How to Vet New Suppliers Using a Risk Scoring Model

Start With the Right Inputs

Supplier due diligence is a measurement exercise. A vague conversation with a sales rep does not separate a reliable partner from a risky one. Before you score anyone, define the parts you need and the risks you cannot tolerate.

A brake caliper supplier for a high-volume OEM program carries different risk than a supplier of custom gaskets for a niche repair market. The parts themselves determine the weight of each factor. If a component fails, what is the repair cost? What is the recall exposure? How long is the production lead time?

Set these variables first. List the part numbers, materials, tolerances, and annual volume. Note whether the part is safety-related or cosmetic. Write down your maximum acceptable lead time and your minimum quality standard. These inputs feed directly into the scoring model.

Define the Risk Factors

The model needs a fixed set of categories. Do not invent new ones for every supplier. Consistency allows you to compare candidates fairly. Use the categories below as a baseline.

1. Quality system maturity. Does the supplier have a documented process for handling nonconforming product? Do they track root cause?
2. Financial stability. Can they survive a demand spike or a cash flow gap?
3. Production capacity. Do they have the machinery and floor space to meet your volume?
4. Compliance. Do they meet environmental and labor standards in their region?
5. Geographic and logistics risk. Are they exposed to single-source bottlenecks or long freight chains?
6. Technical capability. Can they execute your specifications without constant engineering support?
7. Historical performance. Do they have a track record with similar customers?

Each factor is a bucket. Inside each bucket, you assign sub-points. The sub-points must be measurable. “Good quality” is not a measurable point. “Passes first article inspection without rework” is.

Build the Scoring Sheet

Create a table with factors on the left and suppliers across the top. Use a numeric scale. A one to five scale works well. Five means fully compliant and verified. One means missing or unverified.

Assign a weight to each factor. The weight reflects the consequence of failure. For a safety-critical part, quality system maturity might carry a weight of 30. For a low-cost trim part, it might carry a weight of 10.

Here is a basic structure:

Risk Factor	Weight	Score (1-5)	Weighted Score
Quality System	30	4	120
Financial Health	20	3	60
Capacity	15	5	75
Compliance	15	4	60
Logistics	10	3	30
Technical Capability	10	4	40
Total	100		385

A higher total is better. You can set a passing threshold. For example, if your threshold is 400, a supplier at 385 does not qualify. If the threshold is 350, they qualify but need a development plan.

Gather Evidence for Each Point

Do not score based on a brochure. Every point must have evidence attached.

For quality, request the last three years of customer audit reports. Ask for their corrective action log. Check if they have a designated quality engineer who can answer your technical questions directly.

For financials, ask for a balance sheet and income statement. If they are private, request a credit report from a commercial bureau. Look for receivables aging. A supplier with a high receivable balance may be slow to pay their own vendors. That can lead to material shortages.

For capacity, request a list of their production lines. Ask which lines are dedicated to your part and which are shared. Check their current utilization rate. If a line is at 95 percent, they have no room for growth. If it is at 60 percent, they have flexibility.

For compliance, request their environmental permits. Check for recent violations. If they serve major OEMs, they likely have an internal compliance checklist. Ask to see it.

For logistics, map their supply chain. Where do they buy raw materials? Are those materials single-sourced? What is their freight partner? A long freight chain increases the chance of delay.

Apply the Scoring Model

Once you have evidence, score each supplier. Use the same rubric for every candidate. Do not let a friendly sales rep influence the number.

Score each sub-point. If the supplier has a documented process but no training records, give a three. If they have both, give a four. If they have both and a recent audit with no major findings, give a five.

Multiply the sub-point score by the sub-point weight. Sum the sub-points for each factor. Multiply the factor score by the factor weight. Sum all factors to get the total.

This creates a single number. That number is your risk score. It is not a guarantee. It is a ranking tool. It tells you which supplier has the highest risk relative to the others.

Conduct a Verification Visit

A score is a hypothesis. A visit is the test.

Schedule a site visit for the top two or three candidates. Walk the floor. Check the condition of the machinery. Look at the tooling. Check the storage area for raw materials.

Talk to the production manager, not just the sales rep. Ask about their current downtime rate. Ask about their scrap rate. Ask about their plan for a machine failure.

Check the quality lab. Are the instruments calibrated? Are the certificates posted? Watch a technician perform a measurement. Do not just read the report.

This step often changes the score. A supplier with a paper-perfect score may have a dirty floor and no calibration records. Adjust the quality score downward. A supplier with a moderate score may have a disciplined shop floor and a dedicated quality team. Adjust the technical capability score upward.

Make the Decision

Compare the final scores. The top scorer does not automatically win. Look at the gap between the top two. If the gap is small, the decision may come down to commercial terms. If the gap is large, the top scorer is clearly the safer bet.

Consider the strategic fit. A top scorer may be too expensive. A lower scorer may be the only one who can meet your lead time. The risk score tells you the safety of the supply. It does not tell you the cost.

Document the decision. Record the final scores. Note the reasons for any overrides. If you choose a lower scorer, write down what you will monitor. Set a review date.

Common Mistakes to Avoid

Do not let price dominate the early stages. A low price with a high risk score is a false saving.

Do not rely on a single reference. Ask for three references. Contact them. Ask specific questions about lead time and quality issues.

Do not ignore the supplier’s supplier. If a stamping shop relies on one steel mill, a delay at the mill delays your part.

Do not skip the financial check. A strong technical supplier can fail if they run out of cash.

Do not treat the score as final. Revisit it annually. A supplier’s situation changes. Their machines wear out. Their staff turns over. Their financial position shifts. Update the evidence and the score.

Final Verification Step

Before you issue a purchase order, run a final check. Confirm that the contract matches the specifications you scored. Confirm that the quality requirements are in the agreement. Confirm that the penalty for nonconformance is clear.

Send a sample of the part to an independent lab. Do not rely on the supplier’s lab. Verify that the material meets the specification.

Check the freight terms. Confirm the incoterms. Confirm the insurance coverage. Confirm the delivery schedule.

This final step closes the loop. It ensures that the risk you scored is the risk you actually manage.

How Often Should You Re-Score?

Review the score at least once a year. Review it after any major change. If a supplier changes their plant, change their management, or change their material source, run a new evaluation.

Do not wait for a problem to happen. A proactive review catches drift before it becomes a failure.

What If the Top Scorer Is Too Expensive?

Look at the sub-scores. Which factor is driving the cost? If it is capacity, ask if they can use a secondary line. If it is quality, ask if they can reduce the number of inspections.

Do not lower the standard to save money. Adjust the scope. Change the material grade. Change the tolerance. Change the volume.

A lower cost may come with a higher risk score. Make that trade-off explicit. Know what you are accepting.

How to Handle a Failing Supplier

If a supplier’s score drops below your threshold, do not fire them immediately. Open a corrective action plan. Identify the specific factors that caused the drop. Set a deadline. Re-score after the deadline.

If they do not improve, start qualifying a backup. Do not wait until you have no choice. A qualified backup is a safety net.

The Bottom Line

A risk scoring model turns supplier selection from a gut feeling into a measurable process. It forces you to look at the same facts for every candidate. It highlights the weaknesses that a sales pitch might hide.

Use the model to rank. Use the visit to verify. Use the contract to lock in the terms. Use the annual review to maintain the accuracy.

That is the full cycle. Do it for every new supplier. Do it for the ones you already have. The process is the same. The facts change. The risk changes. The model keeps you honest.