Vendor & Supplier Management

Chapter 9
Supplier Relationship Management and Governance

Advance Diploma in Purchase Management
Vendor & Supplier Management   •   Advance Diploma

Supplier Relationship Management and Governance

Introduction

Supplier relationship management (SRM) is the disciplined management of an organisation’s interactions with suppliers throughout the commercial relationship. It extends beyond purchasing transactions and contract administration. Effective SRM aligns supplier capabilities with organisational strategy, protects continuity of supply, develops performance, manages risk, and creates value through collaboration.

In contemporary procurement, suppliers may provide raw materials, finished goods, information technology, logistics, engineering expertise, facilities, or outsourced business processes. Their performance can influence cost, quality, innovation, customer satisfaction, regulatory compliance, reputation, and organisational resilience. Consequently, supplier relationships should not all be managed in the same way. A low-value, easily replaceable supplier requires proportionate transactional control, while a supplier providing a critical technology platform may require executive sponsorship, joint planning, and formal governance.

Governance provides the structure within which SRM operates. It clarifies authority, decision rights, information flows, review forums, performance measures, escalation routes, and ethical boundaries. The central managerial challenge is to achieve an appropriate relationship design: sufficiently collaborative to realise value, but sufficiently controlled to protect the organisation’s interests.

Learning Objectives

By the end of this chapter, a learner should be able to:

  1. Distinguish transactional, preferred, and strategic supplier relationships.
  2. Segment suppliers using value, risk, criticality, and substitutability.
  3. Design governance structures, review forums, communication protocols, and escalation paths.
  4. Allocate responsibilities among procurement, business stakeholders, suppliers, and executives.
  5. Construct practical supplier performance-management and business-review arrangements.
  6. Evaluate ethical, legal, technological, and organisational issues in SRM.
  7. Apply SRM principles to a complex supplier-management case.

1. The Nature and Purpose of SRM

Supplier relationship management is a cross-functional capability rather than a procurement-only activity. Procurement may own the commercial relationship, but operational users, quality personnel, finance, information security, legal advisers, risk specialists, and senior executives may all influence outcomes.

SRM has five interconnected purposes:

  • Operational assurance: ensuring that goods and services meet agreed requirements.
  • Commercial value: managing price, total cost, productivity, and contract value.
  • Risk management: identifying and reducing supply, financial, cyber, legal, environmental, and reputational risks.
  • Development and innovation: improving processes, products, technology, and sustainability through appropriate collaboration.
  • Relationship governance: establishing predictable decision-making, accountability, communication, and escalation.

A relationship is not automatically strategic because a supplier is large, well known, or expensive. Strategic significance depends on the supplier’s effect on organisational objectives and the difficulty of replacing or controlling it. A relatively small supplier may be strategically important if it provides a unique component or supports a regulated process.

Important terminology

  • Supplier: an external organisation that provides goods, services, works, technology, or capability.
  • Vendor: often used interchangeably with supplier, although in some organisations it refers more narrowly to a seller of standard goods or services.
  • SRM: a structured approach to managing supplier interactions and performance to achieve organisational objectives.
  • Supplier segmentation: classification of suppliers according to factors such as spend, risk, criticality, value, and substitutability.
  • Governance: the system of authority, accountability, controls, forums, information, and decision rights used to direct and oversee a relationship.
  • Business review: a scheduled meeting in which performance, risks, plans, issues, and improvement opportunities are examined.
  • Executive sponsor: a senior manager who provides strategic support, removes organisational barriers, and maintains senior-level alignment.
  • Escalation: the controlled movement of an unresolved issue to a higher authority or a specialised decision forum.
  • Service-level agreement (SLA): a documented agreement specifying service expectations and performance measures.
  • Key performance indicator (KPI): a measure used to assess performance against an objective or requirement.

2. Relationship Archetypes

A useful SRM design begins by distinguishing three broad relationship types. These are not rigid categories; a supplier may move from one category to another as business conditions change.

2.1 Transactional relationships

Transactional suppliers provide standard, readily available products or services. Competition is usually strong, switching costs are low, and the buyer’s main concerns are price, accuracy, delivery, compliance, and administrative efficiency.

Typical controls include:

  • purchase orders and standard terms;
  • catalogue or e-procurement controls;
  • defined specifications;
  • invoice and delivery accuracy measures;
  • exception-based communication; and
  • periodic, rather than continuous, performance monitoring.

