Who this is for: quality managers responsible for an approved supplier list that lives in a spreadsheet — and grows less true every month.
Why supplier findings are rising
Regulated operations outsource more every year — reagents, calibration services, software, contract testing — and regulators have followed the risk. Auditors now routinely sample the supplier file: qualification evidence, current certificates, and proof that scores actually drive decisions. A spreadsheet answers none of that under pressure.
Qualification is a record with an expiry date
A supplier isn't qualified because someone approved them in 2022 — they're qualified until a date, based on documented evidence, with requalification scheduled before the lapse. The audit question is never whether you qualified a vendor once; it's whether they're qualified today, and what the evidence is.
Scorecards that mean something
A scorecard earns its existence when it changes behavior: late shipments trigger a documented conversation, a failed lot triggers a SCAR, a slipping trend triggers requalification early. Scores nobody acts on are worse than no scores — they're documented evidence that you knew and did nothing.
The SCAR is a CAPA with a supplier attached
Supplier corrective action requests fail the same way internal CAPAs do: vague root cause, no effectiveness check, quiet closure. Hold suppliers to the same structure you hold yourself — problem statement, root cause, action, verification — and file the exchange against the supplier record, not an inbox.
The approved list as enforcement, not reference
The strongest control is structural: purchasing and receiving that can only draw from the approved list, with expired qualifications blocking use automatically. When the list enforces itself, the audit conversation becomes a demonstration.
m in seconds.