9.3 Budget Implementation Modes: Direct, Shared & Indirect Management
Key Takeaways
Article 317 TFEU makes the Commission responsible for implementing the budget, in cooperation with Member States and in accordance with the Financial Regulation and sound financial management.
Article 62 of Regulation (EU, Euratom) 2024/2509 distinguishes direct management by the Commission, shared management with Member States, and indirect management through listed partner entities.
The auditor must identify which body performs each control, who reports to whom, and where evidence is retained; the mode changes the control chain but not the need for an auditable trail.
For 2021–2027 cohesion programmes, management verifications are risk-based and proportionate, while an independent audit authority provides an annual audit opinion and control report.
Article 157 governs ex-ante assessment of indirect-management partners, including statutory exceptions and supervisory measures when systems comply only in part.
9.3 Budget Implementation Modes: Direct, Shared & Indirect Management
The implementation mode tells an auditor who performs budget tasks, which rules govern the relationship, and where the control evidence should exist. Article 62 of Regulation (EU, Euratom) 2024/2509 provides three modes. Their relative budget shares vary by year and programme; they are not fixed legal percentages.
Treaty and regulatory foundation
Article 317 TFEU states that the Commission implements the budget in cooperation with Member States, on its own responsibility and within the limits of appropriations, having regard to sound financial management. That responsibility coexists with duties assigned by legislation and agreements to Member States and implementing partners. An auditor should therefore avoid two opposite errors: treating every operational control as if the Commission performed it directly, or treating delegation as if it removed Commission supervision.
Direct management — Article 62(1)(a)
In direct management, implementation is carried out by Commission departments, including appropriately authorised staff in Union delegations, or through executive agencies. Typical instruments include grants, procurement contracts, prizes and directly managed financial operations.
The audit trail is comparatively close to the Commission: calls and tender files, evaluations, legal commitments, payment authorisations, beneficiary reports and ex-post checks should be available in Commission or agency systems. Important risks include incorrect eligibility decisions, weak evaluation records, conflicts of interest, duplicate financing, unsupported personnel or subcontracting costs, and failure to verify deliverables before payment.
“Direct” does not mean risk-free or that every transaction receives the same control. The auditor maps the actual control design, selects procedures responsive to assessed risk and tests whether the responsible authorising service obtained sufficient evidence.
Shared management — Article 62(1)(b)
In shared management, the Commission and Member States perform different tasks under sector legislation. Cohesion programmes under Regulation (EU) 2021/1060 illustrate the chain:
- the managing authority selects and manages operations and performs risk-based, proportionate management verifications under Article 74;
- the accounting function prepares and submits accounts and payment applications as allocated by the programme arrangements;
- a functionally independent audit authority conducts system and operation audits and submits an annual audit opinion and annual control report;
- the Commission reviews assurance packages, performs its own supervisory work and can interrupt deadlines, suspend payments or apply financial corrections when the legal conditions are met.
CAP and other shared-management systems use their own sector architecture, such as accredited paying agencies. The labels and controls therefore must be checked against the governing programme rather than copied mechanically from cohesion policy.
Audit risks arise at interfaces: weak selection, procurement breaches, ineligible beneficiaries or costs, unreliable data, ineffective management verification, sampling errors, and delayed correction. A reviewer should reconcile amounts and findings across beneficiary records, managing-authority systems, the accounts, the audit authority’s work and Commission follow-up.
Indirect management — Article 62(1)(c)
In indirect management, the Commission entrusts implementation tasks to persons or entities listed in the Financial Regulation, including third countries or their bodies, international organisations, the EIB Group, Member State bodies, public-law bodies and certain private-law bodies with a public-service mission.
Before relying on a partner’s systems, rules and procedures, the Commission generally performs the ex-ante assessment in Article 157(3) and (4). It examines internal control, accounting and independent external audit, and—where relevant—rules for grants, procurement, financial instruments, exclusion, publication of recipient information and personal-data protection. Article 157(7) contains cases in which the Commission shall or may decide not to require that assessment. Under Article 157(5), partial compliance can be addressed through appropriate supervisory measures specified in the agreement.
The resulting audit is not simply a repeat of the assessment. It tests the contribution or financing agreement, reports and results, use of funds, audit rights, follow-up of recommendations and any supervisory measures. Multi-donor actions, reliance on partner audits, local sub-implementers and data access can complicate the evidence chain.
A mode-to-evidence audit method
For any programme, work through five questions:
- Classification: Which Article 62 mode applies to each component? A programme may contain more than one delivery arrangement.
- Responsibilities: Which entity selects recipients, contracts, authorises payments, keeps accounts, verifies performance and corrects errors?
- Criteria: Which Treaty, Financial Regulation, sector rule, agreement and internal procedure governs each responsibility?
- Evidence: Where are approvals, reconciliations, source records, system logs, audit reports and corrective actions retained, and what access rights exist?
- Supervision and correction: How are exceptions escalated, payments interrupted or suspended where authorised, and irregular expenditure recovered or corrected?
Constructed example
Assume a cohesion operation contains discriminatory tender criteria. The auditor would test the beneficiary’s procurement file, the managing authority’s risk-based verification, the treatment in the accounts, the audit authority’s sampling and conclusion, and the Commission’s supervisory response. The appropriate financial correction depends on the applicable rules and facts; a classroom percentage should never be treated as automatic. The point is to trace one defect through the full shared-management assurance chain.
Under Article 317 TFEU, which institution implements the EU budget on its own responsibility, in cooperation with Member States?
The European Parliament
The European Court of Auditors
The European Commission
The Council presidency
For a 2021–2027 cohesion programme, which body provides the independent annual audit opinion and annual control report?
The beneficiary
The managing authority
The Commission accounting officer
The audit authority
Subject to the exceptions in the current Financial Regulation, which ex-ante assessment is used before the Commission relies on an indirect-management partner’s systems?
The Article 157 assessment of systems, rules and procedures
A vote by the European Parliament’s CONT committee
A joint OLAF–EPPO criminal investigation
A sovereign credit rating from the ECB
What is the strongest first step when auditing a programme delivered through several management arrangements?
Apply the same direct-management checklist to every component
Map each component to its mode, responsible bodies, criteria, evidence and correction chain
Assume delegation transfers all Commission responsibility
Use the largest programme’s controls as a proxy for every other component
Sections you finish are checked off in the contents.