Supplier Identification, Evaluation and SelectionIntroductionSupplier selection is a strategic decision rather than a clerical purchasing activity. The supplier chosen for a critical component may influence product quality, operating continuity, innovation, regulatory exposure, working capital, carbon emissions and reputation for many years. A low quoted price can therefore be economically inferior if it generates excessive defects, freight, inventory, inspection, warranty or disruption costs. A robust process begins with a clearly specified need, identifies a sufficiently broad and qualified supplier market, evaluates suppliers against transparent criteria, conducts proportionate due diligence, and records a defensible award decision. The process must also protect competition, manage conflicts of interest and incorporate responsible sourcing expectations. This chapter develops an integrated approach based on total cost of ownership (TCO), capability assessment, multicriteria decision analysis (MCDA), financial analysis, due diligence and responsible sourcing. Learning ObjectivesBy the end of this chapter, students should be able to: - Design a transparent supplier identification and prequalification process.
- Distinguish price, landed cost and total cost of ownership.
- Assess supplier operational, technical, financial and relational capabilities.
- Apply weighted-scoring and other multicriteria decision methods critically.
- Interpret financial indicators relevant to supplier viability.
- Integrate legal, ethical, environmental, human-rights and cybersecurity due diligence.
- Recommend a supplier using evidence, sensitivity analysis and governance controls.
1. The Supplier-Selection DecisionSupplier selection converts a purchasing requirement into a relationship choice. It usually includes five linked decisions: - Scope: What product, service, technology or capability is required?
- Market: Which potential suppliers can credibly meet the requirement?
- Qualification: Which suppliers satisfy minimum threshold requirements?
- Evaluation: How do qualified suppliers compare across criteria?
- Award and transition: Which supplier is selected, under what controls, and how will performance be transferred into the contract and relationship-management system?
The process should separate mandatory requirements from weighted preferences. A supplier lacking a legally required license or an essential safety certification should normally be excluded, regardless of its attractive price. Weighted scoring is appropriate only after threshold conditions have been met. Important terminology- Supplier identification: locating potential sources through market research, databases, industry networks, referrals, trade events and technology platforms.
- Prequalification: screening candidates against minimum requirements before detailed bidding.
- Request for information (RFI): a market-learning document used to obtain capability and market information.
- Request for proposal (RFP): a competitive solicitation seeking a technical and commercial solution.
- Request for quotation (RFQ): a solicitation primarily focused on defined specifications and prices.
- Supplier qualification: evidence-based confirmation that a supplier can satisfy specified requirements.
- Single sourcing: obtaining a requirement from one supplier, whether by choice or because only one is feasible.
- Dual or multiple sourcing: allocating demand among two or more qualified suppliers.
- Supplier segmentation: classifying suppliers according to business impact and supply risk.
2. Translating Need into Selection CriteriaPoor supplier decisions often originate in poor specifications. A cross-functional team should translate the internal requirement into measurable criteria before contacting suppliers. The team may include procurement, engineering, operations, quality, finance, legal, information security, sustainability and end users. A useful specification distinguishes: - Outcome requirements: the business result, such as uptime, service response or performance life.
- Technical requirements: dimensions, materials, interfaces, tolerances, standards or software functionality.
- Commercial requirements: volume, delivery terms, payment, warranty and price structure.
- Risk requirements: continuity, cyber controls, geographic exposure, insurance and recovery capability.
- Responsible-sourcing requirements: labor standards, environmental compliance, traceability and anti-corruption controls.
Criteria should be observable and supported by evidence. “Innovative supplier” is weak unless innovation is defined through relevant patents, engineering resources, co-development examples or validated improvement results. Criteria should also avoid unnecessary restrictions that favor an incumbent or reduce competition without a defensible business reason. Threshold and weighted criteriaThreshold criteria are binary or rule-based: pass/fail, compliant/noncompliant, or minimum acceptable level. Weighted criteria express relative preference among suppliers that have passed the threshold. For example, a selection might require: - legal authority to operate;
- compliance with safety and environmental law;
- minimum production capacity;
- acceptance of the organization's code of conduct; and
- financial and cyber-risk review.
