Just generally, going back maybe to your specific example, departments, deputy heads, are ultimately accountable for how they undertake their resources and how they decide to procure. If it's of a certain level, it will come into Treasury Board for oversight in the specific case.
The department had the authority, and they worked with PSPC and leveraged an existing procurement vehicle that PSPC had in order to act quickly at the time of the pandemic.