In short: An effective supplier audit is risk-based: it focuses on suppliers and processes that matter most to your product and customers, uses clear criteria, and ends with verified corrective actions and updated supplier ratings.
Which suppliers should you audit?
Prioritize by risk: criticality of the part or service, supplier performance history, new suppliers, changes in process or location, and regulatory requirements.
How do you plan a supplier audit?
- Define objectives, scope and criteria (standards, contract and specifications).
- Review supplier performance data and previous findings.
- Prepare a process-based checklist focused on key risks.
- Agree the agenda and logistics with the supplier.
What happens after the audit?
Issue a clear report, agree corrective action plans with deadlines, verify effectiveness, and update the supplier’s rating and audit frequency.
Key takeaways
- Use risk to decide who and what to audit.
- Audit processes and results, not just documents.
- Close the loop with verified corrective actions.
Frequently asked questions
What is a second-party audit?
An audit performed by a customer, or on its behalf, of a supplier.
How often should suppliers be audited?
Frequency should reflect risk and performance; high-risk suppliers are audited more often.
Can supplier audits be done remotely?
Yes, where the objectives can be met using ICT and risks are managed.