Process family
Supplier quality: seven templates from risk tiering to supplier evaluation
The supplier quality cycle in seven flowcharts: risk tier, selection, approval to the vendor list, incoming inspection, supplier corrective action, second-party audit and ongoing evaluation, plus food, furniture and SOC 2 variants.
Supplier quality is the cycle that decides which suppliers you buy from, checks what they deliver, holds them to account when it fails and periodically decides whether to keep them. The seven templates in sequence run from risk tier through selection and approval to the vendor list, incoming inspection at goods-in, the supplier corrective action request, the second-party audit and the recurring evaluation that can de-list a supplier.
The cycle starts before there is a supplier. A supplier risk assessment tiers the third party by data sensitivity, spend, replaceability and country risk, and the tier decides how much of what follows applies. Selection runs the competition, long list, RFI shortlist, weighted RFQ scoring and references (its decision-tree twin settles the route first: direct award, three quotes or tender), and hands a recommendation to vendor approval, which decides whether it joins the approved vendor list, on what conditions and with what re-approval date, after a questionnaire, quality and financial checks and a trial order.
At goods-in, incoming inspection checks documents against the purchase order and samples to plan; failures are quarantined and reported. That report triggers a supplier corrective action request, the cross-company half of CAPA: you set deadlines; the supplier proves root cause and escape point and fixes them. A supplier audit samples evidence on site; evaluation scores quality, delivery, cost and service KPIs and decides whether the supplier continues, improves under a plan or leaves the list. No standalone offboarding template exists; de-listing is an exit of the evaluation and the SCAR.
Two weak points recur: approval by procurement alone, so quality first meets a supplier at incoming inspection, and evaluation from memory rather than the inspection and SCAR record. The food, furniture and contract laboratory variants are the approval step with each industry's own evidence: an allergen statement, trial orders of timber and fabric, a defined testing scope. Vendor onboarding is the same step seen by legal and finance, down to the bank-detail callback; SOC 2 vendor management is the version where the risk is the supplier's access to your data, and the one that draws offboarding: access revoked, data returned. Goods receipt also feeds procure-to-pay.
The sequence
Step 1: Supplier risk assessment flowchart (decision tree)
Supplier risk assessment flowchart: a decision tree of data, access, spend, dependency and certification tests that set the tier and depth of due diligence.
Step 2: Supplier selection process flowchart with weighted scoring
Supplier selection process flowchart template: long list, RFI shortlist, weighted RFQ scoring, site visit, total cost and selection recommendation.
Step 3: Vendor approval process flowchart template
A vendor approval process flowchart template: questionnaire, quality and financial checks, risk tiering, audit, trial order and the approved vendor list.
Step 4: Incoming inspection process flowchart (goods-in quality)
Incoming inspection process flowchart for purchased material: goods-in hold, certificate checks, risk-based sampling, lab testing, concession and rejection.
Step 5: Supplier corrective action process flowchart (SCAR, issue to closure)
Supplier corrective action process flowchart (SCAR): screen the failure, issue with deadlines, contain stock on both sides, prove root cause and escape point, verify effectiveness over agreed lots, then close or escalate.
Step 6: Supplier audit process flowchart (second-party audit)
Supplier audit process flowchart template: risk-based audit programme, notification and agenda, pre-audit pack, opening meeting, evidence sampling, graded findings, corrective action plan and approved-list status.
Step 7: Supplier evaluation process flowchart (ongoing performance)
Supplier evaluation process flowchart for suppliers already in use: quality, delivery, cost and service KPIs, scorecard, review, improvement plan, de-listing.
Also part of this family
- Supplier selection decision tree template — A supplier selection decision tree: seven tests from approved supplier and tender threshold through to cost and risk, ending in five named sourcing outcomes.
- Vendor onboarding process flowchart — Vendor onboarding process flowchart with swimlanes for requester, procurement, legal, finance and security, from vendor request to approved register entry.
- Supplier qualification process flowchart (furniture materials) — A supplier qualification process flowchart covering risk assessment, sample evaluation, a limited-volume trial order, and formal approval.
- Food supplier approval process flowchart (documentation to approved list) — Food supplier approval flowchart template: risk category, documentation request (specs, food-safety certification, insurance, allergen statement), review, risk-based audit or questionnaire, trial order and approved supplier list.
- SOC 2 vendor management workflow (CC9.2, CC3.4) — A SOC 2-ready vendor management workflow: due diligence, risk assessment, contracting, ongoing monitoring, and offboarding, with approval gates and reviewer signatures captured for the Type II audit window.
- Contract laboratory qualification process flowchart — An editable contract laboratory qualification workflow for defining outsourced test scope, assessing capability, resolving gaps, recording authorization and setting review triggers.
Used in these industries
Related guides
- How to create an approval workflow — How to design an approval workflow: decide what each gate is really deciding, set thresholds from your delegation of authority, route rejections somewhere, and record who approved what.
- How to create a process for ISO 9001 — ISO 9001 clause 4.4 asks for six determinable things about a process, and a flowchart carries three of them unaided. Where the criteria, the resources and the risks have to go instead.
- How to document a business process — How to document a process so it stays true: name an owner per step, record the decision rules, put the document under version control and approval, and set a review date. With a live example.
- How to map roles and responsibilities in a process — How to map roles and responsibilities across a process: one accountable owner per step, lanes for the roles that act, and a RACI only where the diagram cannot carry the answer.
- How to create a vendor onboarding process — How to design a vendor onboarding process that keeps qualification and enablement apart: the gate that has to be the only way into payment setup, and why enablement steps carry controls too.