Why IT procurement is now a board-level risk

This article is part of our Opinions section, where we invite industry professionals to share their views on the most pressing technology questions of our time.

IT procurement is no longer about negotiating contracts and driving down costs. Market volatility, manufacturing constraints, component shortages and logistics uncertainty are driving technology availability, lead times and pricing. As a result, IT sourcing has become a critical lever for organisational resilience, competitiveness and risk management, firmly elevating it to a board-level priority.

Positioned at the intersection of technology strategy, financial planning and operational resilience, procurement now carries far-reaching strategic consequences. Availability constraints, extended lead times and price volatility have quietly transformed it into one of the most significant risks to organisational agility and execution.

At the same time, many organisations are overestimating the role technology can play in solving these challenges, particularly AI, focusing on automating existing processes rather than improving forecasting, risk identification or decisionโ€‘making under uncertainty. The result is greater operational efficiency, but little additional resilience when conditions change.

True resilience requires a shift in mindset away from costโ€‘first optimisation and toward strategic risk management. In an environment defined by unpredictability, the most effective procurement functions will be those that prioritise optionality, visibility and informed decisionโ€‘making over shortโ€‘term savings alone.

Volatility has rewritten the rules

One of the most striking changes in recent years is the collapse of predictability in IT procurement. Budgets built on fixed pricing, guaranteed lead times and consistent availability are repeatedly overtaken by global events. Hardware delivery windows that were once measured in weeks now routinely stretch into months. The ongoing semiconductor shortage, combined with constrained manufacturing capacity, has reduced availability across servers, networking equipment, endpoints and embedded components.

At the same time, pricing fluctuates as material costs rise, currencies shift, and shipping capacity tightens. Even routine refresh cycles, historically among the most stable elements of IT planning, are increasingly disrupted by factors outside the direct control of IT and procurement teams.

This unpredictability has become a significant and often underestimated driver of overspend. Orders placed in good faith against approved budgets frequently arrive late or at a higherโ€‘thanโ€‘expected cost, forcing teams into reactive decisions.

Procurement leaders find themselves paying premiums to secure scarce semiconductorโ€‘dependent components, extending the life of unsupported or inefficient equipment or reโ€‘architecting projects midโ€‘flight based on what is actually available, rather than what was originally specified. Each workaround carries its own downstream cost, whether in performance, security exposure, technical debt or delayed business outcomes.

Logistics, long treated as an operational problem, has quietly emerged as one of the most critical bottlenecks in digital transformation. When organisations cannot reliably predict when infrastructure will arrive, or at what total cost, transformation initiatives slow down, dependencies stack up and delivery risk compounds. 

And the impact is rarely confined to IT alone. Delays cascade into customer experience, revenue generation and regulatory or contractual commitments. What begins as a procurement issue quickly becomes a business risk, undermining confidence in delivery forecasts and eroding trust between technology teams and the wider organisation.

Why vendor dependence has become a strategic risk

In response to sustained cost pressure over the past decade, many organisations have pursued aggressive vendor rationalisation strategies. Preferredโ€‘supplier programmes, global framework agreements and standardised technology platforms promised lower costs, simplified governance and improved buying power. In stable conditions, those strategies delivered clear benefits. In todayโ€™s environment, however, they have embedded a significant and often overlooked risk: overโ€‘reliance on a narrow set of suppliers.

Reducing supplier diversity almost inevitably reduces optionality and switching providers is no longer a simple contractual decision. It is a structural challenge. Alternative suppliers may require recertification, architectural changes, new security approvals or renegotiated support models. What should be a sourcing decision quickly becomes a multiโ€‘month transformation project.

This form of vendor lockโ€‘in is rarely acknowledged explicitly, yet its impact is profound. Procurement efficiency achieved through consolidation is often traded for fragility. The tighter the coupling between platforms, suppliers and operating models, the harder it becomes to adapt under pressure. 

Crucially, this exposure is rarely visible on a balance sheet or formally captured on a risk register until something fails. When it does, the consequences are immediate and measurable โ€“ delayed projects, unplanned expenditure, extended use of ageing infrastructure and strained relationships between IT, finance and the wider business. What appears on paper as a procurement issue rapidly escalates into an operational and strategic problem.

