10.3 Supplier Audits & Scorecard Systems

Key Takeaways

  • Second-party audits are external audits conducted directly by a customer organization (or its agent) on a supplier to assess contractual compliance, QMS capability, and process controls.
  • Balanced Supplier Scorecards evaluate performance across four core operational pillars: Quality, Delivery, Cost, and Service (QDCS).
  • Supplier performance tiering classifies vendors into Preferred/Certified (Dock-to-Stock status), Approved, Conditional/Watchlist, and Disqualified/Debarred based on 6–12 month rolling scorecard trends.
  • Supplier Development Programs utilize root-cause corrective action (8D methodology), Kaizen events, and joint technical assistance to elevate key suppliers rather than defaulting to immediate desourcing.
  • Dock-to-Stock status is granted to Preferred suppliers with demonstrated long-term Cpk ≥ 1.67 capability, allowing shipments to bypass incoming receiving inspection.
Last updated: July 2026

10.3 Supplier Audits & Scorecard Systems

Evaluating active suppliers requires continuous performance monitoring and periodic auditing. Within the ASQ Body of Knowledge for Certified Manager of Quality/Organizational Excellence (CMQ/OE), auditing and balanced scorecard metrics provide empirical data to drive supplier accountability, tier classification, and targeted capability development.

Second-Party Audits: Classification & Execution

Quality audits are categorized by the relationship between the auditor and the audited organization:

  • First-Party Audits (Internal Audits): Conducted by an organization on its own systems to verify compliance and drive self-improvement.
  • Second-Party Audits (External Customer/Supplier Audits): Conducted directly by a customer organization (or its designated agent) on a supplier. The primary purpose is to evaluate contract compliance, QMS effectiveness, process control, and non-conformance resolution.
  • Third-Party Audits (Independent Certification Audits): Conducted by independent, accredited certification bodies (registrars) for official QMS certification (e.g., ISO 9001, AS9100).

The Second-Party Audit Lifecycle (ISO 19011 Framework)

Second-party audits follow the standardized guidelines established in ISO 19011 (Guidelines for Auditing Management Systems):

  1. Audit Planning & Desktop Review: Defining audit scope, criteria, and objectives. The audit team reviews supplier quality history, prior non-conformance reports, and QMS documentation.
  2. On-Site Audit Execution:
    • Opening Meeting: Confirming scope, audit schedule, safety protocols, and key guide contacts.
    • Evidence Gathering: Conducting interviews, examining shop-floor operations, reviewing calibration logs, observing operator work instructions, and checking SPC control charts.
    • Findings Classification: Categorizing findings into Major Non-conformances (total QMS requirement breakdown or high risk of shipping defective product), Minor Non-conformances (isolated procedural lapse with low defect risk), and Opportunities for Improvement (OFI).
    • Closing Meeting: Presenting audit observations to supplier leadership and setting agreed timelines for corrective action plans.
  3. Reporting & SCAR Follow-Up: Issuing the formal audit report within 10 to 15 business days. The supplier must submit a Supplier Corrective Action Request (SCAR) response using 8D methodology within 30 days.

Balanced Supplier Scorecards (The QDCS Framework)

To objectively evaluate ongoing supplier performance, organizations deploy Balanced Supplier Scorecards evaluating four operational pillars: Quality, Delivery, Cost, and Service (QDCS).

QDCS PillarTypical WeightKey Performance Indicators (KPIs)Standard Calculation FormulaTarget Benchmark
Quality (Q)40%Parts Per Million (PPM), Lot Acceptance Rate (%)$\text{PPM} = \left( \frac{\text{Defective Units}}{\text{Total Units Delivered}} \right) \times 1,000,000$$< 50 \text{ PPM}$; $\ge 99.5% \text{ Acceptance}$
Delivery (D)30%On-Time In-Full (OTIF) %, Premium Freight Count$\text{OTIF %} = \left( \frac{\text{On-Time & Complete Shipments}}{\text{Total Expected Shipments}} \right) \times 100$$\ge 98.0% \text{ OTIF}$
Cost (C)15%Purchase Price Variance (PPV), Cost Sharing$\text{PPV} = (\text{Actual Price} - \text{Standard Planned Price}) \times \text{Volume}$Neutral / Favorable PPV
Service (S)15%SCAR On-Time Closure Rate, Tech Responsiveness$\text{SCAR Closure %} = \left( \frac{\text{SCARs Closed } \le 30 \text{ Days}}{\text{Total SCARs Issued}} \right) \times 100$$\ge 95.0% \text{ On-time closure}$

