Dr Ian Watt's report, published on Thursday, exposes a critical gap in the way the Australian government manages supplier integrity. "There are currently no assurance mechanisms in place within the Commonwealth procurement framework to provide confidence that all potential significant notifications or non-compliance with the code are being identified and effectively managed," Watt wrote. He warned of a "significant risk that, in the absence of greater coordination across Commonwealth, some unethical suppliers will continue to win Commonwealth contracts."
The review examined how the government handled allegations that KPMG staff in its audit division likely misused confidential client data to win multimillion-dollar contracts. Finance officials first sought assurances from KPMG in late March. The firm responded that it "had not substantiated any wrongdoing and did not anticipate adverse implications for Commonwealth engagements." However, by late May, Finance's concerns had deepened as new allegations emerged through media and parliamentary material rather than through direct disclosure by KPMG.
The government has banned federal agencies from entering new contracts with KPMG before March 1, 2027, and imposed a three-year monitoring framework requiring quarterly progress updates. Finance agreed to most of Watt's recommendations regarding controls around KPMG but only "noted" his proposals to strengthen the government's supplier code of conduct framework, without committing to implement them.
KPMG Australia CEO John Sams and chairman Michael Ebeid said in a statement that the firm accepted the findings and recommendations. "The report lays bare our failings and highlights the hard work that we must do to address them," they said, also quoting a whistleblower who said 99% of KPMG people "are really good" and take serving the public interest seriously. Watt echoed that sentiment about the majority of KPMG staff.
The report's core warning about systemic oversight failures means the risk of unethical conduct by other suppliers may remain undetected, leaving taxpayers exposed.