3.3 Procurement & Contract Management
Key Takeaways
- The procurement (purchase-to-pay) cycle runs from requisition and PO through receipt, three-way match, and payment, with controls at each step.
- Contract type allocates cost and performance risk: fixed-price puts risk on the supplier; cost-reimbursable puts it on the buyer; incentive contracts share it.
- Supplier qualification verifies capability before award; certification programs grant trusted suppliers reduced inspection and preferred status over time.
- Supplier performance management uses scorecards and KPIs (quality PPM, on-time delivery, total cost, responsiveness) tied to corrective action and development.
- Ethical and compliant sourcing requires conflict-of-interest controls, anti-bribery compliance, and sustainable, socially responsible supplier conduct.
Why Procurement Execution Is Tested
The back half of the Sourcing Products and Services module (17% of CSCP) covers turning a sourcing strategy into governed, repeatable transactions and managing suppliers after award. The exam expects you to know the procurement cycle, contract risk allocation, qualification versus certification, performance management, and sourcing ethics.
The Procurement (Purchase-to-Pay) Cycle
Procurement is the end-to-end process of acquiring goods and services and paying for them under control. A typical cycle:
- Need / requisition — internal demand is identified and a purchase requisition (PR) is approved.
- Source / PO — a supplier is selected (or a contract called off) and a purchase order (PO) is issued.
- Receive — goods/services are received and inspected against the PO.
- Match — a three-way match reconciles PO, receiving report, and supplier invoice before payment.
- Pay — accounts payable settles per agreed terms.
The three-way match is a core internal control: it prevents paying for goods not ordered or not received. Spot maverick (off-contract) buying as a control weakness on the exam.
Contract Types and Risk Allocation
The contract type determines who bears cost and performance risk. This is a high-yield exam concept.
| Contract type | Who bears cost risk | Use when |
|---|---|---|
| Firm fixed-price (FFP) | Supplier | Requirements well defined, stable scope |
| Fixed-price with incentive | Mostly supplier; shared on incentive | Defined scope with performance upside |
| Cost-reimbursable (cost-plus) | Buyer | Scope uncertain, R&D, undefined requirements |
| Cost-plus-incentive-fee | Shared per formula | Uncertain scope with cost-control incentive |
| Time-and-materials (T&M) | Mostly buyer | Effort hard to estimate up front |
Key contract terms the exam expects you to recognize: scope/specifications, price and payment terms, delivery and INCOTERMS, quality and acceptance criteria, warranties, service-level agreements (SLAs), liability and indemnification, intellectual-property ownership, force majeure (excused non-performance from extraordinary uncontrollable events), confidentiality, and termination/exit. A frequent trap: cost-reimbursable shifts cost-overrun risk to the buyer, not the supplier.
Supplier Qualification and Certification
These two terms are distinct and frequently confused on the exam.
- Supplier qualification is the pre-award assessment that a supplier is capable: financial health, capacity, quality system (for example ISO 9001), technical capability, compliance, and references. It produces an approved-supplier list.
- Supplier certification is an ongoing program that recognizes consistently excellent suppliers. Certified suppliers earn benefits such as reduced or skip-lot incoming inspection (dock-to-stock), preferred bidding status, longer-term agreements, and earlier design involvement.
Qualification is the entry gate; certification is an earned, performance-based status that lowers transaction cost and inspection burden over time.
Supplier Performance Management
After award, performance is measured and improved continuously using a supplier scorecard of weighted KPIs:
| KPI category | Example metric |
|---|---|
| Quality | Defect rate in parts per million (PPM), nonconformance rate |
| Delivery | On-time, in-full (OTIF); lead-time adherence |
| Cost | Total cost of ownership, cost-reduction achieved |
| Responsiveness | Issue resolution time, flexibility to demand change |
| Risk / sustainability | Financial stability, ESG and compliance adherence |
Poor scores trigger a corrective action request (CAR) and root-cause analysis; strong scores feed supplier development (joint improvement, capability investment) and certification. Measurement without a feedback and development loop is incomplete — a recurring exam point.
Ethical and Compliant Sourcing
Professional sourcing must be ethical, legal, and socially responsible — tested explicitly on CSCP.
- Conflict of interest — buyers must avoid personal interest in supplier selection; disclose and recuse.
- Anti-bribery and anti-corruption — comply with laws such as the U.S. Foreign Corrupt Practices Act (FCPA) and the UK Bribery Act; no facilitation payments where prohibited.
- Fair dealing and confidentiality — protect supplier bid data; no bid manipulation; treat suppliers consistently.
- Trade and regulatory compliance — adhere to export controls, sanctions, denied-party screening, and customs rules.
- Sustainable and socially responsible sourcing — assess labor practices, conflict minerals, modern-slavery risk, and environmental impact through a supplier code of conduct and audits.
Ethical conduct is not optional goodwill: violations create legal liability, supply disruption, and reputational loss, so the exam treats the compliant and ethical option as the correct one even when a faster or cheaper shortcut exists.
A buyer signs a cost-plus-fixed-fee contract for a project with undefined, evolving requirements. Who primarily bears the risk of cost overruns?
Which statement best distinguishes supplier qualification from supplier certification?
A buyer learns a key supplier offered a personal gift in exchange for favorable bid scoring. According to CSCP ethical sourcing principles, the correct action is to:
What is the primary control purpose of a three-way match in the procurement cycle?