All Countries, Articles, Insights

You Cannot Audit What You Cannot Reach

Building supply chain integrity and accountability in Africa’s most difficult operating environments

Every year, billions of dollars in aid, development funding and humanitarian assistance flow into some of Africa’s most unstable regions. Yet a portion of that investment still disappears into a gap that too few organisations name plainly: the space between what a report says happened and what actually occurred.

This is not primarily a problem of intent. The problem is structural. The tools organisations rely on, including desk-based reviews, remote monitoring and periodic field visits, were built for environments where access is predictable, institutions are functional and supply chains are visible. Fragile states are none of those things.

The access gap is wider than most organisations admit

In high-risk environments, the last mile of a supply chain is often the most important and the least visible. A client once described receiving flawless delivery notes for goods that local contacts later said had never reached the intended site. Vendors subcontract to actors that would never pass a compliance screen. Beneficiary lists are manipulated. Goods get diverted. Traditional audits may confirm a process was followed without establishing what happened on the ground.

At the same time, expectations are moving in the opposite direction. OECD guidelines, FATF frameworks and major donor policies increasingly require organisations to demonstrate not just that they conducted due diligence, but that it was meaningful. ESG commitments now extend into supply chains, covering labour practices, conflict actor exposure and sanctions risk.

The limits of desk-based due diligence

Most due diligence in high-risk environments still begins and ends at a desk. Sanctions lists are checked, adverse media searches are run and corporate registration documents are reviewed. These steps are necessary, but they are not sufficient. In fragile states, the information that matters most is often shared quietly by people who understand the local context.

A vendor that passes every standard screening may be a front for a network with direct links to armed groups. In one review, a complete supplier file concealed a delivery route controlled by an undisclosed intermediary.

What an integrated service model delivers

The alternative combines financial audit capability with field-based intelligence gathering, supply chain mapping and continuous monitoring. Each function reinforces the others. An audit without field intelligence is working with incomplete information. Intelligence without audit rigour lacks the evidentiary standard that donors and regulators require.

The most significant differentiator is first-person information. Local source networks provide access that no database can replicate. We often find that a single conversation with the right local source can explain inconsistencies that weeks of document review could not resolve. Speed matters too. When a supplier network can shift overnight, mobilising a field team within days rather than weeks is the difference between getting ahead of a problem and managing its consequences.

Proportionality and the right partner

Accountability frameworks should be proportionate to risk, not proportionate to what is convenient to implement. In fragile-state contexts, that means enhanced intelligence for high-risk counterparties, sanctions screening as a live capability rather than a point-in-time check, verification of beneficiary outcomes and a clear escalation framework for sensitive findings such as child labour or conflict-actor links.

As one client put it when choosing an advisory partner, the question is not whether the firm has a global name, but whether it can find out what is happening where the programme is actually being delivered. Does the firm have genuine field presence where you operate? Does it maintain trusted local networks that produce original intelligence? Can it deploy quickly? Does it offer integrated capability across audit, investigation and intelligence?

The path forward

In an era where a single diversion incident, sanctions exposure or supply chain scandal can define an organisation’s public standing for years, the cost of inadequate assurance is not a budget line. It is a strategic liability.

The gap between what organisations report and what is actually happening on the ground is closeable. We have seen it narrow when teams combine disciplined assurance work with people who understand the local terrain.

If your organisation operates in high-risk or hard-to-access environments across Africa, we would welcome the conversation. Get in touch to speak with one of our senior advisors.

Read our three-part series for a deeper look at this topic:

Part One: You Cannot Audit What You Cannot Reach

Part Two: Beyond the Last Mile: What Real Supply Chain Integrity Looks Like in Fragile States

Part Three: Building Accountability Infrastructure That Matches the Risk

Recent insights