The objective is not to create unnecessary partnership activity. Excessive meetings, bespoke reporting, or senior management involvement can increase cost without creating value. Governance should therefore be light, standardised, and largely exception-driven.

2.2 Preferred relationships

Preferred suppliers provide recurring value and have demonstrated performance, capability, or market relevance. They may serve several departments, offer favourable commercial terms, or possess capabilities that justify coordinated management. The buyer may reduce the supplier base and direct a greater share of business toward these suppliers.

Preferred-supplier governance commonly includes:

  • a named relationship manager;
  • quarterly or semi-annual performance reviews;
  • agreed improvement plans;
  • demand and capacity discussions;
  • consolidated spend visibility;
  • negotiated service or pricing arrangements; and
  • structured issue resolution.

Preferred status should be earned and reviewed. It should not become an entitlement that protects a supplier from competition or performance scrutiny.

2.3 Strategic relationships

Strategic suppliers have a material influence on organisational performance, continuity, competitive position, or transformation. They may provide scarce capability, critical infrastructure, intellectual property, regulated services, or a high-risk component. The relationship may involve mutual dependency and substantial switching costs.

Strategic governance commonly involves:

  • executive sponsorship;
  • a joint governance charter;
  • multi-year plans and road maps;
  • joint risk and continuity planning;
  • formal innovation or value-creation programmes;
  • senior business reviews;
  • financial and operational transparency appropriate to the contract;
  • integrated performance dashboards; and
  • defined crisis and executive escalation routes.

Strategic does not mean informal or uncritical. Collaboration must remain supported by clear contractual rights, audit access, competition safeguards, confidentiality controls, and measurable outcomes.

Relationship typeMain purposeTypical governanceMain risk if mismanaged
TransactionalEfficient execution of routine purchasesStandard terms, automated controls, exception reportingAdministrative failure or unnecessary cost
PreferredReliable recurring value and coordinated improvementNamed manager, periodic reviews, improvement plansComplacency or supplier overdependence
StrategicJoint value, resilience, innovation, and continuityMulti-level governance, executive sponsor, joint plansLock-in, concentration risk, or loss of control

3. Supplier Segmentation and Relationship Design

Segmentation prevents the organisation from applying the same management effort to every supplier. A practical segmentation process should combine at least four dimensions:

  1. Business impact: the effect of supplier performance on revenue, service, quality, safety, customers, or strategic objectives.
  2. Supply risk: the probability and consequence of disruption, including geographic, financial, geopolitical, cyber, capacity, and regulatory risks.
  3. Relationship value: potential for cost reduction, innovation, productivity, sustainability, or capability development.
  4. Substitutability: the availability, time, cost, and feasibility of alternative suppliers.

Spend is useful but insufficient. High spend may indicate commercial importance, yet a low-spend supplier can be critical if it controls a unique capability. Similarly, a supplier with low current risk may become important after a change in technology, regulation, or operating model.

A practical segmentation method

First, establish the supplier population and remove duplicate records. Next, collect evidence on spend, category, contract expiry, critical services, incidents, financial condition, alternatives, and stakeholder dependency. Then score suppliers using a transparent scale, such as 1 to 5, for impact, risk, relationship value, and substitutability. The scores should support discussion rather than create false precision.

One possible prioritisation index is:

P = wI I + wR R + wV V + wD D

where:

  • P is the prioritisation index;
  • I is business impact;
  • R is supply risk;
  • V is potential relationship value;
  • D is dependency or difficulty of substitution; and
  • wI, wR, wV, and wD are non-negative weights whose sum is 1.

This is a decision-support model, not an objective law. It assumes that the dimensions have been scored on comparable scales and that the organisation has deliberately chosen the weights. It is applicable when management needs a transparent prioritisation method, but it should be supplemented by professional judgement and scenario analysis.

For example, suppose a supplier is scored as impact 5, risk 4, value 3, and dependency 5. If the respective weights are 0.30, 0.30, 0.20, and 0.20, then:

P = (0.30 × 5) + (0.30 × 4) + (0.20 × 3) + (0.20 × 5) = 4.30

The result indicates high management priority under the organisation’s chosen scale. It does not, by itself, prove that the supplier must be classified as strategic; the classification should also consider regulatory requirements, resilience options, and executive judgement.

