance reports, O&M plan, market testing
• Establish an accessible and secure complaints and grievance mechanism
• Refer credible bribery and collusion concerns to independent oversight bodiesMitigation Resources
Apply standard procurement documents and maintain formal award, renewal and extension records, including technical criteria, KPI source data, market-testing records where feasible, adviser roles, extension terms, complaints, and extension decisions; document any approved changes to renewal criteria or KPI methodology and keep a complete audit trail.
Tendering, evaluation, and complaints integrityRequire conflict-of-interest declarations and documented conflict management for officials, advisers, and reviewers involved in O&M award, renewal or extension decisions; enforce recusals, restrictions on hospitality and related contacts, and exclude conflicted parties until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controlsPublish and maintain public access to key award, renewal and extension records, including technical criteria, extension terms, KPI methodology summaries, complaints outcomes, and reasons for related decisions, with only lawful redactions.
Transparency and data disclosure standardsFailure Cases
Stakeholder Exposure
Exposure includes opaque award and renewal decisions; unverifiable KPIs; higher user costs; limited access to performance evidence; reduced accountability for complaints; and retaliation risk when challenging collusion and bribery.
Decision Point
During project operation, submit access to information to clarify O&M performance. Decide whether to (a) escalate through oversight channels to report inconsistent performance and lack of transparency, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project O&M documentation, including O&M award and renewal decisions, renewal justifications, decisions on single-source renewal, advisers appointed, contract and extension terms, applicable KPI and methodology, O&M plan, performance reports and service levels, maintenance records, incident and outage logs, market testing, O&M budget and payment records
• Monitor O&M information and award decisions to identify opaque and single-source renewals, missing KPI evidence, inconsistent methods and unexplained performance
• Mobilise communities around the importance of full transparency of O&M information to ensure value-for-money and accountability
• Engage available grievance channels and oversight bodies to report credible signs of bribery, collusion or undue influence (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)Mitigation Resources
Screen the award and renewal process and performance records for red flags, such as unexplained single-source renewals, missing KPI evidence, inconsistent KPI methods, weak market testing, opaque adviser roles, or implausibly positive performance claims; raise suspected irregularities through audit, ombud, or tender complaints channels.
Procurement red-flag detection, analytics, and escalationRequest access to non-public decision records, such as renewal justifications, decisions on single-source renewal, adviser appointment records, market-testing records, or internal explanations for KPI methodology changes, so hidden decisions, missing rationales, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed renewal and performance records, such as extension terms, KPI results or methodology summaries, market-testing records, and reasons for renewal decisions; identify disclosure gaps, missing justifications, or unexplained changes, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsFailure Cases
-
Phase 6: Operation & Maintenance
Inflated O&M costs, kickbacks and overcharging
Operating costs, spare parts, and service charges are inflated through overpricing, unnecessary works, and kickbacks, undermining service quality and project financial sustainability.
Red Flags & Indicators
- Parts and consumables are priced consistently above benchmarks, with repeated sole-source awards or split purchases used to bypass approval thresholds.
- Maintenance callouts are unusually frequent, duplicative, or poorly justified.
- Non-routine works are approved without clear need or asset-condition evidence
- Invoices and work orders lack delivery notes, service logs, and sign-offs
- Billed quantities and items do not reconcile with inventory issued and parts installed.
- The same suppliers are repeatedly favoured, with unclear commissions, discounts or rebate arrangements.
- Decision-making and approval authority are concentrated among a limited group of individuals.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes overpriced parts and unnecessary maintenance; higher risk of reduced margins and cash leakage through kickbacks; pressure to approve suspect invoices and suppliers; increased risk of disputes, audits, and potential debarment; and reputational risk.
Decision Point
Before approving O&M invoices and spare parts purchases, verify supporting rates, work orders, and inventory logs.
Mitigation Actions
• Adopt and apply an O&M plan, documenting deviations from the plan
• Validate O&M charges against contract rates and benchmark pricing for parts and consumables
• Document reasoning for splitting purchases
• Document any sole-source justification
• Require complete evidence for each invoice and work order (delivery note, job card, asset ID, time logs, supervisor sign-off)
• Reconcile billed items to inventory issuance and installation records
• Apply supplier and subcontractor integrity controls (competitive sourcing where feasible, segregation of roles, traceable payments, no commissions linked to approvals)
• Apply conflict-of-interest and related-party checks for suppliers and subcontractors
• Use internal compliance escalation processes and whistleblower channels, where available, to report pressure to approve unjustified works or inflated invoices
• Pause payments when red flags persistMitigation Resources
Assess fraud risks and apply prevention, detection, investigation, and corrective-action controls to O&M charges, spare parts and service invoices, service quantities, supporting records, and overcharging indicators.
Fraud control managementStakeholder Exposure
Exposure includes reduced cash flows; leakage through non-competitive purchasing; higher ESG and audit risk; increased risk of tariff pressure and social backlash; and decrease in project value.
Decision Point
Before releasing O&M funding, verify benchmarked costs and supporting records; require independent cost review when anomalies persist.
Mitigation Actions
• Condition O&M payments on benchmarked pricing and invoice validation (contract rates, competitive quotes where feasible, parts price benchmarks) and performance evidence (work orders, asset IDs, time logs, sign-offs)
• Treat repeat anomalies as a suspension trigger
• Require disclosure of key suppliers and subcontractors, and related-party arrangements
• Include audit/verification rights over O&M invoices, parts procurement, and subcontract payment flows
• Commission independent review when costs deviate materially from benchmarks, callouts spike without technical justification, and invoices lack delivery and installation evidence, pausing funding pending review and corrective actionMitigation Resources
Conduct integrity due diligence and issue tracking for O&M charges, spare parts procurement, service invoices, related-party arrangements, and subcontract payment flows; require benchmarked pricing, invoice validation, disclosure of key suppliers and related-party arrangements, audit or information rights, and pause support where pricing anomalies, weak delivery evidence, or overcharging risks remain unresolved.
Investor integrity due diligence and monitoringStakeholder Exposure
Exposure includes budget and tariff pressure from inflated charges; overpricing and unnecessary works; higher audit and legal risk; and loss of public trust.
Decision Point
Before approving O&M payments and parts procurement, verify benchmarking and cost control checks; request review when costs appear inconsistent.
Mitigation Actions
• Establish and apply invoice validation and cost benchmarking processes for O&M payments (contract rates, parts price benchmarks, sole-source justification)
• Require complete supporting documentation to authorise invoice and work order payments (purchases, work orders, asset IDs, delivery and installation proof, approvals)
• Establish and apply an O&M plan and programme, documenting deviations from the plan
• Maintain an auditable record of supplier selections, conflicts-of-interest declarations, applicable rates, callout frequency, and price variances
• Publish key service performance and aggregate O&M cost information
• Document instances of repeated pricing inflation and inconsistencies in inventory and installed parts
• Establish an accessible and secure complaints and grievance mechanism
• Refer credible overcharging, integrity and conflicts concerns to independent oversight bodiesMitigation Resources
Require complete supporting records for O&M charges, service quantities, invoices, supplier selections, and payment decisions, and verify them against contract rates, approved works, delivery or installation evidence, and price benchmarks before approving payment.
