Vendor management is the practice of controlling which suppliers an organisation deals with: how they are onboarded and approved, what documents they must keep current, how they perform, and when the relationship should end.
Onboarding is where the control is
Most vendor risk is admitted at onboarding rather than discovered later. A supplier approved without a check on registration, tax status, insurance or capability is a problem the organisation has taken on deliberately, even if nobody framed it that way at the time.
The documents that expire
The expensive part of vendor management is not the initial file but the dates inside it: insurance certificates, licences, safety approvals and statutory registrations. These lapse quietly. A vendor register that stores documents without tracking their expiry gives false comfort — it looks complete on the day it is built and is silently wrong within a year.
What a vendor record should carry
- Legal identity and registration details.
- Category — what they are approved to supply, not just that they are approved.
- Documents with expiry dates that announce themselves in advance.
- Performance history: delivery, quality, disputes.
- Status, so a blocked vendor is blocked everywhere rather than at one site.
Where it meets the gate
Vendor management and visitor management meet at the entrance. A vendor engineer arriving on site is both a supplier record and a person to be admitted, and the useful question — is this contractor's induction current? — can only be answered if the two know about each other.