Segmentation should be reviewed at least annually and whenever there is a major incident, acquisition, outsourcing decision, technology change, market disruption, or material change in supplier dependency.

4. Governance Architecture

Governance translates relationship intentions into repeatable management practices. A mature governance architecture normally operates at several levels.

Operational level

Operational personnel manage day-to-day delivery, orders, forecasts, tickets, quality issues, service requests, and invoice discrepancies. They should have clear service contacts and authority to resolve routine matters.

Tactical level

Category managers, contract managers, supplier account managers, and functional leads review trends, corrective actions, capacity, risks, commercial issues, and improvement initiatives. Tactical forums are usually monthly or quarterly, depending on criticality.

Strategic or executive level

Senior leaders consider business alignment, investment, major risks, transformation, unresolved disputes, continuity, and the future of the relationship. Executive meetings should not merely repeat operational data; they should address decisions requiring authority, resources, or strategic alignment.

Governance charter

A governance charter should state:

  • purpose and scope of the relationship;
  • participating organisations and roles;
  • decision rights and approval thresholds;
  • meeting levels, frequency, and attendees;
  • performance measures and reporting format;
  • information-sharing and confidentiality rules;
  • issue, risk, and change-control processes;
  • escalation triggers and response times;
  • continuous-improvement expectations;
  • conflict-of-interest and ethical requirements; and
  • review and amendment arrangements.

The charter should complement, not contradict, the contract. The contract establishes enforceable rights and obligations; the charter explains how the parties will manage the relationship in practice.

Communication protocols

Communication protocols should specify the channel, owner, expected response time, recordkeeping requirement, and confidentiality level for each type of communication. For example, routine service requests may use a service-management portal, contractual notices may require formal written notice, and urgent safety incidents may require immediate telephone escalation followed by documented confirmation.

Poor communication protocols create two opposite risks: operational matters are escalated unnecessarily, or material risks remain hidden because staff do not know when and how to report them.

5. Roles and Responsibilities

Clear accountability reduces the tendency for problems to be treated as “procurement issues” when they require cross-functional action.

RolePrincipal responsibilities
Executive sponsorMaintains senior alignment, resolves barriers, supports major decisions, and protects strategic focus
Procurement or category managerOwns commercial strategy, supplier segmentation, negotiation, value delivery, and relationship planning
Contract managerAdministers obligations, notices, changes, records, remedies, and compliance with contract terms
Business ownerDefines business outcomes, confirms service needs, accepts operational performance, and manages internal adoption
Technical or quality leadSets technical standards, validates quality, investigates defects, and approves corrective actions
Risk, legal, finance, and security specialistsProvide specialist assurance, controls, advice, and approvals
Supplier account executiveCoordinates supplier resources, commitments, reporting, and executive communication
Supplier operational leadManages daily delivery, staffing, incidents, service levels, and corrective actions

A responsibility assignment matrix can clarify who is accountable, responsible, consulted, and informed for major activities. One individual should normally be accountable for each decision, even when several people are responsible for contributing work.

6. Performance Management and Business Reviews

Performance management should connect measures to outcomes rather than reward the production of reports. A balanced supplier scorecard may include:

  • delivery reliability and lead time;
  • quality, defects, and right-first-time performance;
  • service responsiveness and resolution time;
  • cost, price variance, and productivity;
  • compliance, safety, and information security;
  • sustainability and responsible sourcing;
  • innovation and improvement commitments; and
  • relationship health and stakeholder satisfaction.

Measures should have precise definitions, data sources, owners, reporting frequency, targets, tolerances, and consequences. A KPI without a definition is an argument waiting to happen. For example, “on-time delivery” should specify the agreed delivery date, treatment of approved changes, partial deliveries, and the population included in the calculation.

A supplier score may be calculated using a weighted average when the measures are normalised to a common scale:

S = ∑(wi × xi), i = 1 to n

where S is the overall score, wi is the weight assigned to measure i, xi is the normalised result for that measure, and the weights sum to 1. This method assumes that the measures are meaningfully comparable after normalisation and that the chosen weights reflect organisational priorities. It should not conceal a critical failure: a supplier can achieve a good average score while failing a mandatory safety or security requirement. Such requirements should therefore be treated as pass/fail gates or separately escalated thresholds.

