BidSkim
Free report
Service market

Internal audit contracts

UK public sector · 105 contracts awarded in the 12 months to 6 October 2026

Covering 600+ buyer portals · 5 years of records · Updated 6 October 2026 · How we count

Contracts awarded
105
Last 12 months
Median contract
£151k
Recorded value
Recorded value
£25.4m
96 of 104 main-service contracts have a published value
Buyers
101
Suppliers
38

BidSkim assigns contracts to services from the notice text. How services are assigned

What stands out

  • The five suppliers that won the most internal audit contracts took 55% of them (58 of 105).
  • Contracts awarded per quarter fell 33% from the first half of the period to the second.
  • The median contract, £151k, is 88% above the median across consulting & accountancy contracts (£80k).

Who buys internal audit

By contracts awarded, the 12 months to 6 October 2026.

  1. 1Staffordshire County Council4 contracts
  2. 2East Suffolk Council2 contracts
  3. 3NI Water and its subsidiaries1 contract
  4. 4Pension Protection Fund1 contract
  5. 5Queen's University Belfast1 contract
  6. 6Cottsway Housing Association1 contract
  7. 7De Montfort University1 contract
  8. 8Reclaim Fund Limited1 contract
  9. 9NATIONAL WEALTH FUND LIMITED1 contract
  10. 10Office for National Statistics1 contract

Top internal audit contractors by contracts won

The 12 months to 6 October 2026.

  1. 1RSM20 contracts
  2. 2BDO16 contracts
  3. 3Validera9 contracts
  4. 4TIAA Ltd9 contracts
  5. 5KPMG5 contracts
  6. 6Menzies LLP5 contracts
  7. 7Forvis Mazars5 contracts
  8. 8EY3 contracts
  9. 9WBG Services LLP3 contracts
  10. 10Deloitte2 contracts

Latest and largest awards

Each links to the official notice.

Latest

Largest

Contracts awarded by quarter

7Q4 2025*42Q1 202628Q2 202628Q3 20260Q4 2026*
* part quarter

Where the contracts were awarded

England 88 · Wales 8 · Scotland 6 · Northern Ireland 3

London11South East11Yorkshire and The Humber10West Midlands10East Midlands8Wales8East of England7South West7North East6North West6Northern Ireland3Scotland2UK-wide or not stated16

What is included

An outsourced or co-sourced internal audit service that delivers the buyer's risk-based internal audit plan and the annual head of internal audit opinion on governance, risk management and internal control, including IT audit carried out within that service.

  • Fully outsourced internal audit
  • Co-sourced internal audit and specialist audit resource
  • Head of internal audit input, audit strategy and plan development
  • IT and digital internal audit delivered as internal audit
  • Regional or shared internal audit frameworks
  • Internal audit meeting sector regulator requirements (OfS, Scottish Housing Regulator)

What is not included

  • External audit (see External audit)
  • External quality assessment of the internal audit function (see External quality assessment of internal audit)
  • Investigation of suspected fraud or specific losses, and NHS local counter fraud specialist services (see Counter-fraud and forensic investigation services)
  • One-off data, contract or scheme compliance audits (see Grant certification, compliance and data audits)
  • Data protection officer services (see Data protection officer and information governance services)
  • Standalone cyber assurance and penetration testing (see it software (it.cyber.security consultancy assurance))

Often bought by the same buyers