Change control, delivery verification, and payment integrityAssess fraud risks and apply prevention, detection, investigation, and corrective action controls to O&M charges, service quantities, invoices, supplier selections, pricing anomalies, repeat callouts, undisclosed conflicts, and overcharging indicators.
Fraud control managementStakeholder Exposure
Exposure includes higher user costs and poorer service reliability; limited visibility on parts pricing and scope of work; reduced accountability for budgets and tariffs; and retaliation risk when reporting overcharging.
Decision Point
During project operation, submit access to information to clarify O&M performance. Decide whether to (a) escalate through oversight channels to report overcharging and lack of transparency, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project O&M documentation, including O&M award and renewal decisions, renewal justifications, decisions on single-source renewal, advisers appointed, contract and extension terms, applicable KPI and methodology, O&M plan, performance reports and service levels, maintenance records, incident and outage logs, market testing, O&M budget and payment records
• Monitor O&M information to identify inconsistencies (cost increases without service improvement, repeated downtime, unusual callout frequency)
• Mobilise communities around the importance of full transparency of O&M information to ensure value-for-money and accountability
• Engage available grievance channels and oversight bodies to report suspected overcharging (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)Mitigation Resources
Track reported O&M spending, service outputs, and major cost drivers over time; compare planned and actual spending, service levels, and pricing anomalies to flag leakages, repeated overcharging, or unexplained cost increases.
Expenditure tracking and leakage analysisUse independent monitoring or social accountability to compare disclosed O&M cost and performance records with service delivery in practice; track follow-up actions and raise unexplained gaps through oversight channels.
Independent monitoring, assurance, and social accountability -
Phase 6: Operation & Maintenance
Ghost operations (fictitious maintenance, parts, or labour)
Maintenance work, parts, or staffing are falsely reported (e.g., ghost workers, phantom services, fictitious parts), enabled by weak asset records and verification controls.
Red Flags & Indicators
- Work orders are closed without verifiable site evidence (photos, GPS, time stamps, sign-offs), with repeated copy-paste narratives or identical timestamps across jobs.
- Parts are billed or issued without serial numbers, asset references, and traceable usage records.
- Absence of an updated inventory of infrastructure assets or inventory records show inconsistencies, and unexplained stock reductions and variances.
- Absence of standards and clear guidelines for infrastructure asset maintenance.
- Headcount or overtime spikes do not match workload, including duplicate and invalid identities or “temporary” staff who never appear on site.
- Duties are not separated: one person initiates, approves, and certifies O&M work, with limited independent spot checks or re-performance checks.
- Asset condition worsens despite “completed” maintenance, with recurring breakdowns in the same locations or shortly after servicing.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes payments for non-existent work, staff or parts; inventory losses and unexplained variances; high risk of fraud allegations, audits and potential debarment; increased performance penalties and outages from neglected assets; and reputational risk.
Decision Point
Before closing work orders and certifingy labour and parts, identify whether only with verifiable on-site evidence; keep items open and trigger re-inspection
Mitigation Actions
• Maintain auditable maintenance records (work orders linked to asset IDs, job logs, photos and GPS evidence where used, supervisor sign-offs, parts issue notes and serials)
• Reconcile parts issuance and inventory to work orders (serial numbers and asset records, stock counts, variance logs)
• Document shrinkage and repeat variances before certifying costs
• Segregate duties for requesting, verifying, and approving work and invoices
• Apply surprise audit and risk-based independent spot checks for high-value or repeat-failure assets, retaining an auditable evidence pack
• Use internal compliance escalation processes and whistleblower channels, where available, to report any pressure to close work orders or certify non-existent works
• Stop invoicing and request re-inspection when evidence cannot be producedMitigation Resources
Control maintenance work orders, parts records, labour records, and completion evidence through formal evidence requirements, asset-linked records, independent review, and verification before invoicing or internal sign-off.
Change control, delivery verification, and payment integrityAssess fraud risks and apply prevention, detection, investigation, and corrective action controls to maintenance work orders, parts records, labour records, inventory reconciliation, and completion evidence, including ghost workers, phantom services, fictitious parts, or unexplained variances.
Fraud control managementStakeholder Exposure
Exposure includes uncontrolled maintenance funds; higher risk of asset deterioration and outage; fraud and ESG risk; higher remedial capex and service disruption; decrease in project value; and reputational harm.
Decision Point
Before acceptin O&M outputs and release payments, verify with independent asset/site verification, or suspend payment and require audit sampling when discrepancies appear
Mitigation Actions
• Condition payments on verifiable work order evidence (asset ID, job logs, parts issued and serials where applicable, supervisor sign-offs, photos and GPS evidence where used)
• Require surprise audit and risk-based spot checks by an independent engineer or monitor body
• Treat repeated discrepancies (copy-paste work orders, identical timestamps, unexplained inventory shrinkage, headcount and overtime spikes, recurring failures) as a suspension trigger
• Require disclosure of staffing records and key parts procurement and inventory records for high-risk assets and subcontractors
• Include audit/verification rights over O&M outputs
• Commission independent operational review when discrepancies remain, pausing payments pending review and corrective actionMitigation Resources
Require, through financing conditions, formal evidence and independent verification for maintenance work orders, parts records, labour records, inventory or issuance records where relevant, and completion evidence before disbursement decisions.
Change control, delivery verification, and payment integrityUse an independent technical adviser or monitor to verify work-order evidence, parts records, labour records, inventory reconciliation where relevant, and completion evidence, and to challenge weak or inconsistent support for reported maintenance activities.
Independent technical due diligence and monitoringStakeholder Exposure
Exposure includes spending without maintenance delivered; payroll and parts fraud; asset failures and service disruptions; higher risk of audit, investigation and recovery actions; and loss of public trust.
Decision Point
Before approving O&M work orders and payroll related payments, conduct physical verification and segregation-of-duties checks; stop approval in case of discrepancies.
Mitigation Actions
• Establish and apply a controlled work order and approval system (asset ID linkage, job logs, parts issue records and serials where applicable, supervisor sign-offs, photos and GPS evidence where used)
• Require evidence-based completion before payment certification
• Conduct internal audit in parts and staffing records (inventory counts, variance logs, roster-to-attendance-to-payroll reconciliation), documenting discrepancies
• Require independent spot checks when discrepancies persist
• Publish key maintenance performance metrics, maintenance records and exception reporting (repeat failures, rework, high callout rates)
• Refer credible fraud concerns to independent oversight bodiesMitigation Resources
Require complete maintenance records, including work orders, asset-linked job logs, parts issue records, labour records, and completion evidence, and verify them before approving certification or payment.
Change control, delivery verification, and payment integrityPrioritise internal audit and follow-up on maintenance work orders, parts records, labour records, completion evidence, and payment approvals; test controls, investigate repeat anomalies, and focus assurance on high-risk assets, repeated discrepancies, and suspected fictitious maintenance, parts, or labour.