In a world defined by uncertainty, overโ€‘dependence on a small number of vendors has become one of the least discussed, yet most impactful threats to IT resilience and execution.

The AI illusion in procurement

Against this backdrop of volatility and uncertainty, many organisations are looking to technology, particularly AI, as a way to fix procurementโ€™s growing challenges. On the surface, this is a logical response. Procurement teams sit on vast volumes of data โ€“ pricing histories, supplier performance metrics, delivery records, contract terms and transaction data spanning years of activity.

In theory, this information should enable better forecasting, earlier identification of risk and more informed, dataโ€‘driven decisionโ€‘making. In practice, most organisations are overestimating the impact AI is currently having on procurement outcomes.ย 

While many claim to be using AI, the reality is often limited to automating existing processes rather than fundamentally improving how decisions are made. Faster invoice matching, automated purchase order creation and chatโ€‘based supplier interactions can undoubtedly improve efficiency and reduce administrative overhead. But these capabilities do little to improve resilience when conditions change.

The core problem is not a lack of automation; it is a lack of intelligence. Few organisations are applying advanced analytics or predictive models to assess supplyโ€‘side risk, simulate alternative sourcing strategies or understand how disruption in one part of the supply chain will affect budgets, timelines and dependencies elsewhere. AI is frequently applied to speed up yesterdayโ€™s processes, rather than to rethink how procurement decisions should be made in an uncertain environment.

As a result, organisations remain reactive when disruption occurs. Data exists, but insight arrives too late. Procurement leaders are forced back onto experience, instinct and informal workarounds rather than evidenceโ€‘based decisions. This creates a dangerous gap between perceived technological maturity and actual operational resilience.

Until AI is used to support forecasting, scenario planning and proactive risk management, rather than simply efficiency, its impact on procurement will remain incremental.

Designing procurement for permanent uncertainty

As the impact of IT procurement decisions continues to widen, so too must the level at which they are understood and discussed. Boards and executive teams are increasingly accountable for technology risk, operational resilience and the success of transformation initiatives. In that context, it is no longer sufficient for procurement challenges to surface only after budgets are missed, timelines slip or delivery plans unravel.

Procurement leaders must be equipped and empowered to have different conversations with senior stakeholders. That means articulating risk in clear business terms. Just as importantly, it means presenting options and tradeโ€‘offs rather than problems in isolation.

Making this shift requires better visibility across endโ€‘toโ€‘end IT supply chains, closer collaboration between procurement, IT and finance and above all, it requires acceptance that uncertainty is no longer an exception to be managed away, but a permanent condition that organisations must design for.

Futureโ€‘proofing IT procurement is therefore less about deploying new tools and more about building new capabilities. Organisations need the ability to model multiple scenarios, assess risk dynamically and make informed decisions under pressure. They also need to rethink supplier relationships, moving beyond transactional, costโ€‘focused engagements towards partnerships built on transparency, flexibility and shared accountability.

Resilient procurement is not about eliminating disruption. It is about reducing its impact. 

Three questions procurement leaders should be asking now

To move from reactive cost control to proactive risk management, every procurement leader should be asking three questions:

Where are our single points of failure? Do we fully understand our dependencies across suppliers, components and logistics routes and what would happen if any one of them failed?

Are our metrics driving the right decisions? Are procurement teams incentivised purely on shortโ€‘term savings, or are resilience, predictability and longโ€‘term value equally measured and rewarded?

Do we have insight, or just data? Can we genuinely forecast risk and model alternatives in advance, or are we still relying on dashboards that tell us what went wrong after the fact?

The answers to these questions will determine whether IT procurement remains a source of constant friction or evolves into a strategic function capable of supporting transformation in a far less predictable world.

More from our Opinions section

Frank Warren - SVP of Global Operations at Park Place Technologies
Frank Warren

Frank Warren is SVP of Global Operations at Park Place Technologies, where he plays a key role in modernising the companyโ€™s global operational backbone.