Vendor Management
What a definition is not
A definition is SPEQ’s plain-language decode of how a term is used in practice, cited to the documents that define it. It is a practitioner reference, not legal or regulatory advice, it does not replace the definition in the source, and where a regulator’s wording differs the regulator’s wording governs.
The ongoing program of oversight, performance monitoring, and periodic requalification applied to approved suppliers and service providers after their initial qualification, encompassing audit scheduling, quality agreements, change notification, incoming-material trending, and scorecard-based performance review, with oversight intensity typically tiered to supplier risk.
Vendor management picks up where initial supplier qualification leaves off: once a supplier or contract acceptor is approved, an ongoing program tracks its performance — on-time delivery, incoming inspection results, deviation rates, and audit findings — and uses that data to decide whether requalification, a for-cause audit, or removal from the approved vendor list is warranted.
A mature vendor-management program tiers suppliers by risk (for example, active ingredient suppliers versus packaging component suppliers) and sets differentiated audit frequency, monitoring intensity, and quality-agreement depth accordingly, rather than applying one uniform oversight level to every vendor regardless of criticality.
Vendor management is where a quality agreement is operationalized: the agreement states the obligations, and the vendor-management program is the mechanism that confirms, over time, that those obligations are actually being met.
- —Ongoing oversight after initial qualification — not a one-time approval decision
- —Risk-tiers suppliers to set differentiated audit and monitoring intensity
- —Tracks incoming-material data, deviation rates, and audit findings over time
- —Operationalizes the obligations set out in a quality agreement
EU GMP Part I Chapter 7 (Outsourced Activities); ICH Q10
Frequently asked questions
What is Vendor Management?
The ongoing program of oversight, performance monitoring, and periodic requalification applied to approved suppliers and service providers after their initial qualification, encompassing audit scheduling, quality agreements, change notification, incoming-material trending, and scorecard-based performance review, with oversight intensity typically tiered to supplier risk.
Which regulations cover Vendor Management?
EU GMP Part I Chapter 7 (Outsourced Activities); ICH Q10