Business-review cycle

A productive business review usually follows this sequence:

  1. Confirm the previous minutes, actions, and decisions.
  2. Review performance against agreed measures and explain significant variances.
  3. Examine incidents, complaints, risks, and overdue corrective actions.
  4. Consider forecast demand, capacity, resource changes, and dependencies.
  5. Review commercial, contractual, financial, and compliance matters.
  6. Evaluate improvement, innovation, sustainability, and value initiatives.
  7. Agree decisions, owners, deadlines, and escalation requirements.
  8. Record the outcome and communicate relevant actions.

The agenda should be proportionate. A strategic review may include market conditions, investment road maps, resilience scenarios, and joint innovation; a transactional supplier may require only exception reporting and periodic compliance checks.

7. Escalation and Issue Management

Escalation is not punishment. It is a controlled mechanism for obtaining timely decisions, resources, expertise, or authority when normal resolution is insufficient.

An escalation design should identify:

  • severity categories;
  • business impact and urgency;
  • initial owner;
  • response and resolution targets;
  • authority required at each level;
  • communication recipients;
  • evidence and documentation requirements; and
  • conditions for closure and lessons learned.

A typical path is operational resolution, contract or category management, senior business management, and executive or crisis governance. However, safety, cyber, regulatory, fraud, or data-breach events may bypass ordinary levels and require immediate specialist notification.

Escalation should be based on evidence and agreed triggers, such as repeated KPI failure, an uncontained safety incident, threatened continuity, unauthorised data access, a material contract breach, or failure to implement an agreed corrective action. The parties should distinguish between:

  • issue management, which addresses an existing problem;
  • risk management, which addresses a possible future event; and
  • dispute management, which addresses a disagreement about rights, obligations, facts, or remedies.

A sound process preserves the relationship while protecting contractual rights. It should encourage early disclosure, root-cause analysis, corrective action, and proportional remedies. Informal accommodation may be appropriate for a minor isolated error, but repeated concessions can create an unintended variation of practice and weaken control.

8. Executive Sponsorship and Stakeholder Alignment

Executive sponsorship is valuable when the relationship is strategically important, cross-functional, politically sensitive, or exposed to significant risk. The sponsor should not replace the contract manager or make routine operational decisions. Instead, the sponsor should:

  • articulate the strategic purpose of the relationship;
  • ensure that internal stakeholders support agreed priorities;
  • remove barriers involving funding, policy, or organisational authority;
  • participate in major reviews and crisis decisions;
  • maintain appropriate senior-level communication; and
  • challenge both parties when collaboration or performance falls short.

Sponsors need a concise, reliable briefing that distinguishes facts, assumptions, decisions required, exposure, and recommended action. Executive attention is scarce; poor reporting can either create unnecessary alarm or delay action on a genuine threat.

Internal alignment is equally important. A supplier may receive conflicting instructions from procurement, operations, technology, and finance. The organisation should establish a single relationship-management structure, define who may issue commitments, and ensure that changes are authorised through the agreed process.

9. Ethical, Legal, and Regulatory Governance

Supplier relationships create ethical risks because repeated interaction can produce familiarity, gifts, hospitality, conflicts of interest, preferential treatment, or inappropriate information sharing. Controls should cover:

  • gifts, hospitality, sponsorship, and travel;
  • conflicts of interest and supplier selection;
  • confidentiality and commercially sensitive information;
  • competition and antitrust concerns;
  • modern slavery, labour rights, and responsible sourcing;
  • environmental claims and supply-chain emissions;
  • data protection and cybersecurity;
  • anti-bribery and fraud prevention; and
  • records, auditability, and whistleblowing.

A collaborative relationship must not compromise fair competition or procurement integrity. Buyers should not disclose one supplier’s confidential pricing or proprietary ideas to another supplier without lawful authority. Joint innovation should define ownership, licensing, background intellectual property, and use rights before substantial work begins.

Regulatory obligations vary by jurisdiction and sector. Public-sector procurement may require transparency, equal treatment, and formal remedies. Healthcare, finance, defence, energy, and critical infrastructure may impose additional resilience, safety, data, and third-party-risk requirements. Organisations must therefore obtain appropriate legal and compliance advice rather than treating a generic SRM model as universally sufficient.

10. Technology, Data, and Artificial Intelligence

Technology can improve SRM through supplier portals, contract-lifecycle management, electronic invoicing, performance dashboards, risk-monitoring tools, workflow automation, and collaboration platforms. Integrated data can reveal concentration, overdue actions, recurring defects, and spend outside contract.

