9.1 Supplier Qualification Plans (Task 1-E-1)
Key Takeaways
- A supplier qualification plan defines criteria, evidence, approval authority, and risk-tiered depth before a supplier enters the approved supplier list (ASL)
- Qualification is risk-based: critical or sole-source suppliers warrant audits and process capability evidence; low-risk transactional buys may use lighter desk reviews
- Sample evaluation, first-article inspection, and PPAP-style production part approval gates verify that the supplier can meet requirements at production volume—not just quote capability
- Qualification is not one-and-done: re-qualification triggers include ownership change, major process change, quality escapes, and periodic recertification by tier
- ISM CPSM Exam 1 weights Task 1-E-1 at roughly four scored questions within the Supplier Relationship Management domain
Supplier qualification is the structured process of deciding whether a potential or existing supplier is capable of meeting the organization's requirements before award—or before that supplier is allowed to supply critical items. Task 1-E-1 on ISM CPSM Exam 1 asks you to develop supplier qualification plans: not ad-hoc gut checks, but documented, risk-aligned plans that define what must be proven, how evidence is gathered, who approves, and when re-qualification is required. Within Domain 1-E (Supplier Relationship Management), this task carries roughly four scored questions—enough to reward clear process thinking, not memorization of a single industry checklist.
Qualification sits upstream of relationship management and scorecards. A poorly qualified supplier creates recurring quality escapes, delivery failures, and expensive corrective-action cycles. A well-designed plan protects the enterprise while remaining proportionate: you do not audit a $500 office-supply reseller the same way you qualify a sole-source aerospace casting house.
Why Qualification Plans Exist
Without a plan, qualification becomes inconsistent. One buyer may accept a glossy brochure; another may demand a full quality-system audit for a commodity. A supplier qualification plan standardizes decision quality and creates an auditable trail for internal control, ISO/customer audits, and regulatory environments.
Core Plan Elements
| Plan Element | What It Defines |
|---|---|
| Scope | Which categories, part families, or service types require qualification |
| Criteria | Financial, quality, capacity, compliance, ESG, and commercial requirements |
| Evidence | Documents, samples, audits, certifications, references |
| Risk tiers | Depth of review by spend criticality, substitutability, and failure impact |
| Gates | Desk review → sample/FAI → process audit → ASL approval |
| Authority | Who can approve, conditional approve, or reject |
| Re-qualification | Events and intervals that reopen the file |
The plan should also name inputs: statements of work, drawings, specifications, regulatory requirements (e.g., FDA, FAA, ITAR), cybersecurity expectations, and insurance minimums. Qualification criteria must map to those inputs—otherwise you qualify for the wrong outcomes.
Designing Qualification Criteria
Effective criteria are measurable, relevant, and weighted to risk. Typical dimensions include:
- Financial stability — liquidity, profitability trends, credit ratings, bankruptcy risk; critical when long-term tooling or ramp-up investment is involved
- Quality system maturity — ISO 9001, IATF 16949, AS9100, or industry-equivalent; process control, CAPA discipline, and change-control maturity often matter more than the certificate alone
- Technical capability — equipment, process capability (Cpk), engineering depth, tooling ownership, design-for-manufacturability support
- Capacity and lead time — demonstrated volume, surge capacity, dual-site options, realistic lead-time commitments
- Delivery and logistics — on-time history with other customers, packaging, EDI/ASN readiness, geographic risk
- Compliance and ethics — conflict minerals, labor standards, anti-bribery, data privacy, restricted-party screening
- Commercial fit — willingness to accept terms, cost transparency, continuous-improvement posture
Criteria Mistakes to Avoid
- Criteria that only measure past price — cheapest quote ≠ qualified supplier
- Checkbox certification without process evidence — a certificate does not prove capability on your part
- Identical criteria for every buy — over-qualifying transactional suppliers wastes resources; under-qualifying critical suppliers creates enterprise risk
- No pass/fail thresholds — vague "good quality" language invites subjective approval
Weight criteria by failure mode. For a life-safety component, quality system and process capability may dominate. For a competitive commodity with many alternates, commercial competitiveness and delivery reliability may weigh more—still with a minimum quality floor.
