Finance Accounting Marketing Human Resources Sales Corporate Governance Technology Startup Procurement Law
Select Page

Vendor Management

Home>Departments>Procurement>Vendor Management
Procurement Pillar

Vendor Management Hub

Supplier onboarding, performance scorecards, vendor risk, payment controls, contract evidence and the governance of carriers, forwarders and 3PLs. 65 practitioner guides, organised into six focus areas that follow a supplier from first due-diligence check to final claim.

65Expert guides
6Focus areas
Framework

How vendor management works: the supplier lifecycle

Vendor management starts where sourcing ends. Once a supplier has been awarded business, procurement has to make sure the promised price, quality, delivery and compliance actually materialise β€” for months or years, across hundreds of purchase orders and invoices. Without a structured model, supplier performance is judged by whoever complains loudest, risk is discovered only when a delivery fails, and contracts are renewed on autopilot.

The seven-stage lifecycle below is the backbone used across this hub. Stages one and two are covered in Vendor Management: The Complete Procurement Guide and the Supplier Onboarding Checklist; stage four in Supplier Performance Scorecards; stage five in Vendor Risk Management; stage six in Supplier Relationship Management; and stage seven in Vendor Contract Compliance. Upstream decisions live in the Sourcing pillar.

  1. Onboard with due diligenceCollect legal entity, tax, bank, ownership, sanctions, insurance and certification evidence before the first PO. Verify bank details independently.
  2. Segment the supplier baseTier every vendor by spend, criticality and risk so effort goes where exposure is highest β€” not spread evenly across thousands of suppliers.
  3. Set expectations in the contractTranslate the award into SLAs, KPIs, service credits, change-control and exit clauses that can be measured and enforced.
  4. Measure performanceRun scorecards on delivery, quality, cost and responsiveness, with the cadence set by tier. Share results with the supplier.
  5. Monitor risk continuouslyTrack financial health, cyber, sanctions, ESG, concentration and geopolitical exposure; react to trigger events immediately.
  6. Develop strategic relationshipsFor the few suppliers that matter most, run joint business plans, executive reviews and improvement or innovation roadmaps.
  7. Renew, remediate or exitUse the evidence file to renegotiate, issue corrective-action plans or run a controlled exit β€” never let renewals happen by default.

Vendor segmentation: how much control does each supplier need?

TierTypical profileControls that applyReview cadence
StrategicHigh spend and high criticality; hard to replace; often sole or single source.Full SRM, joint business plan, continuous risk monitoring, executive sponsor, contingency plan.Monthly ops / quarterly business review
PreferredSignificant spend in competitive categories; alternatives exist but switching has cost.Scorecard, contract KPIs with service credits, annual risk reassessment, price benchmarking.Quarterly
ApprovedModerate spend or project-based supply; readily substitutable.Onboarding due diligence, insurance and certificate expiry tracking, exception-based monitoring.Annual
TransactionalLow spend, one-off or catalogue purchases.Minimum onboarding, sanctions screening, bank-detail verification, P-card or catalogue controls.On renewal or trigger
Pro tip: build the evidence file before you need itMost supplier disputes are lost on documentation, not on merit. Keep one record per strategic vendor with the signed contract and every amendment, scorecards, corrective-action plans, acceptance certificates, claims correspondence and approved bank-detail changes. The contract, payment and shipment-data areas below show what that evidence should look like in practice.

Vendor management KPIs worth tracking

On-time in-full (OTIF)Share of orders delivered on the agreed date in the agreed quantity. Strategic suppliers are commonly held to 95% or better.
Quality defect rateRejected or reworked units per million (PPM) or percentage of lots rejected, plus the average days to close corrective actions.
Contract price complianceInvoiced price versus contracted price. Any variance above tolerance is leakage that the scorecard should surface automatically.
Invoice accuracyFirst-pass three-way match rate between PO, receipt and invoice. Low rates drive AP cost and late-payment penalties.
Onboarding cycle timeDays from supplier request to activated vendor record. Long cycles push users toward maverick, off-contract spend.
Risk coverageShare of strategic and preferred spend with a current risk assessment, valid insurance and certificates on file.
Supplier concentrationShare of category spend with the top supplier. Above 60% in a bottleneck category needs a documented mitigation plan.
Claims recovery rateValue recovered from supplier and carrier claims as a share of value claimed β€” a direct test of your evidence discipline.
Advertisement
Area 01 · 6 guides

Vendor Management Fundamentals

The core operating model: how to onboard suppliers, score their performance, control vendor risk, run supplier relationship management and keep contracts compliant after award.