Risk-based internal audit planningStakeholder Exposure
Exposure includes limited service improvement despite spend; low transparency on work orders and staffing; reduced ability to verify outputs; accountability gaps for asset condition; high risk of retaliation when flagging discrepancies.
Decision Point
During project operation, submit access to information to clarify O&M performance and costs. Decide whether to (a) escalate through oversight channels to report suspected fraudulent reporting and charging, and lack of transparency, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project O&M documentation, including O&M plan, applicable KPI and methodology, performance reports and service levels, maintenance records, incident and outage logs, O&M budget and payment records
• Monitor service reliability (downtime, repeat faults, response times) to identify inconsistencies with performance trends and claimed work completion
• Mobilise communities around the importance of full transparency of O&M information to ensure value-for-money and accountability
• Engage available grievance channels and oversight bodies to report suspected fictitious maintenance or staffing (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)Mitigation Resources
Track reported maintenance outputs, staffing, callout patterns, and spending against service reliability trends, such as downtime, repeat faults, response times, and rework; flag repeated maintenance claims, unexplained staffing patterns, or claimed work that does not improve service performance.
Expenditure tracking and leakage analysisUse independent monitoring or social accountability to compare disclosed maintenance and performance records with service reliability and maintenance delivery in practice; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilityReview publicly disclosed maintenance and performance records, such as maintenance plans, KPI dashboards, exception reports, and major maintenance updates; identify disclosure gaps, missing justifications, or inconsistencies with service reliability, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standards -
Phase 6: Operation & Maintenance
Bribery in service connections, tariffs and customer service
Officials or operators demand bribes for new connections, reconnections, priority service, and tariff exemptions, creating unfair access and revenue losses.
Red Flags & Indicators
- Complaints or recurring signals of unofficial payments, “fixers”, or “brokers” linked to connections, reconnections, or O&M services
- High volumes of “priority” service, fee waivers, or exceptions without documented eligibility, with discretionary approvals concentrated in specific staff or offices
- Repeated billing adjustments and credits, estimated readings, or meter swaps without a traceable audit trail, including missing receipts for official fees
- Unequal access or response times across areas and user groups, including repeated reconnections for the same customers despite arrears
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to accept unofficial payments and favors; revenue leakage from billing and meter manipulation; higher risk of complaints and unrest over unequal access; increased regulatory and enforcement risk; and reputational risk for the operator.
Decision Point
During connections, reconnections, and exception processes, follow formal procedures, apply approved fees, require receipted payments, and reject unofficial requests.
Mitigation Actions
• Standardise and publish connection, reconnection and exception steps, fees, eligibility rules, applicable priorities, and service timelines
• Adopt a zero-tolerance policy regarding side-payments, “priority” handling outside rules, and use of unofficial brokers
• Operate accessible whistleblower and complaints protected channels for reporting and handling unethical or illegal activities within and outside the organisation
• Separate fee collection from approval and field execution roles
• Ensure all payments are properly recorded and documented
• Reconcile daily collections to system records and document variances
• Identify hotspots (offices, routes, agents) for targeted audit and enhanced review, documenting remediation actions
• Maintain a complete and auditable customer case file (application, eligibility and waiver evidence, meter work orders, billing adjustments, approvals, audit trails for credits, estimated readings, and meter changes)
• Use internal compliance escalation processes and whistleblower channels, where available, to report any solicitation and extortionMitigation Resources
Set and enforce anti-bribery controls for service connection applications, reconnections, tariff and fee decisions, waivers, customer service decisions, and complaints handling; prohibit side-payments, unofficial brokers, and priority handling outside approved rules, require auditable records of applications, site visits, payments, waivers, service requests, and complaints, and escalate solicitation or improper payment risks.
Anti-bribery management and controlsSet clear approval limits, sign-off steps, and separation of duties for connection applications, fee collection, waivers, field execution, billing adjustments, service decisions, and complaints records so no one person can initiate, approve, execute, and record the same action.
Approval authority and segregation of dutiesFailure Cases
Stakeholder Exposure
Exposure includes reduced returns; social backlash and ESG risk from unequal access; higher regulatory and legal risk; and reputational risk.
Decision Point
Continue support only where fee collection and billing controls are demonstrably enforced, or pause support and require corrective action when leakage indicators rise
Mitigation Actions
• Condition support on revenue and approval controls for connections, reconnections, exemptions, and billing (published fee schedule, receipted payments, segregation of roles, audit trail for waivers, credits and meter changes)
• Treat credible bribery signals as a suspension trigger
• Require disclosure of connection backlogs, fees, exemptions and waiver policies, complaint records and outcomes, and collection data by area and office
• Include audit/verification rights over billing adjustments, priority service and credit decisions, meter changes and exception approvals
• Commission independent review when discretion is unexplained (spikes in “priority” service, waivers without eligibility evidence, repeated missing receipts, geographic disparities), pausing funding pending review and corrective actionMitigation Resources
Conduct integrity due diligence and issue tracking on service connection, reconnection, billing, waiver, and exception controls; require published fee rules, receipted payments, segregation of duties, audit trails for waivers, credits, and meter changes, disclosure of complaint and backlog patterns, and pause support where bribery, unexplained discretion, or revenue-leakage risks remain unresolved.
Investor integrity due diligence and monitoringUse an independent technical adviser or assurance reviewer to examine connection, reconnection, billing, waiver, and exception decisions where discretion is unexplained, including spikes in “priority” service, waivers without eligibility evidence, repeated missing receipts, or geographic disparities, and require verified remediation before support resumes.
Independent technical due diligence and monitoringStakeholder Exposure
Exposure includes revenue losses and inequitable access; increased complaints and legal challenges; reduced credibility of the service provider and regulator; and loss of public trust.
Decision Point
Before approving connections, reconnections, exemptions and tariff adjustments, request documented proof of eligibility and official receipted payments.
Mitigation Actions
• Publish connection, reconnection and exemption procedures, fee schedules, eligibility rules (waivers and priority), and tariff-setting methodology
• Maintain a service record of applications and decisions with reasons and timestamps
• Separate approval, fee collection, and field execution roles
• Ensure all payments are properly recorded and documented
• Identify audit high-risk offices for billing corrections, meter changes, waivers, and missing receipts, documenting unusual patterns
• Operate accessible whistleblower and complaints protected channels for reporting and handling unethical or illegal activities within and outside the organisation
• Refer credible extortion and bribery concerns to independent oversight bodiesMitigation Resources
Set clear approval limits, sign-off steps, and separation of duties for connection and reconnection applications, tariff and waiver decisions, fee collection, field execution, billing adjustments, and complaint decisions so no single official can initiate, approve, execute, and record the same action.
Approval authority and segregation of dutiesOperate protected complaints and grievance channels for complaints about service connections, billing, waivers, priority service, and related customer-service decisions; document evidence, timestamps, case handling, and remedies, and protect complainants from retaliation.
Grievance, complaints, and protected reportingPublish and maintain public access to connection and reconnection procedures, fee schedules, waiver and priority-service rules, tariff-setting methodology, key service-decision records, and complaint outcomes, with only lawful redactions.
