I regularly talk to procurement managers who know their suppliers well. Names, contacts, roughly what they charge. What many don't know is the risk sitting behind those suppliers.
Which of them is the only source for a critical component? Which one has delivered late twice in the past 12 months, without consequence, because nobody tracked it systematically? Which framework agreement expires in three months with no successor in sight?
These aren't exotic questions. They're the questions that separate procurement that steers from procurement that reacts.
Supplier administration means we know who supplies us. We have the contacts. We pay the invoices.
Supplier management means we know which suppliers are critical, which are proven, which are risky. We evaluate them regularly. We actively develop them or deliberately replace them.
Many mid-market procurement teams sit at option one. That's not failure, it's usually a capacity issue. Supplier management takes time the team doesn't have.
The problem is that it isn't optional. Whoever doesn't know their supplier risks will be surprised by them. And in procurement, surprises are expensive.
Supplier management doesn't have to be elaborate. But it has to be structured. Four dimensions every procurement team should track for its core suppliers.
Delivery performance. Does the supplier deliver on time, at agreed quality, in agreed quantities? Sounds simple, isn't, when the data sits in the ERP and nobody analyzes it. A simple log is enough. Deadline met, yes or no. Quality defects, count. Complaint rate.
Risk profile. How dependent are we on this supplier? Are there alternatives? Is the supplier financially stable? For critical categories, the ones where an outage would stop your own operations, there should always be at least one qualified alternative.
Price transparency. When was the price last checked? Does it hold up against the market? Many supplier relationships continue for years without the price ever being questioned. Loyalty is valuable, but it shouldn't cost more than the market.
Strategic significance. Is this supplier a standard vendor or a strategic partner? For strategic suppliers, investment in the relationship, joint development, and long-term planning pays off. For standard suppliers, the focus is on competition and comparison.
Large enterprises have supplier portals, evaluation cycles, dedicated supplier relationship managers. That's not the benchmark for a five-person mid-market procurement team.
But the underlying logic is the same. If you don't know where your critical dependencies lie, you can't manage them.
What's specific to the mid-market is that supplier relationships tend to be more personal, closer, and longer-standing than in large enterprises. That's an advantage, real business relationships on equal footing. But it's also a trap. Personal rapport doesn't replace risk assessment.
The procurement manager who's trusted a supplier for 15 years sometimes notices the slow decline in quality too late, because he's thinking in terms of the relationship, not the numbers.
If you don't want or can't build an elaborate supplier management system, you can start with a simple analysis.
Step one. Build a list of all active suppliers from the past 12 months, with purchase volume.
Step two. Mark the top 20 by volume. These are the suppliers that make up 80 percent of your procurement spend, following Pareto logic.
Step three. For each of these 20 suppliers, answer three questions. How's the delivery performance? Are there alternatives? When was the price last checked?
Step four. Categorize the results. Green, stable, no action needed. Yellow, watch. Red, action needed. Find alternative suppliers, check pricing, have a conversation.
This takes two days. It delivers a risk picture that didn't exist before.
A good procurement system links supplier data to RFQ results. Which supplier submitted which quote for which RFQ? How did they perform? Are they more expensive or cheaper than the competition?
This data is generated automatically once RFQs run digitally. It doesn't need to be captured manually.
cusoso Target stores supplier data from every RFQ and makes it analyzable. If you want to check a supplier's quote history six months later, you'll find it there, not in the email archive.
We have 300 suppliers. How do we prioritize? Volume and criticality. The top 20 by volume are almost always the ones with the biggest lever. And for every critical category, regardless of volume, an alternatives analysis should exist.
What do we do if there's no alternative for a critical supplier? That's the most important signal. Start a market analysis, qualify alternative suppliers, build dual sourcing over the medium term. It takes time, but it starts with actually knowing the risk exists.
How often should a supplier evaluation happen? For critical suppliers, every six months. For standard suppliers, once a year, or after major delivery problems. It doesn't have to be an elaborate process. A structured feedback conversation and a short write-up are enough.
Our supplier relationships are long-standing and good. Do we really need this? Especially then. Long-term relationships are valuable. But without evaluation, you don't know whether they're still the best choice, or whether you're sticking with a supplier out of habit that you should have replaced on competitive grounds long ago.
Supplier management doesn't start with a system. It starts with the top-20 analysis, two days that deliver a risk picture that didn't exist before.
cusoso Target links supplier data to RFQ results automatically, without manual upkeep alongside day-to-day business. Whether it fits your procurement organization is something our quick check shows in 3 minutes.
