Strategic sourcing, Australia
Strategic sourcing management consulting, and what it should actually produce
Strategic sourcing consulting covers the work between deciding you need to replace something and signing with whoever replaces it: requirements, market scan, shortlist, structured evaluation, negotiation, and a written record of why. CYBORIUM does that work for Australian organisations buying cybersecurity, AI and enterprise IT. Your organisation is not invoiced for it.
- No fee to your organisation
- You never receive an invoice from CYBORIUM, and there is no engagement fee to start.
- Capped provider fee
- Managed services are capped at 20% of revenue. Technology is a 50/50 split. Only the provider you select pays.
- You hold the contract
- You sign directly with the provider. We sell nothing and take no resale margin anywhere in the arrangement.
- Rate disclosed on request
- Ask, and we will tell you the rate that applies to any provider we have put on your shortlist.
What the work covers
Sourcing consulting goes wrong in predictable places, and most of them happen before anyone talks to a provider. This is the order we work in, and the order matters more than any individual step.
Write the requirement before contacting anyone
Requirements, weightings and the definition of a good outcome are agreed with the people who will live with the decision. If a provider helps you write the requirement, you have already narrowed the market to that provider.
Scan the market wider than the obvious three
That includes providers you have not heard of and providers who will not win. A shortlist assembled from the vendors already in your inbox is a record of your inbox, not of the market.
Shortlist against criteria that already exist
Criteria first, names second. When the shortlist arrives before the scoring model, the scoring model tends to have been written backwards from the shortlist.
Evaluate with the reasoning attached
Every score carries the evidence behind it rather than a summary written afterwards. Where a provider was marked down, the page says what for, so the finding can be argued with.
Negotiate on commercial substance
Price, service levels, exit terms, data portability and the clauses that only become expensive in year three. Renewal uplift caps are worth more than a first-year discount and are usually easier to get.
Hand over a record that outlives you
Requirements, scoring, rationale and the options you did not choose, in a form that survives an audit, a board question or a change of CIO eighteen months later.
How this differs from a billed consulting engagement
Most strategic sourcing consultancies bill by the day, by fixed scope, or by taking a share of the savings they report. CYBORIUM is paid by the provider you select. Both arrangements have an incentive built into them, and it is worth seeing them next to each other.
| Billed consulting engagement | CYBORIUM | |
|---|---|---|
| Who pays | Your organisation, by day rate, fixed fee, or a percentage of reported savings. | The provider you select. Your organisation pays nothing. |
| When the cost lands | Before you have a decision, and often before you have a shortlist. | After you have chosen, and only if you choose someone. |
| If you proceed with nobody | You have still paid for the process. | Nobody pays. Shortlisted providers you did not select pay nothing either. |
| Who you contract with | The consultancy for the advice, then the provider separately. | The provider, directly. There is no CYBORIUM contract to sign and no margin on the sale. |
| The conflict | An incentive toward longer engagements and toward savings that are easy to report. | Rates are negotiated with each provider separately, so they are not the same across a shortlist. That gradient is real. |
| How it is bounded | Scope and fee agreement, and your ability to end the engagement. | A contractual cap, no payment from unselected providers, and disclosure of the applicable rate on request. |
We are not going to tell you our model has no conflict of interest. It has one, and pretending otherwise would fail the test the Australian National Audit Office actually applies, which is whether a reasonable person might perceive an interest as prejudicing impartiality. The defensible answer is that the incentive is capped in writing, that providers who do not win are paid nothing, and that you can ask what the rate is. The full breakdown of all three payment models is here, including the four questions worth asking any advisor.
When this is worth doing, and when it is not
Worth doing
The spend is material enough that being wrong is expensive, and the market has moved since you last looked at it. Cybersecurity and AI both qualify on the second point almost automatically.
The service is one your operations depend on. For APRA-regulated entities that is a formal category: CPS 230 requires identifying material service providers and managing the risk of relying on them, which is difficult to evidence from a procurement file that records only the winner.
The decision will be questioned later, by a board, an auditor, or your own successor. A scored comparison answers that question in five minutes. A recollection does not.
Not worth doing
You are renewing something that works, at a price you have recently benchmarked, from a provider whose service levels you can evidence. Run the benchmark, not the process.
The purchase is small enough that a structured evaluation costs more in internal time than the risk it removes. Sourcing effort should be proportionate to the consequence of getting it wrong, rather than applied out of habit.
You have already decided, and want a process to support the decision. We would be a poor fit for that, and the resulting record would not survive scrutiny anyway.
- Australian Government, Commonwealth Procurement Rules, Department of Finance.
- Australian National Audit Office, Management of conflicts of interest in procurement activity and grants programs.
- Australian Prudential Regulation Authority, Prudential Standard CPS 230 Operational Risk Management.
Where this sits in the rest of the practice
- Strategic sourcingThe service overview, including market intelligence and the categories we cover.
- The CYBORIUM methodologyHow requirements, scoring and evidence are structured across an engagement.
- Guided vendor evaluationsThe evaluation itself, run against agreed criteria with the scoring visible.
- Testing an advisor for conflict of interestWhat to ask, and which answers should end the conversation.
- Strategic sourcing for CISOsSecurity tooling, managed detection and the vendors behind your control set.
- Strategic sourcing for CTOsPlatform, cloud and AI decisions with a long tail of architectural consequence.
- Strategic sourcing for CIOsPortfolio-wide sourcing where the binding constraint is usually integration rather than price.
- Technology procurement servicesThe full service across cybersecurity, AI and enterprise IT.
Common questions
What is strategic sourcing management consulting?
It is advisory work that runs a purchasing decision as a structured process rather than a negotiation with whoever called first. The consultant defines requirements with you, scans the supply market, builds a shortlist against agreed criteria, runs a scored evaluation, supports the commercial negotiation, and leaves behind a record of the reasoning. It differs from category management, which is ongoing, and from tender administration, which is the paperwork rather than the judgement.
What does strategic sourcing consulting cost?
In the market generally it is billed as a day rate, a fixed project fee, or a percentage of the savings the consultant reports achieving. CYBORIUM does not bill the client at all. The provider you select pays a capped fee, which is 20% of revenue for managed services and a 50/50 split on technology, and providers you do not select pay nothing. The rate is negotiated with each provider individually, so it varies, and we will tell you what it is for any shortlisted provider if you ask.
How is CYBORIUM different from a procurement consultancy?
Two structural differences. We are not paid by you, so the cost of the process does not have to be justified before the decision exists. And we sell, resell, implement and operate nothing, so there is no margin on the outcome and no product we need the shortlist to accommodate. What we do have is an incentive gradient across providers, because rates differ. We cap it, disclose it on request, and pay nothing to shortlist length.
Do you run the tender, or advise on it?
Both, depending on what already exists. Where you have a procurement function we work alongside it and supply the market view, the evaluation model and the scoring. Where you do not, we run the process end to end. In neither case do we sign the contract: you contract directly with the provider you choose.
Start with the requirement, not the shortlist
A briefing takes about forty minutes. We will ask what the decision is, what it depends on, and who has to defend it later. If a structured sourcing process is not the right answer for you, we will say so on that call.