Transparency and data disclosure standardsStakeholder Exposure
Exposure includes requests for “unofficial” fees; unfair access; higher risk of vulnerable groups being excluded from services; limited transparency on tariffs, exemptions, and complaints; retaliation risk when reporting solicitation; and loss of public trust.
Decision Point
During project operation, submit access to information to clarify backlog data and eligibility rules, also mobilising communities to collect evidence of “unofficial” payments. Decide whether to (a) escalate through oversight channels to report bribery concerns, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project O&M documentation, including O&M plan and budget, maintenance records, backlog data, eligibility rules (waivers and priority), and service performance by area and office
• Mobilise communities to collect evidence of informal payments, brokers, delays, and unequal treatment
• Engage available grievance channels and oversight bodies to report of bribery concerns (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)Mitigation Resources
Use protected complaints and grievance channels to report suspected bribery, solicitation, informal payments, broker involvement, or unequal treatment in service connections, reconnections, waivers, billing, or customer-service decisions; document evidence, timelines, case handling, and remedies sought, and support safe reporting where retaliation risk is material.
Grievance, complaints, and protected reportingReview publicly disclosed service connection and billing records, such as procedures, fee schedules, waiver rules, backlog data, service performance by area or office, and complaint outcomes; identify disclosure gaps, missing justifications, or unexplained disparities, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standards -
Phase 6: Operation & Maintenance
Political influence in maintenance prioritisation
Maintenance and operational decisions are driven by political influence or private gain rather than technical need, leading to neglected assets and higher lifecycle costs.
Red Flags & Indicators
- Maintenance budgets and work plans are not disclosed.
- Maintenance expenditure is low compared with capital stock.
- Prioritisation is not based on documented risk, condition, or service-need justification.
- Condition and outage indicators show abrupt “improvements” ahead of audits, or contradict field checks and user complaints.
- Emergency works and ad-hoc callouts are frequent, displacing planned preventive maintenance and bypassing normal procurement and approval controls.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes maintenance resources redirected away from technical need; higher unplanned failures and emergency works; increased costs and service penalties; pressure to adjust condition data or priorities; and reputational risk from persistent outages and complaints.
Decision Point
During maintenance execution, consider asset condition and risk evidence when approving services and evaluating priorities; escalate and formally document any deviations and exceptions.
Mitigation Actions
• Adopt and apply an O&M plan with objective criteria (asset condition data, safety and criticality, outage history, lifecycle cost)
• Document deviations from the O&M plan, the rationale for work plan changes, and budget reallocations
• Maintain a complete and auditable record of maintenance and work orders (who requested and approved, relevant dates, scope, evidence, completion status, impacts on service and risk, meeting logs, communications and engagements, and requests outside formal channels)
• Document emergency maintenance work (defined criteria, justification, approval dates)
• Request written direction when instructions override technical priorities and normal procedures
• Seek clarification when required approvals and mandates are unclear and when there is increased risk to safety and service
• Use internal compliance escalation processes and whistleblower channels, where available, to report signs of undue influenceMitigation Resources
Use an integrity plan for maintenance planning and prioritisation; set objective prioritisation criteria, controls for emergency work approvals and budget reallocations, responsible roles, and follow-up and closure tracking for red flags and control gaps.
Project integrity planning and action trackingGood Practices
Stakeholder Exposure
Exposure includes deteriorated asset condition and outage risk; unpredictable O&M budgets; inflated emergency spend; higher risk of service complaints; reduced efficiency and higher capex later; decreased project value; and reputational risk.
Decision Point
Before approving annual O&M budgets, request disclosure of the O&M plan and clarity on applicable criteria and risk-based prioritisation rationale; withhold approval until plans are justified.
Mitigation Actions
• Require disclosure of maintenance plans, work order execution data, and service performance (downtime, repeat faults, response times)
• Condition disbursement on demonstration of objective maintenance prioritisation criteria (asset criticality, condition, safety risk, outage history, lifecycle cost)
• Require documented justification for budget shifts and emergency work outside the plan
• Include audit/verification rights
• Treat unexplained data spikes or missing records as a suspension trigger
• Commission independent review when maintenance choices are inconsistent (concentrating on politically visible sites without condition justification, lack of information, deterioration of service outcomes), pausing disbursement pending review and corrective actionMitigation Resources
Conduct integrity due diligence and issue tracking on maintenance prioritisation, budget shifts, emergency work outside plan, maintenance plan disclosure, work order execution data, and service performance records; require objective prioritisation criteria, documented rationale for deviations, audit or information rights, and pause support where politically driven prioritisation risks remain unresolved.
Investor integrity due diligence and monitoringUse an independent technical adviser to review maintenance prioritisation criteria, emergency work justifications, service performance records, and supporting maintenance data, and to challenge weak or inconsistent evidence behind prioritisation or budget-shift decisions.
Independent technical due diligence and monitoringGood Practices
Stakeholder Exposure
Exposure includes higher maintenance costs; higher risk of failures, escalating emergency costs, and service disruption; unjustified priorities and manipulated data; inequitable service delivery; and loss of public trust.
Decision Point
Before approving maintenance funds, ensure maintenance priorities are based on condition and risk evidence; require re-prioritisation and review when decisions are not justified.
Mitigation Actions
• Apply objective prioritisation criteria for O&M works (asset criticality, safety risk, condition, outage history, lifecycle cost)
• Publish the O&M plan and budget, periodic execution reports against priorities, reasons for deviations
• Require written justification for deviations and emergency work outside the plans (risk and condition basis, approvals, post-event review)
• Maintain an auditable record for maintenance and work orders, including who requested and approved changes and why
• Document repeated patterns of unjustified priorities, lack of technical documentation, politically driven shifts, pre-audit data anomalies, and bypassed controls
• Operate accessible whistleblower and complaints protected channels for reporting and handling unethical or illegal activities within and outside the organisation
• Refer credible misconduct concerns to independent oversight bodiesMitigation Resources
Assess corruption risks across maintenance plans, prioritisation criteria, emergency work approvals, budgets, and execution reports; assign preventive and detective controls, responsible units, review points, and escalation routes for deviations or politically driven shifts.
Institutional integrity risk assessment and mitigationPublish and maintain public access to key maintenance planning and execution records, including prioritisation criteria, maintenance plans, emergency work approvals, budgets, execution reports, and reasons for material deviations, to support external scrutiny and audit.
Transparency and data disclosure standardsDisclose information on maintenance plans, prioritisation criteria, emergency work approvals, budgets, and execution reports, and use participation and accountability channels to raise concerns about opaque prioritisation or politically driven service decisions.
Fiscal transparency, participation, and accountabilityGood Practices
Stakeholder Exposure
Exposure includes high risk of neglect in non-connected areas; poorer safety and service levels reliability; limited access to condition data and prioritisation rationale; reduced accountability for complaints; and retaliation risk when challenging politically driven choices.
