Skip to content

Supplier Risk Classification

Supplier classification determines the risk category of a supplier based on a structured assessment of five dimensions. The resulting risk category drives qualification requirements, monitoring frequency, and oversight level.

CategoryScore RangeDescription
Critical12 — 15Direct impact on product quality and patient safety
Major8 — 11Significant impact on quality systems or regulatory compliance
Minor4 — 7Limited impact on quality, indirect services
Non-CriticalBelow 4No impact on product quality

The classification form evaluates five risk dimensions. Each dimension is rated as High (3 points), Medium (2 points), or Low (1 point).

DimensionAssessment Question
Impact on Product QualityHow directly does this supplier impact the quality of the final product?
Impact on Patient SafetyCould a failure from this supplier impact patient safety?
Regulatory ImpactWhat is the regulatory impact if this supplier fails to meet requirements?
Process CriticalityHow critical is this supplier to your manufacturing/business processes?
Data Integrity RiskDoes this supplier handle data that impacts GxP compliance or data integrity?

The total score is calculated by summing all five dimension scores (minimum 5, maximum 15), and the risk category is derived from the score ranges above.

  1. Navigate to the supplier profile page
  2. Click the Classify button in the header, or go to the Classification tab and click Classify Supplier
  3. For each of the five dimensions, select High, Medium, or Low by clicking the corresponding option
  4. Review the Classification Preview card, which shows the estimated risk category and total score in real time
  5. Enter a Justification explaining the reasoning for this classification (required)
  6. Click Submit Classification

All dimensions default to Medium when the form opens. Adjust each dimension based on your assessment of the specific supplier.

Each time a supplier is classified, a new classification record is created. The supplier profile’s Classification tab displays:

  • Current Classification — the most recent classification with full dimension scores, risk score, category badge, classification date, and justification
  • Classification History — a chronological list of all previous classifications showing category, score, date, and which entry is current
  • Requirements — Risk category determines which qualification requirements are auto-assigned to the supplier. Use the “Auto-assign Requirements” button on the Requirements tab after classification.
  • Qualification frequency — Higher-risk suppliers typically require more frequent requalification cycles.
  • Monitoring — Critical and Major suppliers appear prominently in dashboard statistics and overdue alerts.