Only then might price, quality, delivery, technical capability and sustainability be scored. 3. Identifying and Prequalifying SuppliersSupplier identification should combine breadth with discipline. Sources include existing supplier performance records, industry associations, qualified supplier databases, trade fairs, technical communities, referrals, public filings and structured online research. Digital discovery is useful, but a web presence is not evidence of capability. A market map can classify potential suppliers by geography, technology, capacity, ownership, regulatory status and supply-network position. It should also identify concentration risk: if nearly all credible suppliers depend on the same sub-tier source, geographic diversification may be less meaningful than it appears. A prequalification questionnaire should request evidence rather than unsupported claims. Typical evidence includes: - corporate registration, ownership and beneficial-owner information;
- relevant licenses, certifications and audit reports;
- customer references and operating history;
- production locations, capacity and utilization;
- quality, maintenance and process-control systems;
- business-continuity and disaster-recovery plans;
- insurance and litigation disclosures;
- environmental permits and emissions information;
- labor, human-rights and modern-slavery policies;
- information-security controls and incident history; and
- audited financial statements or equivalent financial information.
Prequalification has a cost. Excessive questionnaires can discourage smaller but capable suppliers and create a compliance exercise with little decision value. Information requests should therefore be proportionate to spend, criticality, risk and regulatory exposure. 4. Total Cost of Ownership4.1 Beyond the quoted priceThe purchase price is only one component of economic value. TCO estimates the relevant costs over the decision horizon. A practical general model is: TCO = P + F + D + Q + I + O + R + E − V where: - P = purchase price;
- F = freight, insurance and logistics cost;
- D = duties, taxes and border costs that are not recoverable;
- Q = quality-related costs, including inspection, rework, scrap, returns and warranty effects;
- I = inventory and working-capital cost attributable to the sourcing choice;
- O = ordering, administration, installation, operation and maintenance costs, where relevant;
- R = expected risk or disruption cost; and
- E = end-of-life, disposal or environmental compliance cost;
- V = residual value, credits or avoided costs.
All terms must be measured over a consistent time horizon and expressed in the same currency and price basis. Some organizations include only incremental cash costs; others include allocated internal costs. The chosen boundary must be stated because different boundaries produce different results. For uncertain events, expected risk cost can be represented as: R = ∑ᵢ pᵢ × Cᵢ where pᵢ is the estimated probability of disruption event i and Cᵢ is its financial consequence. This is an expected-value model, not a prediction. It is useful for comparing alternatives, but rare catastrophic events may require scenario analysis, risk limits or insurance analysis rather than reliance on an average. If costs occur at different times, present value may be appropriate: PV = ∑ₜ Cₜ ÷ (1 + r)ᵗ where Cₜ is the net cost in period t, r is the period discount rate, and t begins at 0 or 1 according to the model convention. The rate and period must be consistent; for example, an annual rate should not be applied to monthly cash flows without conversion. 4.2 Worked TCO exampleSupplier A quotes $100 per unit, freight is $6, duties are $4, and expected quality and administration costs are $5 per unit. Supplier B quotes $104, freight is $3, duties are $2, and expected quality and administration costs are $1 per unit. Assume inventory and risk costs are equal and excluded from the comparison. Supplier A TCO per unit = $100 + $6 + $4 + $5 = $115. Supplier B TCO per unit = $104 + $3 + $2 + $1 = $110. Although B's quoted price is $4 higher, its relevant TCO is $5 lower per unit. At 20,000 units, the estimated difference is $100,000 before considering uncertainty or implementation costs. The result should be tested through sensitivity analysis because quality costs and logistics assumptions may be uncertain. 5. Capability AssessmentCapability is multidimensional. A supplier may be commercially attractive but unable to maintain process control at the required volume. Assessment should examine both current performance and the ability to scale or recover. Operational and technical capabilityRelevant evidence includes process flow diagrams, equipment lists, capacity calculations, bottleneck analysis, maintenance records, workforce skills, engineering resources, test facilities, process capability studies and production samples. Capacity should be evaluated as available, qualified capacity, not merely installed equipment. A supplier operating near full utilization may have little resilience even if nominal capacity exceeds demand. For measurable characteristics, process capability indices may be useful. Under conventional assumptions of stable, approximately normal process output and reliable estimates of process mean and standard deviation: Cₚ = (USL − LSL) ÷ (6σ) Cₚₖ = min[(USL − μ) ÷ (3σ), (μ − LSL) ÷ (3σ)] Here USL and LSL are upper and lower specification limits, μ is the process mean, and σ is the within-process standard deviation. Cₚ measures potential capability if centered; Cₚₖ also reflects off-centering. These indices are not meaningful when the process is unstable, the data are unrepresentative or the specification limits do not define customer requirements. They