Decision Point
During project operation, submit access to information to clarify maintenance execution, also mobilising communities to collect evidence of downtime, repeat failure and response time. Decide whether to (a) escalate through oversight channels to report devitions and favouritism, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project O&M documentation, including O&M plan and budget, periodic execution reports, maintenance records, prioritisation criteria, emergency and exception works reports, reasons for deviations
• Mobilise communities to collect evidence of downtime, repeat failure, response times
• Monitor O&M information to identify patterns of politically selective maintenance and neglected areas over time
• Engage available grievance channels and oversight bodies to report unexplained deviations and signs of favouritism (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)Mitigation Resources
Track reported maintenance spending and delivery against service reliability and asset coverage; compare planned and actual spending, outputs, emergency works, and neglected areas to identify politically selective prioritisation.
Expenditure tracking and leakage analysisUse independent monitoring or social accountability to compare disclosed maintenance planning and execution records with service reliability and maintenance delivery in practice; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilityReview publicly disclosed maintenance planning and execution records, such as prioritisation criteria, budgets, emergency work reports, and execution or exception reports; identify disclosure gaps, missing justifications, or unexplained deviations, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsGood Practices
Phase 7 4 risks during the Evaluation & Audit phase
-
Phase 7: Evaluation & Audit
Audit and evaluation capture through undue influence
Audits, evaluations, completion reviews and disposal assessments are shaped by political or commercial influence, producing biased findings and compromising performance.
Red Flags & Indicators
- Auditor and evaluator selection is non-competitive or independence is not evidenced, with repeated appointments of the same firms or panels.
- Terms of reference and scope are changed late to narrow scrutiny, omit critical issues, or limit access to sites, staff, or data.
- Draft findings are amended without a traceable evidence or review trail, yielding conclusions not grounded in recorded issues.
- Recommendations lack a formal management response, owners, deadlines, or tracked follow-up, with repeated deferrals and no clear rationale
- Asset valuation for disposal is not adequately justified, resulting in premature or delayed disposal decisions.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to influence findings; biased audit and evaluation conclusions; high risk of disputes and claims; increased risk of liability if conflicts arise; and reputational risk.
Decision Point
During audit and evaluation, require independent terms of reference and full evidence access; escalate when signs of undue influence emerge.
Mitigation Actions
• Maintain a complete and auditable record of audit and evaluation processes, including requests and management responses, communication exchanges with consultants, advisers, and officials, conflicts-of-interest declarations and recusals, contracts, fee arrangements, and reports
• Require clear terms of reference for any engagement (scope, access, sampling, site visits), documenting any late scope restrictions or access limitations
• Adopt internal policies ensuring auditors and evaluators have independent access to sites and documents
• Apply conflict-of-interest checks for any advisers and consultants
• Ban/reject contractual clauses and fee structures where success fees paid to advisers and consultants are linked to audit and evaluation outcomes
• Use internal compliance escalation processes and whistleblower channels, where available, to report any pressure to alter evidence or findings, tracking corrective actionsMitigation Resources
Require conflict-of-interest declarations and documented conflict management for advisers, assurance providers, and relevant staff involved in audits, evaluations, completion reviews, or disposal assessments; exclude conflicted parties until conflicts are resolved and recorded, and prohibit fee structures or intermediary arrangements that depend on audit or evaluation outcomes.
Conflict-of-interest management and ethics controlsScreen advisers, agents, assurance providers, and other counterparties involved in audits, evaluations, completion reviews, or disposal assessments; verify beneficial ownership where feasible, related-party links, PEP exposure, and sanctions risks, and escalate or stop engagement where unresolved red flags remain.
Counterparty integrity screening and due diligenceFailure Cases
Good Practices
Stakeholder Exposure
Exposure includes unreliable audit and evaluation findings; delayed corrective action and recovery; higher ESG and reputational risk; and sanctions and debarment contagion risk.
Decision Point
Before considering audit and evaluation findings and releasing funds, request evidence of independence and scope integrity; pause decisions and commission an independent review when signs of undue influence or scope limitations arise.
Mitigation Actions
• Require the application of independent audit and evaluation arrangements (documented terms of reference, conflict checks, rotation where feasible, independent and protected access to sites and documents, grievance and whistleblower channels)
• Treat credible interference or scope restriction as a suspension trigger
• Condition financing on disclosure of key findings, management responses, conflict-of-interest declarations, and corrective actions
• Include audit/verification rights
• Commission independent review when signs of capture emerge (repeated non-competitive appointments, late scope exclusions, unsupported draft changes, missing follow-up tracking, lack of traceable evidence), pausing funding pending review and corrective action remediationMitigation Resources
Conduct integrity due diligence and issue tracking on grievance and whistleblowing arrangements; require accessible, confidential reporting channels, documented non-retaliation protections, incident reporting, remediation plans, and independent review where retaliation risks are high, and pause support where concerns remain unresolved.
Investor integrity due diligence and monitoringRequire protected whistleblowing and grievance channels that allow retaliation, interference with complaints, or suppression of reports to be raised safely; require documented case handling, outcomes, remedies, and safe escalation routes where retaliation risk is material.
Grievance, complaints, and protected reportingGood Practices
Stakeholder Exposure
Exposure includes accountability gaps; weak lessons learned; high risk of poor performance and legal challenge; and loss of public trust.
Decision Point
Before accepting audit and evaluation reports, verify auditor and evaluator selection, scope, consistency of follow-up plan, whether conflict checks were conducted and evidence traceability; re-procure or replace when signs of undue influence or scope limitations arise.
Mitigation Actions
• Appoint independent audit and evaluation teams, documenting the selection process and conflict-of-interest declarations and recusals
• Agree on clear terms of reference (scope, access, sampling, site visits)
• Publish terms of reference, criteria and decisions appointing auditors and evaluators, reports on findings, and corrective action plans
• Ensure auditors and evaluators have independent access to sites and documents
• Maintain a complete, auditable record of audit and evaluation processes (requests, selection process, evidence provided, version history, management responses, action plans)
• Monitor corrective actions, deadlines, and underlying evidence
• Operate accessible, protected whistleblower and complaints channels for reporting and handling unethical or illegal activities within and outside the organisation
• Refer credible interference or capture signals to independent oversight bodiesMitigation Resources
Require conflict-of-interest declarations, recusals, and documented conflict management for officials, advisers, and reviewers involved in appointing or overseeing audit and evaluation teams; exclude conflicted parties until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controlsSet clear approval limits, sign-off steps, and separation of duties for appointing audit and evaluation teams, setting or changing terms of reference, granting access to records and sites, and approving management responses or closure so no single official can shape the assurance process end to end.
Approval authority and segregation of dutiesPublish and maintain public access to audit and evaluation terms of reference, findings, management responses, corrective action plans, and closure updates, with only lawful redactions.
Transparency and data disclosure standardsGood Practices
Stakeholder Exposure
Exposure includes restricted transparency on audit findings; limited ability to secure effective remedy and follow‑up; accountability gaps for integrity and performance issues; and higher risk of intimidation and retaliation if findings and appointments are challenged.
