Uncovering Vendor Billing Discrepancies Through an Independent Internal Audit

A mid-sized enterprise had run the same managed IT services contract with the same vendor for several years, renewing it each cycle with only light review. When a new finance leader questioned why IT services costs kept rising faster than headcount or infrastructure growth would explain, the enterprise had no internal capability to independently verify whether the billing matched what was actually being delivered.

The Challenge

Years of informal scope additions — extra devices added to monitoring, ad hoc support requests billed as projects, licence counts that had never been reconciled against actual usage — had accumulated without a single consolidated record. The internal IT team, who had approved many of these changes informally over time, were not well positioned to audit their own accumulated decisions objectively.

Our Approach

• Independent contract and billing review: Reconciled every invoice over a multi-year period against the original contract, subsequent change orders, and actual asset/licence counts.
• Deliverable verification: Sampled billed "projects" and support tickets against evidence of actual work performed, rather than accepting invoice line items at face value.
• Root-cause, not blame: Focused the findings on where the contract and change-management process had broken down, so the enterprise could fix the process rather than simply relitigate the past.
• Renegotiation support: Provided the enterprise's leadership with a clear, evidenced findings report to use directly in renegotiating the contract on stronger, more accountable terms.

Vendor overbilling rarely happens through a single dramatic act — it accumulates through years of scope changes nobody was tasked with reconciling. An audit's job is to make that accumulation visible.

The Outcome

The audit identified billed licence counts exceeding actual deployed usage and support work billed at project rates that did not match the original contract's definitions, giving the enterprise a documented basis to recover costs and renegotiate. The renewed contract included clearer change-order documentation requirements and a quarterly independent reconciliation clause, closing the gap that had allowed the discrepancies to accumulate unnoticed for years.