Supplier Evaluation: Scoring Suppliers Under ISO 9001 Clause 8.4

A product’s quality is often decided before anything comes through the factory gate. Raw material with the wrong tolerance, a late tool or a service delivered without the right paperwork reaches the customer as a nonconformity, however good your own process is. That’s why ISO 9001 asks not only that suppliers are selected but that they are monitored and evaluated regularly.

This article covers what clause 8.4 expects for “externally provided processes, products and services”, how to set up a workable evaluation system and how to turn results into action.

What clause 8.4 requires

ISO 9001:2015 talks about external providers rather than suppliers, and the scope is broad: purchased materials, outsourced processes and external services delivered directly to customers are all covered. The main expectations are:

• Define criteria (8.4.1): determine and apply criteria for the evaluation, selection, monitoring of performance and re-evaluation of external providers, based on their ability to supply in line with requirements.
• Keep records: retain documented information on these activities and on any actions arising from the evaluations.
• Type and extent of control (8.4.2): outsourced processes must stay within the control of the quality management system, with the degree of control reflecting the potential impact on the final product.
• Information for providers (8.4.3): communicate clearly what is required, under which conditions, with which approvals and competence requirements.

The standard doesn’t prescribe a scoring method. What matters is that criteria are defined, applied consistently and the results recorded.

Classify suppliers first

Monitoring every supplier with equal rigour is unnecessary and wasteful. A stationery supplier and a subcontractor making a critical component shouldn’t be evaluated the same way. A simple classification helps:

Class	Example	Control approach
Critical	Raw material going into the product, subcontracted processing	Frequent, detailed evaluation; on-site audit if needed
Important	Packaging, calibration services	Regular evaluation
Support	Office supplies, general services	Light follow-up where needed

Choosing evaluation criteria

Keeping criteria few and measurable makes evaluation sustainable. Common headings include:

• Quality: share of lots rejected at incoming inspection, number of nonconformities.
• Delivery: on-time, in-full performance.
• Price and commercial terms: competitiveness, adherence to payment and quotation processes.
• Service and communication: response speed, complete documents and certificates, technical support.

Whatever you choose, write down what each score is based on. “Delivery: 4” creates inconsistency between evaluators if nobody has defined what a 4 means.

Example scoring scale (0–5)

• 0: not met at all / no data
• 1–2: frequent, serious problems
• 3: acceptable, occasional problems
• 4: good, rare and minor problems
• 5: above expectations, no problems

This scale is only an example; set thresholds according to your own products and risks.

From evaluation to action

Scores change nothing on their own; the value lies in what you do with them. A predefined decision rule helps:

1. High score: the supplier stays on the approved list at the same evaluation frequency.
2. Medium score: share the weak criterion with the supplier and put the improvement expectation in writing.
3. Low score: open a supplier-sourced corrective action; restrict orders or look for an alternative if needed.

Linking supplier nonconformities to the corrective action process stops the same problem recurring with every delivery. Recording the supplier as the source also shows which suppliers cause issues and how often. See our corrective action guide for the steps.

How often to evaluate?

The standard sets no frequency; 8.4.1 only requires monitoring and re-evaluation. In practice critical suppliers are reviewed more often and support suppliers less often. After a serious nonconformity, an interim evaluation makes sense without waiting for the next period. Treating critical suppliers on a calendar similar to your internal audit programme also works — the risk-based approach in our internal audit planning article applies to suppliers too.

Selecting new suppliers: the initial evaluation

Evaluation isn’t only for existing suppliers; 8.4.1 covers selection too. A short pre-assessment before working with a new supplier prevents many later problems. Common methods at this stage include:

• Pre-qualification form: gather information on capacity, certificates, references and quality control approach.
• Sample approval: request samples before series delivery and check them against requirements.
• Trial order: observe delivery and communication performance with a small order.
• Site visit: inspect the production site for critical suppliers.

A supplier that passes joins the approved supplier list and enters the regular evaluation cycle. That list should be purchasing’s core reference for who orders can be placed with.

Data-driven scoring

Subjectivity is scoring’s weakest point. Wherever possible, base scores on records: incoming inspection records feed the quality score, order and delivery dates the delivery score, and supplier-sourced corrective actions the overall assessment. For criteria without numbers (such as communication), don’t leave the score to one person; having purchasing and quality score together improves consistency.

Common mistakes

• Scoring once a year “from memory” without looking at data.
• Scoring without defined criteria, leading to inconsistent evaluators.
• Giving low-scoring suppliers no feedback.
• Not reflecting results in purchasing decisions.
• Leaving outsourced processes out of supplier evaluation.

Supplier evaluation in HibritİK Quality Management

In HibritİK Quality Management, suppliers are scored 0–5 on four criteria. Evaluations sit alongside the module’s other quality records, and quality data exports to Excel, making period-on-period comparisons and management review reports easier to prepare.

For suppliers where problems are found, you can open a corrective action in the same module, record its source, capture the root cause in the 5-why fields and keep follow-up on track with deadline reminders. Specifications and technical documents you send to suppliers can be kept under revision control in the document library.

Conclusion

Supplier evaluation extends the quality system beyond the organisation’s walls. Classified suppliers, defined criteria, a consistent scale and rules that link low scores to action turn evaluation from an annual formality into a working control. To manage supplier evaluations together with corrective actions and documents, start your 14-day free trial or get in touch.