A vendor performance audit checks whether your own vendor-management process produces reliable, decision-ready evidence—not simply whether a supplier had a good month. Use it before a renewal, after a serious issue, or as an annual control review. It does not replace contract, legal, security, or regulatory review requirements.
Quick answer
Audit the vendor record, contract-linked measures, evidence quality, review cadence, exception handling, corrective-action closure, and decision trail. Mark each item pass, gap, not applicable, or needs evidence; then give each gap an owner and due date.
Vendor performance audit checklist
| Area | Check | Evidence |
|---|---|---|
| Ownership | Named owner accountable for relationship and review cycle | Vendor record and role assignment |
| Scope | Measures link to current agreement and service scope | Contract/SOW and scorecard |
| Measures | Each measure has definition, source, period, target, and owner | Scorecard specification |
| Evidence | Ratings use traceable records, not only meeting opinion | Delivery, incident, invoice, or acceptance records |
| Cadence | Reviews occurred at the risk-appropriate frequency | Calendar and minutes |
| Exceptions | Material misses and waived controls have rationale and owner | Exception register |
| Corrective actions | Actions have due dates, proof, and closure approval | Action register |
| Decision trail | Renewal, escalation, scope change, or exit cites evidence | Decision record |
Scoring and escalation
Use this as a control assessment, not false-precision vendor scoring. A gap means evidence is absent, stale, inconsistent, or not linked to a decision. Escalate when a critical vendor has no owner, required evidence is missing, or a material corrective action is overdue. Otherwise assign owner, proof, due date, and recheck date.
Completed illustrative example
A maintenance vendor has an owner, current scope, and monthly delivery data, but two late-job incidents were discussed with no corrective-action closure. Mark Corrective actions as Gap, assign an operations owner, require an action log and acceptance proof, then recheck before the next quarterly review. Separate the evidence gap from the vendor’s actual performance rating.
Audit workflow
- Collect agreement, scorecards, service records, review notes, and action log.
- Test each checklist item against the review period evidence.
- Record pass, gap, not applicable, or needs evidence with a rationale.
- Route material gaps to vendor owner and relevant reviewers.
- Accept remediation proof and retain the next review date.
Related resources
Where Workhint fits
Workhint can make this a recurring vendor management workflow: assign auditors, collect evidence, route gaps, track corrective actions, and retain the renewal decision trail. Your organization retains responsibility for the controls and thresholds.
FAQ
What is the difference between a scorecard and an audit?
A scorecard measures vendor results. An audit tests whether the organization’s measurement, evidence, review, and follow-up process is working reliably.
Leave a Reply