Decision Point
During project operation, submit access to information to obtain audit and evaluation documentation, also mobilising communities to collect evidence of compliance with corrective plans. Decide whether to (a) escalate through oversight channels to report favouritism, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of project O&M documentation, including audit and evaluation reports, annexes, conflicts-of-interests checks, corrective action plans
• Mobilise communities to collect evidence of compliance with corrective action plans
• Monitor O&M information to identify patterns of biased processes (repeat non-competitive appointments, late scope exclusions, restricted site and data access, unsupported draft changes, unexplained delays)
• Engage available grievance channels and oversight bodies to report signs of favouritism (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)Mitigation Resources
Review publicly disclosed audit and evaluation reports, annexes, management responses, corrective-action commitments, and closure updates; identify disclosure gaps, missing annexes, unexplained changes, or withheld findings, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsUse independent monitoring or social accountability to compare disclosed audit and evaluation findings with corrective-action commitments, closure evidence, and outcomes in practice; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountabilityRequest access to non-public audit and evaluation records, such as annexes, draft changes, scope restrictions, access logs, management responses, or records explaining delayed publication or withheld findings, so capture indicators, missing rationales, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyGood Practices
-
Phase 7: Evaluation & Audit
Weak records management and lack of transparent performance data
Incomplete records and limited disclosure of performance, costs, and contract changes weaken auditability, organisational learning, and accountability across the project life cycle.
Red Flags & Indicators
- Key contracts, variations, change orders, payment certificates, and project correspondence are missing, fragmented, or hard to trace.
- Incomplete close-out files.
- Records lack version control and are edited after the fact.
- Approvals are not traceable (who approved, when, and on what basis).
- Performance metrics vary across reports.
- Underlying and source data are unavailable.
- KPIs are not defined or standardised.
- Variations and costs are not reconciled to budgets and as-built outputs, creating mismatches between financial spend and physical progress.
- Lessons learned, defects, and claims registers are absent, incomplete, or not shared.
- Handover and archiving are not finalised.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes missing records; higher rsk of disputed payments and variations; poor traceability; delayed close‑out and retention release; and reputational risk.
Decision Point
Before submitting the close-out records and data pack, verify document and evidence traceability; pause close-out until gaps are corrected.
Mitigation Actions
• Maintain a complete and auditable performance and close-out record set (contract set, variations, approvals, payment certificates, correspondence, quality assurance and quality control records, as-builts, reasons for material changes)
• Define and apply a formal document retention schedule
• Ensure auditors have timely and compete access to all relevant files and supporting documentation upon request
• Apply version control and an audit trail for changes in the close-out record (who/when/why)
• Require controlled access to the close-out pack, with automatic logging of all views, downloads, and edits
• Reconcile financial and physical progress, ensuring consistency between payments, measured quantities, certified milestones, and actual work completed on site
• Standardise KPIs and ensure they are fully traceable to underlying raw data, source documents, or system extracts
• Use internal compliance escalation processes and whistleblower channels, where available, to report any request to alter, destroy, backdate, or withhold records
• Suspend submission or approval of close-out documentation until the record set is complete, verified, and internally consistentMitigation Resources
Maintain internal oversight of the company’s close-out records, performance data, and disclosure controls; require complete, traceable records, version control, and corrective action where control failures are identified.
Risk-based internal audit planningUse the company’s compliance process to review and escalate requests to alter, destroy, backdate, or withhold key records; require documented rationale and compliance or legal sign-off before close-out submissions, responses to auditors, or data releases proceed.
Compliance management systemGood Practices
Stakeholder Exposure
Exposure includes lack of reliable data; weak ability to validate costs; higher fraud and claim risk; and delayed close‑out and exit decisions.
Decision Point
Before approving reporting and close-out, request a complete, traceable data room; withhold sign-off and require records remediation.
Mitigation Actions
• Require a close-out records plan (data room index, version control, retention schedule, access log)
• Treat missing and edited records as a suspension trigger
• Condition final payments and consents on complete handover documentation, performance datasets (KPIs, source raw extracts or references) and reconciliation of payments and physical progress
• Include audit/verification rights
• Commission independent review when records are fragmented, approvals lack traceability, or performance data are missing and inconsistent, pausing close-out decisions pending review and corrective action remediationMitigation Resources
Conduct integrity due diligence and issue tracking on close-out records, performance datasets, and handover documentation; require a data-room index, version control, retention schedule, access logs, and audit or information rights, and pause final payments or consents where records are incomplete, edited without explanation, or lack traceability.
Investor integrity due diligence and monitoringRequire, through financing conditions, complete handover documentation, performance datasets, payment-to-progress reconciliation, and formal evidence supporting close-out decisions before final payments or consents.
Change control, delivery verification, and payment integrityUse an independent technical adviser or assurance provider to verify the completeness, traceability, and consistency of close-out records, performance data, and supporting evidence, and to challenge fragmented records, missing approvals, or unexplained gaps before close-out decisions proceed.
Independent technical due diligence and monitoringGood Practices
Stakeholder Exposure
Exposure includes limited ability to verify value-for-money and delivery performance; weak asset handover and inadequate operations and maintenance planning; increased risk of audit qualifications, disputes, and legal liability; and loss of public trust.
Decision Point
Before accepting completion and release the close-out disclosure package, verify whether records are complete and traceable; refuse acceptance and require document completion and standardisation in case of lack of documentation.
Mitigation Actions
• Implement a project document register and close-out checklist (contracts, variations, approvals, payment certificates, quality assurance and quality control records, as-builts, KPIs, reasons for material changes)
• Apply version control and an audit trail for changes in the close-out record (who/when/why)
• Require proof of completion before final acceptance and final payments
• Publish close-out and performance records based on recognised infrastructure data standards such as the OC4IDS
• Require controlled access to the close-out pack, with automatic logging of all views, downloads, and edits
• Conduct audit records
• Refer credible signs of suspected tampering, withholding, backdating, or destruction of records to independent oversight bodiesMitigation Resources
Publish and maintain public access to close-out and performance records, including contracts, variations, approvals, payment certificates, QA/QC records, as-builts, key KPIs, and reasons for material changes, with only lawful redactions.
Transparency and data disclosure standardsMaintain and use digital records and publication logs for close-out files, including document indexes, version history, release dates, retention schedules, and access or change logs, through an auditable trail.
Digital procurement, traceability, and audit logsSet clear approval limits, sign-off steps, and separation of duties for close-out records, version control, access changes, and final release or payment approvals; ensure no single official can alter, approve, and record the same change.
Approval authority and segregation of dutiesGood Practices
Stakeholder Exposure
Exposure includes limited access to performance and cost records; constrained scrutiny of closeout; accountability gaps across the project life cycle; reduced oversight; and risk of retaliation when requesting disclosure.
