Line three — Assurance and Audit Readiness

Find out what your participation reporting rests on, before somebody else does.

A principal contractor reports Indigenous participation upward to the client and to government, but the underlying figures are supplied by subcontractors and are rarely tested before they are consolidated. CIRV tests them independently, and reports claim by claim.

Why this matters now

Two things changed, and both point the same way.

The Commonwealth auditor told agencies to start checking

In its 2024–25 follow-up audit of minimum Indigenous participation targets in major Australian Government procurements, the Australian National Audit Office recommended that audited entities establish or strengthen processes to ensure contract managers undertake appropriate activities to confirm contractor compliance with the mandatory minimum requirements, and verify that reported performance information is accurate. The audited entities agreed.

Translated: the numbers you have been reporting are moving from accepted to examined.

Auditor-General Report No. 40 of 2024–25, Australian National Audit Office.

Victoria gained enforcement teeth on 1 July 2026

The final set of reforms to the Local Jobs First Act 2003 commenced. They clarified compliance requirements for suppliers around reporting and meeting commitments, strengthened compliance processes for agencies — including a new contingent payment mechanism in contracts — and gave the Local Jobs First Commissioner stronger compliance and enforcement powers.

A contingent payment mechanism changes the character of the obligation. Participation reporting is no longer only a reputational matter at the end of a project; it now sits alongside the things that affect what gets certified and paid. A deprioritisation determination can also affect how a supplier is treated at tender evaluation.

Local Jobs First Act 2003 reforms, Victorian Government.

Neither change creates the risk. Both change the odds that poor records are found.

The readiness window

You usually get notice. That notice is the opportunity.

Projects are generally given notice before a participation audit or a formal information request. What happens in that window decides whether a gap becomes a correction or a finding.

CIRV reviews your participation evidence during that window, identifies what will not survive examination, and sets out what can still be corrected and what must instead be disclosed. Where a gap cannot be closed, knowing before the auditor does remains worth having.

What CIRV tests

Participation is five separate claims, not one.

Most reporting failures are not dishonesty. They are a single number assembled from sources that were never reconciled against each other. Subcontractors estimate. They round. They count an awarded value as spend, or a whole crew as Indigenous because part of it was. Consolidated across a project, small optimism becomes a material misstatement carrying your name.

01

Supplier status

  • Ownership tested against business registers, share registries and ownership records
  • Control — directorships, decision rights and who genuinely runs the business
  • ORIC, Supply Nation and Kinaway currency
  • Status at the time of the spend, not only status today
02

Indigenous spend

  • Spend as a proportion of contract value
  • Awarded value distinguished from value actually paid
  • Whether obligations were flowed down to subcontracts and evidenced
  • Spend traced to invoices and payment records, not to a supplier list
  • Pass-through and labour hire arrangements identified
03

Indigenous employment

  • Employment as a proportion of the contract workforce
  • Organisation-wide figures where that election has been made instead
  • Identification supported appropriately and respectfully
  • The combination arithmetic where employment and spend are added to reach a target
04

Labour hours

  • Indigenous labour hours claimed against the project
  • Apprentice, trainee and cadet hours where a skills guarantee applies
  • Timesheets, site access records and payroll reconciled against one another

Hours are where participation reporting is softest. Three systems record them and they frequently disagree.

05

Reporting artefacts

  • Periodic performance reports on workforce and supply chain profile
  • Participation plans checked against what was actually delivered
  • Evidence packs assembled and tested before submission rather than after a request

Every claim receives one of three outcomes

Verified

Supported by primary-source evidence and able to be relied on in reporting.

Qualified

The participation is real, but there are gaps in the supporting evidence. The gaps are stated plainly rather than smoothed over.

Unable to verify

The records required were not made available. Where a subcontractor will not provide records, CIRV recommends that spend not be counted toward Indigenous totals.

How an engagement works

Scoped, evidenced, reported. No open-ended engagements.

Step 01

Scope and fixed proposal

We establish which contracts, which subcontractors and which claims are in scope, then issue a written scope and a fixed price. No hourly drift.

Step 02

Evidence request

A single structured request goes to the parties holding the records, with clear deadlines. CIRV manages the follow-up so your commercial team is not chasing subcontractors.

Step 03

Testing against primary sources

Claims are tested against registers, invoices, payment records, payroll and site systems — not against a spreadsheet supplied by the party being tested.

Step 04

The Readiness Report

A written report stating, claim by claim, whether each is verified, qualified or unable to be verified, with the evidence relied on, the gaps identified, and what can still be corrected.

What you are left holding

A CIRV Readiness Report is written to be handed to someone else. It sets out the claims tested, the evidence relied upon, the outcome for each claim, and the gaps — in a form you can put in front of a client, a principal contractor or an agency without editing it first. If the answer is uncomfortable, it will still be in there.

What assurance is not

CIRV does not certify businesses and does not issue an accreditation. Supply Nation or Kinaway registration confirms a business met an eligibility test at a point in time; it does not confirm what that business was paid on your project, who it employed, or how many hours were worked.

CIRV treats confidential commercial information as confidential, and declines engagements where a conflict would compromise the opinion — including any project where CIRV has managed the participation being examined.

When to engage CIRV

Five moments where assurance earns its cost.

An audit or information request has been flagged

The readiness window is the whole opportunity. A review now finds what will not survive examination while there is still time to act on it.

Before submitting a major report

Periodic and close-out reporting tested before it goes to the client or agency, so the figure you sign is one you can defend.

Before engaging a new supplier

Ownership and control confirmed before the first invoice, rather than discovering a problem after two years of reported spend.

When you have inherited a project

New to a contract, a joint venture or a portfolio, and unsure what the previous reporting was built on.

When you are the subcontractor being asked

A head contractor has asked you to evidence your Indigenous participation and you are not sure what will satisfy them. CIRV can assemble and test the pack before you send it.

Requirements differ by jurisdiction and by contract. CIRV works to the requirements written into your contract, and will tell you at scoping which rulebook applies to the project in question.

The independence rule

CIRV does not audit its own work.

Where CIRV manages Indigenous participation on a project, CIRV will not also provide assurance over that same work.

Management builds the participation. Assurance independently tests work someone else delivered. Assurance over your own work is not independent, and we will tell you before an engagement begins if the line you want would cross that boundary.

Free supplier verification is an entity-level check and sits outside this rule. It does not conflict with either paid line.

Find out what your reporting actually rests on.

Tell us the contract, the reporting period and the subcontractors involved, and CIRV will come back with a scope and a fixed proposal.