2.6 Supplier Quality Management

Key Takeaways

  • Supplier evaluation and qualification utilizes a phase-gate mechanism combining desktop QMS audits, financial risk assessments, and technical process capability evaluations before ASL inclusion.
  • Approved Supplier Lists (ASL) maintain strict status categorizations (Approved, Conditional, Disqualified) with mandatory Supplier Process Change Notifications (PCN) prior to any engineering or site alterations.
  • Supplier Corrective Action Requests (SCARs) formalize quality nonconformances sent to suppliers, requiring strict containment responses within 24-48 hours and completed root-cause 8D reports within 30 days.
  • Supplier scorecards evaluate vendor performance using weighted multi-attribute models combining Parts Per Million (PPM), On-Time Delivery (OTD), Cost of Poor Quality (COPQ) recovery, and Audit Compliance.
  • System, process, and product audits evaluate supplier quality at macro (QMS compliance), meso (manufacturing line capability), and micro (part dimension/attribute) levels respectively.
Last updated: July 2026

Supplier Quality Management

In modern global manufacturing and service operations, outsourced components and materials frequently account for 50% to 80% of total product cost. Consequently, Supplier Quality Management (SQM) is a vital core domain within the ASQ Certified Quality Engineer (CQE) Body of Knowledge. SQM establishes structured mechanisms to evaluate, qualify, monitor, and continuously improve vendor performance across the supply chain lifecycle.


1. Supplier Evaluation & Qualification Framework

Selecting and onboarding qualified suppliers requires a rigorous, phase-gated screening process to mitigate operational, financial, and quality risks prior to contract execution.

Phase 1: Desktop Audit & Financial Screening
    │
Phase 2: On-Site QMS Audit (ISO 9001 / IATF 16949)
    │
Phase 3: Technical & Process Capability Assessment
    │
Phase 4: Sample Approval / PPAP / First Article Inspection (FAI)
    │
Phase 5: Conditional Approval & ASL Entry

Key Stages of Supplier Qualification:

  1. Desktop QMS Survey & Financial Risk Assessment: Initial evaluation of supplier self-assessments, ISO/IATF certifications, credit ratings (Dun & Bradstreet), and business continuity plans.
  2. On-Site Quality Management System Audit: A second-party audit evaluating management commitment, document control, traceability, calibration systems, nonconformance control, and corrective action workflows.
  3. Technical & Manufacturing Process Capability Assessment: Evaluation of supplier machinery, tooling maintenance, process capability metrics ($C_{pk}$ and $P_{pk}$), statistical process control (SPC) implementation, and measurement systems analysis (Gage R&R).
  4. Production Part Approval Process (PPAP) / First Article Inspection (FAI): Formal submission of prototype or initial production samples governed by AS9102 (aerospace FAI) or AIAG PPAP standards. Deliverables include dimensional inspection layouts, material test certifications, process flow diagrams, PFMEA, and Control Plans.

2. Approved Supplier List (ASL) Governance

The Approved Supplier List (ASL)—or Approved Vendor List (AVL)—is an authoritative control document regulated under ISO 9001 Clause 8.4 and FDA 21 CFR 820.50. Organizations are strictly prohibited from issuing procurement purchase orders to vendors not explicitly listed on the ASL.

ASL Vendor Classifications:

  • Approved Status: Full authorization to supply specified part numbers. Meets or exceeds all quality, delivery, and audit benchmarks.
  • Conditional / Probationary Status: Temporary authorization granted for limited production volumes or specific part numbers, often contingent upon resolving specific audit findings or undergoing heightened incoming inspection.
  • Disqualified / Disapproved Status: Prohibited from receiving purchase orders due to severe nonconformances, unresolved SCARs, or QMS systemic failure. Re-qualification requires formal root-cause audit closure.

Sourcing Risk Strategies:

  • Single Sourcing: Intentionally selecting one supplier for a component to leverage volume discounts, deep partnership, and joint engineering, despite the availability of alternative suppliers.
  • Sole Sourcing: Utilizing a supplier because no other vendor possesses the technical capability, patent rights, or tooling to manufacture the component. Represents high supply risk.
  • Dual / Multiple Sourcing: Splitting order volume (e.g., 70/30 split) between two qualified suppliers to ensure supply chain resilience and price competition.

Supplier Process Change Notification (PCN):

A critical ASL governance requirement is mandatory Process Change Notification (PCN). Suppliers must submit formal change requests and secure buyer written authorization before making any alterations to:

  • Manufacturing facility location or sub-tier vendors.
  • Tooling, equipment, or machinery design.
  • Raw material formulations or processing chemical agents.
  • Inspection methods or key manufacturing sequences.

3. Supplier Corrective Action Requests (SCARs)

When a supplier delivers nonconforming material or breaches quality standards, the buyer issues a formal Supplier Corrective Action Request (SCAR). A SCAR enforces legal and operational accountability on the vendor using an 8D problem-solving framework.