Decision Point
During project operation, submit access to information to obtain performance documentation. Decide whether to (a) escalate through oversight channels to report transparency gaps, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of close-out records and underlying performance datasets, including KPIs, service levels, change orders, payment certificates, as-built summaries, quality assurance and quality control records, reasons for material change
• Mobilise communities to highlight the importance of complete disclosure of performance information
• Engage available grievance channels and oversight bodies to report signs of record manipulation (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Request access to non-public close-out and performance records, such as underlying KPI datasets, change logs, version histories, payment and contract-change records, as-built summaries, or records explaining withheld or altered documents, so missing items, version gaps, or suspected record manipulation can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyReview publicly disclosed close-out records and performance datasets, such as KPIs, service levels, change orders, payments, as-built summaries, and closure documentation; identify disclosure gaps, missing items, unexplained version gaps, or withheld records, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standardsGood Practices
-
Phase 7: Evaluation & Audit
Retaliation against whistleblowers and suppression of complaints
Whistleblowers, complainants, and affected communities face retaliation or exclusion, reducing detection of wrongdoing and weakening remedy.
Red Flags & Indicators
- Reporting of complaints remains low despite clear signals of poor project operational performance.
- Complaints are diverted to informal channels or “resolved” through side payments, pressure, or coercion.
- Retaliation indicators appear (threats, dismissal, blacklisting, loss of site access), including sudden staff turnover following evaluation and audit reports.
- Hotlines, grievance and whistleblowers channels lack confidentiality, are difficult to access, or are overseen by parties with potential conflicts-of-interest.
- Investigations are delayed, cursory, or opaque, with limited disclosure of findings, corrective actions, or remediation outcomes.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes blind spots on performance issues and defects; high risk of retaliation; increased operational disrupt; and reputational risk.
Decision Point
During operation, use available data to review performance and costs; request missing datasets and escalate in case of persistent non-disclosure.
Mitigation Actions
• Maintain a complete and auditable performance and close-out record set (contract set, variations, approvals, payment certificates, correspondence, quality assurance and quality control records, as-builts, reasons for material changes)
• Identify and document missing items and version gaps
• Request and obtain any missing information from subcontractors, agents, intermediaries, and partners involved in project execution, using formal and traceable communication channels
• Maintain an accessible grievance and whistleblower mechanism, ensuring complaints are protected, recorded and their resolution is tracked
• Use internal compliance escalation processes and whistleblower channels, where available, to report any signs of retaliation, suppression of complaints and record tamperingMitigation Resources
Use protected internal reporting and grievance channels to report retaliation, complaint suppression, record tampering, or obstruction of remedial action; document concerns, protect reporters from retaliation, and escalate substantiated cases for investigation and remedy.
Grievance, complaints, and protected reportingUse the company’s compliance process to review and escalate retaliation risks, complaint-handling failures, and suppression of findings or records; require documented case handling, non-retaliation safeguards, and corrective action where reports are blocked, altered, or ignored.
Compliance management systemStakeholder Exposure
Exposure icludes higher risk of material ESG non‑compliance; hidden misconduct that later becomes claims and sanctions; delays to remediation and exit; debarment contagion risk; and reputational risk.
Decision Point
Continue engagement and disbursements only if grievance and whistleblower protections are functioning and independently monitored.
Mitigation Actions
• Condition funding on accessible, confidential grievance and whistleblowing channels with documented non-retaliation protections and safe escalation routes
• Treat credible retaliation or interference with complaints as a suspension trigger
• Require disclosure of incident reporting (retaliation allegations, case handling, outcomes) and a remediation plan with timelines
• Include audit/verification rights
• Commission independent review when retaliation indicators appear (threats, dismissal, blacklisting, loss of site access), pausing disbursements pending reviewMitigation Resources
Conduct integrity due diligence and issue tracking on grievance and whistleblowing arrangements; require accessible, confidential reporting channels, documented non-retaliation protections, incident reporting, remediation plans, and independent review where retaliation risks are high, and pause support where concerns remain unresolved.
Investor integrity due diligence and monitoringRequire protected whistleblowing and grievance channels that allow retaliation, interference with complaints, or suppression of reports to be raised safely; document allegations, case handling, outcomes, and remedies, and support non-retaliation protections and safe escalation routes.
Grievance, complaints, and protected reportingStakeholder Exposure
Exposure includes a high risk of misconduct going undetected and unaddressed; increased risk of litigation and community unrest; weak or ineffective remedy mechanisms; and loss of public trust in grievance systems.
Decision Point
Before proceeding with sensitive decisions, verify whether accessible, confidential complaints and whistleblowing channels are in place and effective, with documented protection measures; if gaps exist or credible retaliation risks emerge, escalate to independent oversight and pause decisions until safeguards are strengthened.
Mitigation Actions
• Operate an accessible grievance and whistleblower mechanism, ensuring complaints are protected, recorded and their resolution is tracked
• Monitor intimidation and retaliation indicators (threats, dismissals, denial of access)
• Refer credible signs of intimidation and retaliation to independent oversight bodies
• Publish aggregate complaints, enforcement, and remediation data, including case status, outcomes, and time to closureMitigation Resources
Operate protected complaints and whistleblowing channels with clear non-retaliation rules, case triage, independent handling where conflicts exist, and documented escalation for retaliation, complaint suppression, or interference with reporting.
Grievance, complaints, and protected reportingMaintain internal oversight of controls governing complaint handling, non-retaliation protections, case triage, protective measures, referrals, and closure tracking; monitor retaliation indicators, test case handling, and require corrective action where cases are delayed, mishandled, or suppressed.
Risk-based internal audit planningPublish and maintain public access to aggregate complaints, enforcement, and remediation data, including case volumes, status, outcomes, and time to closure, with only lawful redactions.
Transparency and data disclosure standardsStakeholder Exposure
Exposure includes higher safety risks for whistleblowers and communities; reduced reporting and monitoring; unresolved harms and weak remedy; and negative effect on civic space.
Decision Point
Raise concerns through safe, formal channels with documented evidence.
Mitigation Actions
• Use access to information to request disclosure of complaint and enforcement records, including records of retaliation allegations, case-handling steps, protective measures, closure reasons, records explaining why complaints were screened out, delayed, or dismissed
• Mobilise communities to highlight the importance of accessible, confidential, and protected complaints and whistleblowing channels, and how to use them safely
• Engage available grievance channels and oversight bodies to report signs of intimidation and retaliation (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
• Advocate for disclosure of project information based on recognised infrastructure data standards such as the OC4IDSMitigation Resources
Request access to non-public complaint-handling and enforcement records, such as records of retaliation allegations, case-handling steps, protective measures, closure reasons, or records explaining why complaints were screened out, delayed, or dismissed, so retaliation patterns or complaint suppression can be examined and raised through oversight channels.
Access-to-information and demand-side transparencySubmit protected complaints or reports through grievance, inspectorate, regulator, ombuds, or other oversight channels where retaliation, complaint suppression, or interference with reporting is identified; document evidence and case timelines, support safe escalation, and advocate for non-retaliation safeguards where retaliation risk is material.
Grievance, complaints, and protected reporting -
Phase 7: Evaluation & Audit
Conflicts and interference in investigations, dispute resolution and enforcement
Investigations, dispute resolution and enforcement of legal and tax proceedings are undermined by conflicts-of-interest, political interference, or weak capacity, allowing misconduct to continue.
Red Flags & Indicators
- Investigators, prosecutors, auditors, court and tax experts, and arbitrators have undisclosed ties to implicated parties
- Recusals are not documented.