Artificial intelligence may assist with clause extraction, anomaly detection, supplier-risk monitoring, meeting summarisation, forecasting, and identification of recurring service failures. However, AI outputs are not automatically accurate or appropriate for decision-making. Governance should address:

  • data quality and ownership;
  • confidentiality and permitted data use;
  • explainability and human review;
  • bias and unfair supplier treatment;
  • cybersecurity and model access;
  • retention and audit trails; and
  • accountability for decisions influenced by AI.

An automated risk score should support investigation, not silently determine supplier exclusion or commercial sanctions. Human judgement, documented evidence, and an opportunity for appropriate supplier response remain important, particularly where decisions affect market access or contractual rights.

11. Illustrative Case: Meridian Health Systems and NovaMed Logistics

This is a fictional illustrative case.

Background

Meridian Health Systems outsourced temperature-controlled distribution of medicines to NovaMed Logistics. NovaMed was initially classified as a preferred supplier because it offered national coverage and competitive rates. After a merger, Meridian’s dependence increased: NovaMed handled 72% of deliveries, its tracking platform became integrated with Meridian’s inventory system, and alternative capacity was limited in two regions.

Problem

Over six months, delivery performance declined. The headline on-time KPI remained above target because the supplier excluded approved rescheduling and partial deliveries from its calculation. Meridian experienced temperature excursions, incomplete electronic records, and delayed incident notifications. Internal stakeholders also gave NovaMed inconsistent instructions. No executive sponsor existed, and the monthly meeting focused mainly on invoice disputes.

Analysis

A cross-functional review identified four weaknesses:

  1. The supplier segmentation had not been updated after the merger and increased dependency.
  2. The KPI definition did not reflect the clinical risk of late or incomplete delivery.
  3. Governance lacked a strategic forum, clear escalation triggers, and a senior owner.
  4. The technology integration created operational benefits but also switching and cyber risks.

Meridian reclassified NovaMed as strategic. It performed a dependency and continuity assessment, reviewed alternative logistics capacity, and separated mandatory safety requirements from general performance measures.

Approach and solution

Meridian established a governance charter with three levels: weekly operational control, monthly tactical performance management, and quarterly executive review. A clinical quality lead, procurement manager, information-security specialist, finance representative, and business owner joined the governance structure.

The parties revised the scorecard to include temperature excursions, complete delivery records, incident-notification time, on-time-in-full delivery, corrective-action closure, and cyber-control compliance. Temperature excursions and serious notification failures were treated as critical thresholds rather than averaged away in a composite score.

An escalation matrix required immediate notification of any safety-critical event, same-day management review for repeated regional failures, and executive review where continuity was threatened. Meridian also required a tested business-continuity plan, documented subcontractor controls, and a phased plan for developing alternative capacity.

The executive sponsor established a joint improvement programme rather than relying only on financial penalties. NovaMed funded scanner upgrades and retraining, while Meridian improved forecast visibility and standardised internal instructions. Contractual rights, audit provisions, data responsibilities, and remedies were clarified through a formally approved change.

Outcome

Within two quarters, complete delivery records improved materially, incident notification became timely, and temperature excursions declined. The relationship became more transparent because operational teams knew how to report problems and senior leaders received decision-oriented information. Meridian did not eliminate dependence immediately, but it reduced unmanaged dependency by qualifying a secondary provider and testing contingency routes.

Learning points

  • Supplier classification must reflect current dependency, not historical spend or status.
  • A composite score must not hide a critical safety or compliance failure.
  • Governance needs operational, tactical, and strategic forums with distinct purposes.
  • Executive sponsorship is most effective when paired with clear operational ownership.
  • Collaboration and contractual control are complementary, not opposing, approaches.

12. Challenges and Limitations

SRM programmes face several recurring limitations. First, relationship categories can become labels without corresponding behaviour. Calling a supplier “strategic” does not create trust, capability, or value. Second, scorecards may encourage gaming when measures are poorly defined or linked to inappropriate incentives. Third, collaboration can increase dependency and reduce competitive tension. Fourth, excessive governance creates meeting costs and slows decisions. Fifth, data may be incomplete, inconsistent, or biased toward easily measurable outcomes.

