A simple, repeatable way to risk-assess external suppliers
Replaces the manual form: same criteria, but the scoring, weighting, risk band and review cycle are handled for you, and every assessment is kept in one register.
1. Assess
An internal assessor rates the supplier 1–5 across 24 criteria plus strategic and audit flags.
2. Score
Weighting, flag points, risk band and recommended action are calculated automatically.
3. Act & review
Mitigations get an owner and due date, and the band sets the next re-assessment date.
Weighted model
- Quality Risk30% · 5 criteria
- Delivery Capacity25% · 5 criteria
- Technical Capability20% · 5 criteria
- Commercial & Financial15% · 5 criteria
- Business Continuity10% · 4 criteria
Risk bands
- Low (0+)review every 24 monthsApprove — standard monitoring
- Moderate (30+)review every 12 monthsApprove with ongoing monitoring
- High (50+)review every 6 monthsApprove with conditions and a documented mitigation plan
- Critical (70+)review every 3 monthsEscalate — do not onboard without executive approval