Official answer available
Preview the opening of the answer, then unlock the full walkthrough.
I would first stabilize the situation. I need to know what was bought, what has already been committed, what commercial terms are now in play, and what risk the business is carrying because the process was bypassed. The immediate goal is to stop the exposure from getting worse.
After that, I would make the consequence visible internally. Off-process buying usually feels fast in the moment and expensive later. If procurement...
easy
easy
easy
easy
easy
easy