There is also a tension between short-term commercial pressure and long-term resilience. A buyer may obtain a lower price by reducing supplier margins, inventory, or redundancy, yet increase the probability or impact of disruption. Professional judgement requires consideration of total value and risk rather than price alone.

Finally, no governance system eliminates uncertainty. Contracts cannot specify every future event, and dashboards cannot replace informed dialogue. Effective SRM combines structure with adaptability, evidence with judgement, and cooperation with proportionate control.

13. Best-Practice Design Principles

The following principles provide a practical standard for SRM design:

  1. Segment suppliers according to business reality, not spend alone.
  2. Match governance effort to value, risk, and criticality.
  3. Define roles, decision rights, and authorised communication channels.
  4. Use a balanced set of outcome-focused measures.
  5. Treat critical safety, security, legal, and continuity requirements as explicit gates.
  6. Make reviews decision-oriented and record actions clearly.
  7. Escalate early using agreed, evidence-based triggers.
  8. Maintain executive sponsorship for relationships that require senior authority.
  9. Protect competition, confidentiality, fairness, and human rights.
  10. Review relationship design after major changes, incidents, and market disruption.
  11. Use technology and AI with data governance, human oversight, and auditability.
  12. Pursue collaboration without surrendering commercial, legal, or operational control.

Chapter Summary

Supplier relationship management is the structured management of supplier interactions to achieve operational performance, commercial value, resilience, innovation, and responsible conduct. Relationships should be designed proportionately. Transactional suppliers generally require standardised controls; preferred suppliers justify coordinated performance management; and strategic suppliers require multi-level governance, joint planning, risk management, and executive sponsorship.

Effective SRM begins with segmentation based on business impact, risk, value, dependency, and substitutability. Governance then establishes forums, communication protocols, responsibilities, performance measures, escalation routes, and decision rights. Business reviews should focus on outcomes, risks, decisions, and improvement rather than routine reporting. Scorecards are useful only when measures are clearly defined and critical failures cannot be hidden by averages.

Ethical and regulatory governance protects fair competition, confidentiality, human rights, data, security, and organisational integrity. Technology and AI can improve visibility and analysis, but require data quality, human oversight, explainability, and accountability. The central lesson is that effective supplier relationships combine collaboration with control: the organisation should build trust and joint value while preserving transparency, resilience, contractual rights, and responsible decision-making.

Key Terms

Supplier Relationship Management (SRM): A structured approach to managing supplier interactions and performance.

Supplier segmentation: Classification of suppliers according to factors such as impact, risk, value, and substitutability.

Transactional relationship: A routine supplier relationship managed mainly through standard processes and exception control.

Preferred supplier: A supplier selected for recurring business because of demonstrated value, capability, or performance.

Strategic supplier: A supplier whose capability or failure materially affects organisational objectives or continuity.

Governance: The structures, authorities, controls, information, and forums used to direct a relationship.

Governance charter: A document defining relationship purpose, roles, forums, decision rights, and controls.

Executive sponsor: A senior leader who maintains strategic alignment and resolves major organisational barriers.

Business review: A structured meeting examining performance, risks, decisions, and improvement.

Key performance indicator (KPI): A measure used to assess performance against an objective or requirement.

Service-level agreement (SLA): An agreement specifying service expectations and performance standards.

Escalation: The controlled referral of an issue to a higher authority or specialised forum.

Corrective action: An action intended to remove the cause of a failure and prevent recurrence.

Dependency: The extent to which an organisation relies on a supplier or capability.

Substitutability: The ease, speed, and cost of replacing a supplier or source.

Relationship scorecard: A structured set of weighted or threshold-based performance measures.

Third-party risk: Risk arising from an external supplier’s activities, condition, or failure.

Continuous improvement: Systematic activity to improve performance, value, control, or capability.

Conflict of interest: A situation in which personal or competing interests may influence impartial judgement.

Responsible sourcing: Procurement that considers ethical, social, environmental, and human-rights impacts.

Review Questions

Short Answer Questions

  1. What is the principal purpose of supplier relationship management?
  2. Distinguish between a transactional and a strategic supplier relationship.
  3. Identify four dimensions that may be used in supplier segmentation.
  4. What is the role of an executive sponsor?
  5. Why should critical safety or security requirements not be hidden within an average supplier score?