- Case teams are repeatedly reassigned without clear rationale
- Sanctions and penalties are delayed, applied inconsistently, or overturned without written justification, with settlements reached off-record or poorly documented
- Coordination between audit, procurement, and enforcement bodies is weak: evidence requests go unanswered, information is not shared, and cases are closed without transparent reasons.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes uncertain enforcement outcomes; higher risk of sanctions and debarment; prolonged payment holds and disputes; higher cost and reputational risk from unresolved cases.
Decision Point
Preserve records and cooperate with independent dispute resolution and enforcement bodies, through documented channels.
Mitigation Actions
• Maintain a complete and auditable record of investigations, disputes and enforcement procedures
• Adopt a formal non-retaliation and non-interference policy that explicitly bans obstruction, destruction or alteration of records, and any attempt to influence witnesses
• Treat obstruction or tampering as a material breach of contract for suppliers, subcontractors and partners
• Maintain an accessible grievance and whistleblower mechanism, ensuring complaints are protected, recorded and their resolution is tracked
• Require conflict-of-interest declarations for investigators, advisers, and decision-makers involved in investigations, dispute resolution, and enforcement
• Place internal holds on payments, variations, or renewals linked to the matter pending legal and compliance review
• Use internal compliance escalation processes and whistleblower channels, where available, to report any signs of suspected interference or conflicted investigatorsMitigation Resources
Investigate suspected bribery, obstruction, records tampering, witness interference, or other interference affecting investigations, dispute resolution, or enforcement; preserve records, document contacts and requests, and use a clear evidence-handling and reporting protocol.
Internal investigations and remediationRequire conflict-of-interest declarations and documented conflict management for investigators, advisers, and decision-makers involved in investigations, dispute resolution, or enforcement; exclude conflicted parties until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controlsStakeholder Exposure
Exposure includes increased portfolio uncertainty due to unpredictable dispute outcomes; impaired recoveries and returns; credibility risks with partner investors and regulators; and delays to exit and new investment commitments.
Decision Point
Continue engagement and funding only if investigations are demonstrably independent and time-bound; pause new commitments until credible assurance is in place.
Mitigation Actions
• Condition funding on evidence of independent investigation governance (mandate, conflict-of-interest declarations and recusals, access to records, defined timelines, periodic written status updates, documented outcomes and remediation action plans)
• Treat credible interference complaints as a suspension trigger
• Include audit/verification rights over relevant records
• Apply suspension trigger (and consider exit) if investigations are obstructed, repeatedly reassigned without reasons, or closed without documented explanationMitigation Resources
Conduct integrity due diligence and issue tracking on investigation governance, conflict handling, access restrictions, case decisions, and remediation; require documented mandates, recusal handling, access to records, periodic status updates, and pause support where interference risks remain unresolved.
Investor integrity due diligence and monitoringRequire conflict-of-interest declarations and documented conflict management for investigators, decision-makers, and advisers involved in investigations, dispute resolution, or enforcement; exclude conflicted parties until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controlsStakeholder Exposure
Exposure includes persisting misconduct; weak recovery of funds; service and safety risks and litigation; and loss of public trust.
Decision Point
Before assigning a case to an independent investigation and review body, verify whether conflict-of-interest procedures and channels arereliable and protected.
Mitigation Actions
• Publish records of investigations, reviews, disputes, and enforcement proceedings, including appointed teams, decisions, outcomes, and sanctions
• Publish clear rules and procedures on conflicts-of-interest in the appointment of professionals, teams, and advisors involved in investigations, reviews, disputes, and enforcement proceedings
• Ensure internal investigations and reviews are assigned to an independent and functionally separate body, and that all cases are formally registered, tracked, and resolved through official systems
• Maintain a complete and auditable record of investigations, reviews, disputes and enforcement proceeding, documenting access to case files (who accessed what, when, and why)
• Document conflict-of-interest declarations and recusals, team composition change, and key decisions (charges, settlements, closures) supported by written reason
• Operate an accessible grievance and whistleblower mechanism, ensuring complaints are protected, recorded and their resolution is tracked
• Refer credible signs of conflict and misconduct to independent oversight bodiesMitigation Resources
Require conflict-of-interest declarations and documented conflict management for investigators, decision-makers, and advisers involved in investigations, dispute resolution, or enforcement; exclude conflicted parties until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controlsMaintain internal oversight of controls governing investigations, dispute resolution, and enforcement, including mandates, conflict handling, access to case files, key decisions, sanctions, and witness-protection measures; test controls, follow up findings, and require corrective action in high-risk cases.
Risk-based internal audit planningPublish and maintain public access to key investigation and enforcement records, including investigation mandates, published outcomes, sanctions, and reasons for key decisions, with only lawful redactions.
Transparency and data disclosure standardsStakeholder Exposure
Exposure includes delayed justice and weak remedies; opaque processes and information gaps; increased retaliation risk; and continued harm to communities and service users.
Decision Point
During project operation, submit access to information to obtain clarity on investigations, reviews, disputes and enforcement proceedings. Decide whether to (a) escalate through oversight channels to report transparency gaps, and signs of conflict and misconduct, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Use access to information to request disclosure of investigations, reviews, disputes, and enforcement proceedings, including appointed teams, decisions, outcomes, and sanctions
• Mobilise communities to highlight the importance of accessible, confidential, and protected complaints and whistleblowing channels, and how to use them safely
• Engage available grievance channels and oversight bodies to report signs of conflict and misconduct (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)Mitigation Resources
Request access to non-public investigation and enforcement records, such as decisions to reassign cases, narrow scope, close cases without action, delay key steps, or limit sanctions or enforcement measures, so hidden decisions, missing rationales, or unexplained case outcomes can be examined and raised through oversight channels.
Access-to-information and demand-side transparencyUse independent monitoring or social accountability to compare disclosed investigation and enforcement records with case handling in practice, including delays, reassignments, closure decisions, sanctions, and follow-up actions; document unexplained gaps and raise them through oversight channels.
Independent monitoring, assurance, and social accountability
Step 3Integrity risk snapshot
See an overview of the risks identified.
Want a more detailed analysis?
Conduct a detailed integrity diagnostic to assess your exposure and identify what to do next.
Use our Integrity Diagnostic toolIntegrity risk snapshot
Resource library
Explore our growing collection of practical resources and real-world cases to help you identify, address and mitigate integrity risks throughout the project lifecycle. Find tools, templates and guidance, learn from good practices and governance failures, and discover practical approaches that can support informed action.
For a tailored assessment of your project, use the Integrity Diagnostic to explore and rate integrity risks across different phases, and identify where further information, action or mitigation may be needed.
140+ Practical resources | 70+ Real cases
Mitigation Resources
Explore practical tools, templates and guidance to help prevent and address integrity risks throughout the project lifecycle.
Failure Cases
Learn from real-world integrity failures to understand how risks developed, what went wrong and how similar risks can be avoided.
Good Practices
Learn from real-world good practices to understand how integrity risks can be effectively identified and addressed before they materialise.