SCAR Operational Lifecycle & Service Level Agreements (SLAs):

  1. SCAR Issuance & Triage: Buyer SQE issues SCAR citing specific purchase order numbers, part numbers, nonconformance descriptions, and defect counts.
  2. Immediate Containment (24 to 48 Hours): Supplier must execute immediate inventory containment across their plant, transit pipeline, and buyer warehouse facilities, returning signed containment verification.
  3. Root Cause Analysis & 8D Plan Submission (14 to 30 Days): Supplier submits formal 8D report detailing verified root causes (5 Whys, Fishbone) and proposed Permanent Corrective Actions (PCA).
  4. Verification of Effectiveness (30 to 90 Days): Buyer SQE audits initial replacement shipments and reviews process capability data ($C_{pk}$) to confirm zero recurrence.
  5. Formal SCAR Closure: Buyer quality engineering formally signs off and updates supplier rating records.

4. Supplier Audits & Performance Scorecard Analytics

Supplier monitoring relies on two complementary tools: periodic quality audits and quantitative scorecards.

Classification of Supplier Audits:

Audit TypeFocus ScopeFrequencyObjective
System AuditOverall QMS compliance (ISO 9001/IATF 16949)Every 2 to 3 yearsVerify quality manual, policy, and high-level procedures.
Process AuditSpecific manufacturing step or line (VDA 6.3)Annual or post-SCARAssess tool wear, control plan adherence, and operator setup.
Product AuditFinished part compliance against drawings/specsIncoming receiving inspectionInspect dimensions, material specs, and functional performance.

Multi-Attribute Supplier Scorecard Analytics:

Quality engineering uses balanced scorecards to evaluate vendors across multiple key performance indicators (KPIs). The Composite Supplier Performance Index ($S$) is computed using weighted multi-attribute scoring:

S=wQSQ+wDSD+wCSC+wSSSS = w_Q \cdot S_Q + w_D \cdot S_D + w_C \cdot S_C + w_S \cdot S_S

Where:

  • $S_Q$ = Quality Score (based on Parts Per Million, PPM)
  • $S_D$ = Delivery Score (based on On-Time Delivery %, OTD)
  • $S_C$ = Cost Score (based on price competitiveness & COPQ recovery)
  • $S_S$ = Service/Audit Score (responsiveness to SCARs and audit findings)
  • $w_Q, w_D, w_C, w_S$ = Attribute weighting factors ($\sum w_i = 1.0$)

Supplier Quality PPM Calculation:

PPM=(Total Defective Units ReceivedTotal Units Delivered)×1,000,000\text{PPM} = \left( \frac{\text{Total Defective Units Received}}{\text{Total Units Delivered}} \right) \times 1,000,000

Quantitative Scorecard Worked Example Scenario:

A Tier-1 supplier delivers 80,000 machined valves over a quarter, with 20 units rejected for dimensional defects. The supplier achieves an On-Time Delivery (OTD) rate of 98.0%, a Cost score of 90.0, and a Service/SCAR score of 85.0.

The buyer's weighting system assigns $w_Q = 0.40$, $w_D = 0.30$, $w_C = 0.15$, and $w_S = 0.15$. Quality score $S_Q$ is calculated using the benchmark formula $S_Q = 100 - (\text{PPM} / 10)$.

  1. Calculate PPM: PPM=(2080,000)×1,000,000=0.00025×1,000,000=250 PPM\text{PPM} = \left( \frac{20}{80,000} \right) \times 1,000,000 = 0.00025 \times 1,000,000 = 250 \text{ PPM}
  2. Calculate Quality Score ($S_Q$): SQ=100(25010)=10025=75.0S_Q = 100 - \left( \frac{250}{10} \right) = 100 - 25 = 75.0
  3. Calculate Composite Supplier Score ($S$): S=(0.40×75.0)+(0.30×98.0)+(0.15×90.0)+(0.15×85.0)S = (0.40 \times 75.0) + (0.30 \times 98.0) + (0.15 \times 90.0) + (0.15 \times 85.0) S=30.0+29.4+13.5+12.75=85.65S = 30.0 + 29.4 + 13.5 + 12.75 = 85.65

With a composite score of 85.65, the supplier is categorized as Tier 2 (Acceptable), triggering a targeted process audit to improve the quality PPM score.

Loading diagram...
Supplier Quality Lifecycle Workflow
Test Your Knowledge

An automotive assembly plant discovers that a key Tier-1 electronic control unit (ECU) supplier intends to relocate its soldering line to a new facility. Which ASL governance mechanism mandates prior notification and buyer approval before shipment?

A
B
C
D
Test Your Knowledge

A manufacturing plant receives 50,000 machined shafts from a qualified supplier across a calendar quarter. Receiving inspection and assembly lines reject a total of 15 defective shafts. What is the supplier's Quality Parts Per Million (PPM) rating?

A
B
C
D
Test Your Knowledge

A quality auditor is evaluating a critical supplier's manufacturing line specifically focused on tool wear controls, operator work instructions, and machine calibration logs for a single component. What type of audit is being conducted?

A
B
C
D