should not be treated as universal proof of quality. Quality capabilityReview the supplier's quality-management system, corrective-action discipline, traceability, calibration, change control, complaint data and first-pass yield. A certificate can support an assessment but cannot substitute for evidence that controls work in practice. Site visits, process audits, sample approval and pilot orders provide stronger evidence for high-risk categories. Delivery and resilience capabilityAssess historical on-time delivery, lead-time variability, flexibility, recovery time, alternate sites, sub-tier visibility, inventory policies and contingency arrangements. A supplier's continuity plan should identify triggers, decision rights, communication protocols and recovery priorities—not merely state that a plan exists. Relationship and innovation capabilityStrategic suppliers may be expected to share forecasts, participate in design reviews, protect intellectual property, propose improvements and resolve problems collaboratively. Evidence includes joint-development results, escalation behavior, openness of data and the maturity of governance routines. 6. Multicriteria Decision AnalysisSupplier decisions involve trade-offs among criteria that cannot always be expressed in dollars. MCDA makes those trade-offs visible and auditable. Weighted additive scoringA common model is: Sⱼ = ∑ᵢ wᵢ × xᵢⱼ where Sⱼ is the score of supplier j, wᵢ is the weight of criterion i, and xᵢⱼ is the normalized score of supplier j on criterion i. The weights should sum to 1, and all criterion scores must use a consistent direction: higher must always mean better. For a benefit criterion, min–max normalization may be written as: xᵢⱼ = (yᵢⱼ − min yᵢ) ÷ (max yᵢ − min yᵢ) For a cost criterion: xᵢⱼ = (max yᵢ − yᵢⱼ) ÷ (max yᵢ − min yᵢ) These formulas are appropriate when observed values are comparable and the range is meaningful. If the maximum equals the minimum, the formula has a zero denominator and that criterion provides no discriminatory information. Expert scoring using anchored scales may be preferable when reliable numerical data are unavailable. Illustrative scoringSuppose three qualified suppliers are scored from 0 to 100 using weights of 35% TCO, 25% quality, 20% delivery resilience and 20% sustainability. Supplier X scores 82, 90, 75 and 80 respectively. Its result is: Sₓ = 0.35(82) + 0.25(90) + 0.20(75) + 0.20(80) = 82.2 The score is not an objective truth; it is a structured representation of assumptions. Decision-makers should test whether the result changes when weights, scores or uncertain evidence changes. A supplier that wins only under one precise set of weights may not be a robust choice. Limitations and safeguardsWeighted scoring can hide poor performance through compensation: an excellent price score may offset unacceptable safety performance. Thresholds must therefore protect non-negotiable requirements. Other limitations include double-counting correlated criteria, false precision, inconsistent evaluators and strategic supplier responses. Independent review, documented evidence, calibration sessions and sensitivity analysis improve reliability. More advanced methods—such as the analytic hierarchy process, TOPSIS, outranking methods or stochastic MCDA—may be justified for highly consequential decisions. Their sophistication does not remove the need for sound criteria and trustworthy data. 7. Financial Analysis and Supplier ViabilityFinancial due diligence asks whether a supplier can remain solvent, fund operations and absorb foreseeable shocks. It is not a prediction of failure. It is one input into a risk decision. Useful ratios include: Current ratio = Current assets ÷ Current liabilities Debt-to-equity ratio = Total debt ÷ Shareholders' equity Operating margin = Operating income ÷ Revenue Cash conversion cycle = DIO + DSO − DPO where DIO is days inventory outstanding, DSO is days sales outstanding and DPO is days payable outstanding. These measures require consistent accounting definitions and industry context. A high current ratio does not guarantee liquidity if inventory is obsolete; a low margin may be normal in a competitive industry; and a long cash conversion cycle may create financing pressure without proving insolvency. Review several years of audited statements where available, management accounts, cash-flow trends, debt maturities, covenant pressure, customer concentration, currency exposure, dependence on financial sponsors and material litigation. For private or small suppliers, alternatives may include bank references, trade references, credit reports, management interviews, payment-history data and staged contracting. Financial risk can be mitigated through milestone payments, limits on advance payments, parent guarantees, escrow arrangements, inventory buffers, dual sourcing, step-in rights or continuity plans. Such controls have costs and should be proportionate to exposure. 8. Due Diligence and Responsible SourcingResponsible sourcing is both an ethical obligation and a supply-risk discipline. It addresses the effects of purchasing decisions on people, communities, the environment and organizational integrity. A due-diligence program should examine: - forced labor, child labor, discrimination, wages, working time and freedom of association;
- health and safety, including contractor and migrant-worker risks;
- bribery, fraud, sanctions, conflicts of interest and beneficial ownership;
- environmental permits, hazardous materials, waste, water, emissions and biodiversity impacts;
- conflict minerals or other high-risk raw materials where relevant;
- data protection, cybersecurity and responsible use of technology; and
- subcontracting, traceability and sub-tier controls.