Overall Scorecard Points Calculation

\text{Overall Score} = (0.40 \times S_{\text{Quality}}) + (0.30 \times S_{\text{Delivery}}) + (0.15 \times S_{\text{Cost}}) + (0.15 \times S_{\text{Service}}} Scorecards are published monthly to supplier executive leadership, establishing transparent accountability.


Supplier Performance Classification & Tiering

Based on cumulative scorecard scores over a rolling 6 to 12 month period, suppliers are categorized into performance tiers:

  • Preferred / Certified Supplier (Score: 90% – 100%): Granted Dock-to-Stock status (shipments bypass receiving inspection). Eligible for multi-year contract renewals and early involvement in new product design.
  • Approved Supplier (Score: 75% – 89%): Meets baseline quality and delivery expectations. Subject to standard receiving inspection sampling.
  • Conditional / Watchlist Supplier (Score: 60% – 74%): Sub-par performance. Issued mandatory SCARs; subject to 100% receiving sorting; disqualified from bidding on new business quotes (RFQs).
  • Disqualified / Debarred Supplier (Score: < 60%): Unacceptable risk. Formally removed from the Approved Supplier List (ASL); existing purchase orders phased out.

Supplier Development & 8D Corrective Action

When critical single-source or specialized suppliers encounter quality drops, immediate desourcing may be impossible. Organizations launch Supplier Development Programs to rebuild capability.

8D Problem-Solving Methodology for SCAR Resolution

When non-conforming material is detected, the customer issues a formal SCAR requiring an 8 Disciplines (8D) response:

  1. D1 - Form Team: Assemble cross-functional team with process expertise.
  2. D2 - Describe Problem: Define defect quantitatively using 5W2H (Who, What, Where, When, Why, How, How many).
  3. D3 - Immediate Containment (ICA): Quarantine suspect inventory across customer site, transit, and supplier stock within 24 hours.
  4. D4 - Root Cause Analysis: Perform 5-Why and Ishikawa (Fishbone) analysis to isolate root causes for occurrence and non-detection.
  5. D5 - Formulate Permanent Corrective Actions (PCA): Identify and validate solutions that address systemic root causes.
  6. D6 - Implement & Validate PCA: Deploy solutions and verify error-proofing (Poka-Yoke) effectiveness over production runs.
  7. D7 - Prevent Recurrence: Update Control Plans, Process FMEAs, work instructions, and QMS procedures.
  8. D8 - Team Recognition: Formally close SCAR and recognize team contribution.

Exam Tips & Practical Application

  • Audit Types: On the CMQ/OE exam, recognize that second-party audits are driven by customer-specific requirements (CSRs) and contractual terms, whereas third-party audits assess generic QMS standard compliance.
  • Dock-to-Stock Privilege: Dock-to-Stock status is earned only by Certified suppliers with proven process capability ($C_{pk} \ge 1.67$) and zero-defect records, saving inspection time and holding costs.
  • SCAR Containment Timing: Containment (D3) must occur within 24 hours of notification, whereas permanent root-cause closure (D4–D6) typically targets 30 calendar days.
Loading diagram...
Supplier Performance Tiering & Action Escalation
Test Your Knowledge

Which type of quality audit is performed directly by a buying organization or its contracted representative on a supplier to assess contractual compliance and process control?

A
B
C
D
Test Your Knowledge

In a balanced supplier scorecard framework using Quality, Delivery, Cost, and Service (QDCS), a supplier receives 50 defective parts out of 100,000 delivered parts. What is the supplier's Parts Per Million (PPM) defect rate?

A
B
C
D
Test Your Knowledge

When issuing a Supplier Corrective Action Request (SCAR) using the 8D problem-solving methodology, what must be accomplished during Step D3?

A
B
C
D