→ To the quick check
Which of them is the only source for a critical component? Which one has delivered late twice in the past 12 months, without consequence, because nobody tracked it systematically? Which framework agreement expires in three months with no successor in sight?
These aren't exotic questions. They're the questions that separate procurement that steers from procurement that reacts.
The difference between administration and management
Supplier administration means we know who supplies us. We have the contacts. We pay the invoices.
Supplier management means we know which suppliers are critical, which are proven, which are risky. We evaluate them regularly. We actively develop them or deliberately replace them.
Many mid-market procurement teams sit at option one. That's not failure, it's usually a capacity issue. Supplier management takes time the team doesn't have.
The problem is that it isn't optional. Whoever doesn't know their supplier risks will be surprised by them. And in procurement, surprises are expensive.
The four dimensions that actually matter
Supplier management doesn't have to be elaborate. But it has to be structured. Four dimensions every procurement team should track for its core suppliers.
Delivery performance. Does the supplier deliver on time, at agreed quality, in agreed quantities? Sounds simple, isn't, when the data sits in the ERP and nobody analyzes it. A simple log is enough. Deadline met, yes or no. Quality defects, count. Complaint rate.
Risk profile. How dependent are we on this supplier? Are there alternatives? Is the supplier financially stable? For critical categories, the ones where an outage would stop your own operations, there should always be at least one qualified alternative.
Price transparency. When was the price last checked? Does it hold up against the market? Many supplier relationships continue for years without the price ever being questioned. Loyalty is valuable, but it shouldn't cost more than the market.
Strategic significance. Is this supplier a standard vendor or a strategic partner? For strategic suppliers, investment in the relationship, joint development, and long-term planning pays off. For standard suppliers, the focus is on competition and comparison.
Why mid-market companies are particularly exposed here
Large enterprises have supplier portals, evaluation cycles, dedicated supplier relationship managers. That's not the benchmark for a five-person mid-market procurement team.
But the underlying logic is the same. If you don't know where your critical dependencies lie, you can't manage them.
What's specific to the mid-market is that supplier relationships tend to be more personal, closer, and longer-standing than in large enterprises. That's an advantage, real business relationships on equal footing. But it's also a trap. Personal rapport doesn't replace risk assessment.
The procurement manager who's trusted a supplier for 15 years sometimes notices the slow decline in quality too late, because he's thinking in terms of the relationship, not the numbers.
The top-20-supplier analysis as a pragmatic starting point
If you don't want or can't build an elaborate supplier management system, you can start with a simple analysis.
Step one. Build a list of all active suppliers from the past 12 months, with purchase volume.
Step two. Mark the top 20 by volume. These are the suppliers that make up 80 percent of your procurement spend, following Pareto logic.
Step three. For each of these 20 suppliers, answer three questions. How's the delivery performance? Are there alternatives? When was the price last checked?
Step four. Categorize the results. Green, stable, no action needed. Yellow, watch. Red, action needed. Find alternative suppliers, check pricing, have a conversation.
This takes two days. It delivers a risk picture that didn't exist before.
What digital support delivers
A good procurement system links supplier data to RFQ results. Which supplier submitted which quote for which RFQ? How did they perform? Are they more expensive or cheaper than the competition?
This data is generated automatically once RFQs run digitally. It doesn't need to be captured manually.
cusoso Target stores supplier data from every RFQ and makes it analyzable. If you want to check a supplier's quote history six months later, you'll find it there, not in the email archive.
Frequently asked questions
We have 300 suppliers. How do we prioritize? Volume and criticality. The top 20 by volume are almost always the ones with the biggest lever. And for every critical category, regardless of volume, an alternatives analysis should exist.
What do we do if there's no alternative for a critical supplier? That's the most important signal. Start a market analysis, qualify alternative suppliers, build dual sourcing over the medium term. It takes time, but it starts with actually knowing the risk exists.
How often should a supplier evaluation happen? For critical suppliers, every six months. For standard suppliers, once a year, or after major delivery problems. It doesn't have to be an elaborate process. A structured feedback conversation and a short write-up are enough.
Our supplier relationships are long-standing and good. Do we really need this? Especially then. Long-term relationships are valuable. But without evaluation, you don't know whether they're still the best choice, or whether you're sticking with a supplier out of habit that you should have replaced on competitive grounds long ago.
The next step
Supplier management doesn't start with a system. It starts with the top-20 analysis, two days that deliver a risk picture that didn't exist before.
cusoso Target links supplier data to RFQ results automatically, without manual upkeep alongside day-to-day business. Whether it fits your procurement organization is something our quick check shows in 3 minutes.
→ To the quick check