A supplier code of conduct should be incorporated into the sourcing process and contract, but contractual language alone is insufficient. Effective due diligence follows a risk-based cycle: identify risks, prioritize severe and likely impacts, prevent or mitigate them, track performance, communicate relevant information and provide or support remediation. Audits have value but limitations. Announced audits may miss concealed conditions, checklist compliance can displace genuine improvement, and excessive audit duplication burdens suppliers. Responsible sourcing should combine worker voice, grievance channels, documentary review, interviews, site observation, corrective-action verification and collaboration. Where harm is found, immediate disengagement may worsen impacts by removing income; a proportionate response may require remediation, escalation and time-bound improvement, except where law or severe risk demands suspension. 9. Governance, Ethics and TransparencyA defensible selection process has clear roles. The requisitioning function defines need, procurement manages competition, technical experts assess capability, finance reviews economics, legal reviews contractual exposure, and an approval authority authorizes the award. Individuals with conflicts of interest must disclose them and, where appropriate, recuse themselves. Core controls include: - predefined criteria and weights;
- equal information access for bidders;
- controlled communication and documented clarifications;
- separation of technical and commercial evaluations where appropriate;
- secure handling of bids and personal data;
- written reasons for exclusion and award;
- an appeals or supplier-feedback mechanism; and
- retention of evidence according to policy and law.
The process must comply with applicable competition, public-procurement, sanctions, anti-bribery, data-protection and sector-specific requirements. Transparency does not mean disclosing confidential supplier information; it means that the decision logic and process are understandable to authorized reviewers. 10. Technology and AI in Supplier SelectionE-sourcing platforms can standardize invitations, bid versions, approvals, scoring and audit trails. Spend analytics can identify fragmented demand and concentration. Supplier-risk platforms can monitor sanctions, adverse media, cyber incidents, financial signals and environmental indicators. AI can assist with document classification, anomaly detection, risk triage and extraction of contractual obligations. However, AI outputs may reproduce biased data, confuse similarly named companies, rely on stale sources or create unsupported confidence. Human reviewers should verify material findings, preserve source evidence, protect confidential information and establish escalation rules. Automated exclusion from a critical supply opportunity should not occur solely on the basis of an opaque model. 11. Applied Case: Selecting a Precision-Machining SupplierThis is an illustrative case. Orion Medical Devices needs 20,000 precision-machined housings annually. The part is safety-relevant, but failure does not immediately endanger a patient because a final assembly test provides a control. Three suppliers pass the initial legal, quality-system and capacity thresholds. Background and problemSupplier A offers the lowest unit price but is located overseas with a long lead time. Supplier B has the strongest quality record but a higher price. Supplier C is geographically close and flexible but has weaker financial indicators and limited sub-tier transparency. Management must select a primary supplier while avoiding an unjustified price-only decision. AnalysisThe team defines four weighted criteria: TCO 35%, quality capability 30%, continuity and delivery 20%, and responsible sourcing 15%. It conducts a site audit, validates sample measurements, reviews three years of financial information, examines labor and environmental controls, and models disruption scenarios. Because medical compliance and traceability are threshold conditions, any supplier failing them would be rejected before scoring. The team estimates that A's low price is offset by freight, inventory, inspection and disruption exposure. B's unit price is higher, but its process controls and local safety stock reduce expected cost. C's proximity improves response time, but its financial stress requires mitigation. Approach and solutionB receives the highest robust MCDA score across plausible weight ranges. Orion awards B the primary volume under a three-year contract with qualification, change-control, traceability, audit and continuity clauses. It awards a smaller secondary volume to C after requiring a financial-monitoring plan, sub-tier disclosure and corrective actions. A is retained as a development candidate rather than selected immediately because its evidence does not justify the risk. Outcome and learning pointsThe decision creates competition, preserves a qualified alternative and aligns the award with safety and total economics. The case illustrates five principles: thresholds precede scoring; TCO can reverse a price ranking; evidence matters more than declarations; financial and responsible-sourcing risks require mitigation plans; and sensitivity analysis supports a robust rather than merely numerical decision. 