Area 02 · 8 guides

Supplier Payment & Invoice Controls

Where vendor management meets cash: letters of credit and advising banks, bills of exchange, beneficiary change control, cash on delivery, commercial-invoice matching and freight pass-through charges.

Advertisement
Area 03 · 11 guides

Supplier Contracts, Claims & Legal Evidence

The evidence file behind every supplier dispute: acceptance and acquiescence, bilateral commitments, freight claims, title transfer, marine incident records, certificates and competition-law exposure.

Area 04 · 13 guides

Carrier, Forwarder & 3PL Governance

Logistics providers are vendors too. Qualify carriers, control forwarder and agent authority, govern 3PL warehouses, CFS operators, cross-docks and outsourced export channels.

Advertisement
Area 05 · 15 guides

Cargo Security, Handling & Stowage

The physical controls suppliers and carriers must evidence: seals and security hardware, restraint and segregation, centre of gravity, breakbulk, dangerous goods and intermodal equipment.

Advertisement
Area 06 · 12 guides

Shipment Documents, Data & Cold Chain

The data trail that proves delivery: air waybills, CMR/eCMR, manifests, customs EDI and consumption entries, barcodes, arrival notices and temperature-controlled transport.

Keep going

Related Procurement pillars

Vendor management receives suppliers from Sourcing and hands renewals back to Contract Negotiation. These pillars complete the procurement cycle.

FAQ

Vendor management questions procurement teams ask

What is vendor management in procurement?

Vendor management is the set of processes procurement uses to control suppliers after they are selected: onboarding and due diligence, performance measurement, risk monitoring, relationship management, contract compliance and, eventually, renewal or exit. Sourcing decides who you buy from; vendor management makes sure the supplier delivers what the contract promised at the agreed cost and risk level.

What is the difference between vendor management and supplier relationship management (SRM)?

Vendor management covers every supplier and is mostly about control: compliance, performance and risk. Supplier relationship management is a subset reserved for the small group of strategic suppliers where joint planning, innovation and executive-level governance create more value than transactional oversight. Most organisations run SRM for 5–10% of suppliers that account for a large share of spend or risk.

Which KPIs should a supplier scorecard include?

A practical scorecard balances four dimensions: delivery (on-time in-full), quality (defect rate or PPM, corrective-action closure), cost (price variance against contract, invoice accuracy) and responsiveness or risk (lead-time reliability, compliance with certifications and insurance). Weight them by category, keep the scorecard to 6–10 measures, and review strategic suppliers quarterly.

How often should vendor risk be reassessed?

Tie the frequency to the supplier tier. Strategic and high-risk vendors warrant continuous monitoring of financial, cyber, sanctions and adverse-media signals plus a formal review at least annually; approved vendors every one to two years; transactional vendors at onboarding and on renewal. Any trigger event β€” ownership change, a failed audit, a payment-detail change or a major incident β€” should force an immediate reassessment.

Why do payment-detail changes need special vendor controls?

Changing a supplier’s bank account or beneficiary is the most common route for invoice and payment fraud. Controls should require a written request, call-back verification to a number already on file (never the one in the request), dual approval in the vendor master and a hold period before the first payment to the new account. The guides in the Supplier Payment area cover these controls in detail.

Should logistics providers be managed as vendors?

Yes. Carriers, freight forwarders, customs agents and 3PL warehouses hold your goods, file declarations in your name and generate a significant share of indirect spend and claims. They need the same onboarding, authority limits, SLAs, scorecards and insurance checks as any product supplier, which is why this hub includes dedicated carrier, cargo and shipment-data areas.

Last Updated: September 2026 · Reviewed by the Kurums Procurement editorial team.