Long Answer Questions

  1. Explain how an organisation can design governance differently for transactional, preferred, and strategic suppliers.
  2. Discuss the roles of procurement, business owners, contract managers, and suppliers in effective SRM.
  3. Explain the structure and purpose of an effective supplier business review.
  4. Evaluate the ethical, legal, and regulatory risks associated with close supplier relationships.
  5. Discuss how technology and artificial intelligence can improve SRM and the controls required for responsible use.

Analytical / Application Questions

  1. A supplier has low annual spend but provides a unique component with a six-month replacement lead time. How should the supplier be segmented, and what governance would you recommend? Justify your answer.
  2. A supplier’s weighted score is above target, but it has failed a mandatory cybersecurity control. Should the relationship be considered satisfactory? Explain how the scorecard and escalation process should operate.
  3. Design an escalation path and review structure for a logistics supplier whose delivery failures are affecting customers, while avoiding unnecessary executive involvement in routine issues.

Multiple Choice Questions with Answers

Question 1

Which characteristic most strongly indicates a strategic supplier relationship?

A. The supplier sells standard goods available from many sources.

B. The supplier provides a capability that materially affects continuity and is difficult to replace.

C. The supplier submits invoices electronically.

D. The supplier offers a one-time discount.

Correct Answer: B. The supplier provides a capability that materially affects continuity and is difficult to replace.

Question 2

Why is spend alone insufficient for supplier segmentation?

A. Spend is never relevant to procurement decisions.

B. Low-spend suppliers can still create high business impact or dependency.

C. High-spend suppliers are always transactional.

D. Spend cannot be measured accurately.

Correct Answer: B. Low-spend suppliers can still create high business impact or dependency.

Question 3

What is the primary purpose of a governance charter?

A. To replace the commercial contract entirely.

B. To define relationship roles, forums, decision rights, and controls.

C. To guarantee that every supplier receives identical treatment.

D. To eliminate the need for performance measures.

Correct Answer: B. To define relationship roles, forums, decision rights, and controls.

Question 4

Which activity is most appropriate for an operational governance forum?

A. Approving a major corporate acquisition.

B. Setting the organisation’s long-term supplier portfolio strategy.

C. Managing daily service requests, incidents, and delivery issues.

D. Determining the organisation’s annual tax policy.

Correct Answer: C. Managing daily service requests, incidents, and delivery issues.

Question 5

What is a major limitation of a composite supplier score?

A. It can hide a critical failure behind strong performance in other measures.

B. It cannot contain more than one measure.

C. It prevents all supplier comparisons.

D. It is unrelated to organisational priorities.

Correct Answer: A. It can hide a critical failure behind strong performance in other measures.

Question 6

Which statement best describes escalation?

A. Automatic termination after any supplier error.

B. Controlled referral of an unresolved or serious issue to a higher authority or specialist forum.

C. Informal communication that does not require records.

D. A method of avoiding contractual rights.

Correct Answer: B. Controlled referral of an unresolved or serious issue to a higher authority or specialist forum.

Question 7

If impact, risk, value, and dependency are scored 4, 5, 2, and 4, with weights 0.30, 0.30, 0.20, and 0.20 respectively, what is the prioritisation index?

A. 3.60

B. 3.80

C. 4.00

D. 4.20

Correct Answer: C. 4.00

Question 8

Which practice best protects procurement integrity in a close supplier relationship?

A. Sharing one supplier’s confidential prices with competitors.

B. Allowing informal commitments by any employee.

C. Applying conflict-of-interest, confidentiality, and fair-competition controls.

D. Removing audit rights to increase trust.

Correct Answer: C. Applying conflict-of-interest, confidentiality, and fair-competition controls.

Question 9

What is the most appropriate role of artificial intelligence in supplier management?

A. Making unreviewed automatic supplier-exclusion decisions.

B. Supporting analysis such as anomaly detection, subject to human oversight and data governance.

C. Replacing all contract and business owners.

D. Using confidential supplier data without restrictions.

Correct Answer: B. Supporting analysis such as anomaly detection, subject to human oversight and data governance.

Question 10

Which response best addresses increased dependency on a supplier?

A. Ignore dependency if current performance is acceptable.

B. Remove all performance measures to improve trust.

C. Assess continuity risk, develop alternatives where feasible, and strengthen governance.

D. Transfer all decision rights to the supplier.

Correct Answer: C. Assess continuity risk, develop alternatives where feasible, and strengthen governance.

Vendor & Supplier Management
Chapter 9 of 14