12. Implementation and Continuous ReviewSelection is not complete when a purchase order is issued. The award should produce a transition plan covering specifications, tooling, samples, first-article approval, inventory, training, systems integration, logistics lanes and escalation contacts. Contractual promises should become measurable supplier-performance indicators, such as defect rate, on-time delivery, corrective-action closure, emissions data quality and grievance remediation. A post-award review should compare assumptions with actual results. If quality cost was estimated at $1 per unit but becomes $4, the TCO model should be updated. Supplier evaluation is therefore a learning system: performance data improve future qualification, category strategies and relationship decisions. Challenges and LimitationsNo selection model eliminates uncertainty. Data may be incomplete, supplier claims may be strategic, market conditions may change, and criteria may conflict. Small suppliers can be disadvantaged by expensive compliance requirements, while large suppliers can appear safer because they produce more documentation. Financial ratios can be distorted by accounting policies, and audit scores may measure documentation rather than real conditions. Finally, diversification can increase transaction cost and reduce scale economies; resilience is not synonymous with using the maximum number of suppliers. Managers should therefore use proportionality, scenario analysis, expert judgment and periodic review. The best process is not the one with the most criteria, but the one that makes material assumptions visible and links them to effective controls. Best-Practice Checklist- Define the business outcome and risk appetite before contacting suppliers.
- Separate mandatory thresholds from compensable preferences.
- Use cross-functional criteria with clear evidence requirements.
- Compare alternatives using TCO, not quoted price alone.
- Validate operational capability through samples, audits and references.
- Review financial resilience and create proportionate mitigations.
- Integrate human-rights, environmental, integrity and cyber due diligence.
- Normalize scores consistently and test sensitivity to weights and assumptions.
- Document conflicts, communications, exclusions and award rationale.
- Convert selection assumptions into contract terms and performance reviews.
Chapter SummarySupplier identification, evaluation and selection should be designed as a transparent, evidence-based governance process. Requirements must be translated into measurable technical, commercial, risk and responsible-sourcing criteria. Prequalification protects the process by screening mandatory conditions before weighted comparison. Total cost of ownership captures purchase, logistics, quality, inventory, operating, risk and end-of-life effects, while financial analysis assesses the supplier's ability to remain viable. Capability assessment examines technical, operational, quality, continuity, relationship and innovation dimensions. MCDA structures trade-offs but must be protected against double-counting, false precision and compensation for unacceptable performance. Due diligence extends beyond certificates to labor, environmental, integrity, cyber and sub-tier risks. Technology can improve visibility, but AI requires human verification and governance. Finally, supplier selection is the beginning of a managed relationship: assumptions must become contractual controls, performance measures and continuous learning. Key TermsTotal cost of ownership: The complete relevant cost of acquiring, using, managing and disposing of a supply option. Prequalification: Screening potential suppliers against minimum requirements before detailed evaluation. Threshold criterion: A mandatory condition that must be met before a supplier can be considered. Multicriteria decision analysis: A structured method for comparing alternatives across multiple criteria. Weighted additive model: A scoring model that multiplies criterion scores by weights and sums the results. Normalization: Converting measurements expressed on different scales into comparable scores. Capability assessment: Evaluation of whether a supplier can reliably meet technical, quality, volume and delivery requirements. Process capability: The ability of a stable process to produce output within specified limits. Supply resilience: The capacity to prepare for, absorb, recover from and adapt to disruption. Due diligence: Investigation and ongoing monitoring of legal, financial, ethical, environmental and operational risks. Responsible sourcing: Purchasing that considers impacts on people, society, the environment and organizational integrity. Supplier segmentation: Classification of suppliers according to business impact and supply risk. Expected risk cost: Probability-weighted estimate of consequences from uncertain events. Financial viability: The capacity to remain solvent, liquid and operational over the relevant horizon. Threshold-and-score model: A decision structure in which non-negotiable requirements are assessed before weighted preferences. Supplier audit: A structured examination of supplier systems, records, practices and evidence. Change control: Formal management of changes to specifications, processes, materials or sources. Sensitivity analysis: Testing how a decision changes when assumptions, weights or data vary. Review QuestionsShort Answer Questions- Why should mandatory supplier requirements be assessed before weighted scoring?