Risk-Tiered Qualification Depth
CPSM candidates should treat risk tiering as the organizing principle of Task 1-E-1.
| Risk Tier | Typical Profile | Qualification Depth |
|---|---|---|
| Critical / strategic | High impact of failure, sole or dual source, regulated, custom tooling | Full package: financial review, on-site audit, samples/FAI, PPAP-style evidence, ASL with conditions |
| Preferred / important | Significant spend or moderate switching cost | Desk review + targeted audit or virtual assessment; sample approval; ASL listing |
| Transactional / low risk | Commodity, many substitutes, low failure impact | Self-assessment questionnaire, insurance/W-9, credit check; light ASL or catalog approval |
Risk factors include single-source exposure, regulatory exposure, brand/reputation impact, switch time, and financial concentration. A mid-spend supplier that is the only qualified source for a patented subassembly may sit in the critical tier despite modest annual dollars.
Audits as Qualification Evidence
Supplier audits verify that documented systems actually operate. Qualification plans should specify audit type and triggers:
- Desk / remote audit — document review, video walk-through; efficient for lower risk or travel constraints
- On-site process audit — observes production, inspection, calibration, nonconforming material control
- Quality system audit — evaluates QMS against a standard or customer requirements
- Financial / commercial due diligence — often led with finance or a third-party risk provider
Audit findings should feed a conditional approval path when gaps are correctable: approve for limited volume, require CAPA closure by a date, then release full ASL status. Blanket "approved" after a failed audit undermines the plan.
Samples, First Article, and PPAP-Style Gates
Document review proves intent; physical and process gates prove capability.
Common Gates
- Sample / prototype evaluation — dimensional, functional, and cosmetic checks against specification
- First-article inspection (FAI) — full verification that the first production article meets drawing/spec before volume release
- Production Part Approval Process (PPAP)-style packages — common in automotive and increasingly adapted elsewhere: process flow, PFMEA, control plan, MSA, dimensional results, material certs, and appearance approval where relevant
You do not need to memorize every PPAP element number for CPSM, but you must understand the logic: the supplier demonstrates that the production process—not a hand-built sample—can repeatedly meet requirements. For services, analogous gates include pilot engagement, shadow support periods, and SLA dry-runs.
Approved Supplier Lists (ASL)
Qualification culminates in ASL (or Approved Vendor List) status:
- Approved — may receive awards for the qualified scope
- Conditional / provisional — limited scope, volume, or time pending CAPA
- Disapproved / inactive — cannot be used without exception approval
- Pending — in process; buyers should not award until clearance
ERP and e-procurement systems should block purchase orders to non-ASL suppliers for controlled categories, with documented exception workflows for emergencies. The qualification plan owns the rules; systems enforce them.
Re-Qualification and Plan Governance
Qualification is dynamic. Plans should define re-qualification triggers:
- Change of ownership, plant relocation, or major subcontracting
- Significant process, material, or tooling change
- Chronic quality/delivery failures or major escapes
- Expiration of required certificates or insurance
- Periodic interval by tier (e.g., critical suppliers every 24–36 months)
Governance includes retaining evidence, training buyers on ASL rules, and aligning qualification criteria with category strategies and make-or-buy decisions. When a category strategy shifts toward dual sourcing, the qualification plan must scale capacity to qualify alternates—not wait until a disruption.
Exam Application
On scenario questions, prefer answers that match qualification depth to risk, require evidence before ASL approval, use conditional approval with CAPA, and treat PPAP/FAI/sample gates as process-capability proof. Avoid answers that equate lowest price with qualification or that treat a certificate alone as sufficient for critical parts.
A supply manager is writing a qualification plan for a sole-source, regulated component with custom tooling. Which approach best matches risk-tiered qualification?
What is the primary purpose of a PPAP-style or first-article gate in a supplier qualification plan?
An audit finds correctable gaps in a candidate supplier's calibration control. The qualification plan allows conditional approval. What should supply management do?
Which event is the strongest trigger to reopen qualification for an already approved critical supplier?