- Distinguish purchase price, landed cost and total cost of ownership.
- What evidence could be used to assess a supplier's qualified capacity?
- Why can a supplier certificate not by itself prove effective quality control?
- Identify two limitations of weighted additive scoring.
Long Answer Questions- Explain how a cross-functional team should translate a business requirement into supplier-selection criteria.
- Discuss the components and assumptions of a total cost of ownership model.
- Compare financial analysis, operational capability assessment and responsible-sourcing due diligence as sources of supplier evidence.
- Explain how governance controls can make a competitive supplier-selection process transparent and defensible.
- Critically evaluate the use of AI and digital platforms in supplier identification and evaluation.
Analytical / Application Questions- A supplier quotes $90 per unit, with $8 freight, $3 duty and $6 expected quality cost. A second quotes $96, with $4 freight, $1 duty and $2 expected quality cost. Calculate each supplier's TCO per unit and recommend one before considering other factors.
- Design a threshold-and-score model for selecting a supplier of a safety-relevant component. Justify at least four threshold criteria and four weighted criteria.
- A supplier has excellent quality and price scores but weak cash flow, poor sub-tier visibility and unresolved labor complaints. Recommend whether to reject, select, or conditionally select the supplier, and specify appropriate controls.
Multiple Choice Questions with AnswersQuestion 1Which statement best describes a threshold criterion in supplier selection? A. A preference that receives a high percentage weight B. A mandatory requirement that must be met before further evaluation C. A cost estimate used only after contract award D. A supplier score normalized to a common scale Correct Answer: B. A mandatory requirement that must be met before further evaluation Question 2A supplier has a purchase price of $100 per unit, freight of $6, duties of $4, and quality costs of $5. What is its stated TCO per unit when no other costs are included? A. $105 B. $110 C. $115 D. $120 Correct Answer: C. $115 Question 3In a weighted additive MCDA model, what must generally be true of the criterion weights? A. They must all be equal B. They must sum to 1 when expressed as proportions C. They must be expressed only in dollars D. They must be assigned after supplier scores are known Correct Answer: B. They must sum to 1 when expressed as proportions Question 4Which evidence most directly supports an assessment of qualified production capacity? A. A supplier's marketing brochure B. A list of unrelated patents C. Validated process data, equipment information and utilization analysis D. A low initial quotation Correct Answer: C. Validated process data, equipment information and utilization analysis Question 5What does the process capability index Cₚ primarily measure under its stated assumptions? A. Supplier profitability B. Potential spread capability relative to specification width C. The probability of supplier bankruptcy D. Average delivery lead time Correct Answer: B. Potential spread capability relative to specification width Question 6Which ratio is calculated as current assets divided by current liabilities? A. Operating margin B. Debt-to-equity ratio C. Current ratio D. Cash conversion cycle Correct Answer: C. Current ratio Question 7Why should TCO comparisons use a consistent time horizon and currency basis? A. To ensure costs are economically comparable B. To guarantee the lowest-price supplier wins C. To eliminate the need for risk analysis D. To avoid reviewing supplier quality Correct Answer: A. To ensure costs are economically comparable Question 8Which is a limitation of supplier audits? A. They can never examine documentary evidence B. They may encourage checklist compliance without proving real-world conditions C. They eliminate the need for worker feedback D. They always impose identical legal requirements worldwide Correct Answer: B. They may encourage checklist compliance without proving real-world conditions Question 9What is the principal danger of allowing a high price score to compensate for unacceptable safety performance? A. Over-normalization of financial data B. Loss of competition among qualified suppliers C. A supplier may be selected despite a non-negotiable risk D. Excessive use of present-value calculations Correct Answer: C. A supplier may be selected despite a non-negotiable risk Question 10What is an appropriate governance practice when AI identifies a serious supplier risk? A. Automatically exclude the supplier without review B. Ignore the result because AI is never useful C. Verify the finding against reliable source evidence and apply human oversight D. Publish the supplier's confidential data publicly Correct Answer: C. Verify the finding against reliable source evidence and apply human oversight
|