Supplier normalization exception audit
Use this audit after a restricted supplier has been restored to normal or semi-normal ordering. It catches temporary exceptions, deadline extensions, document waivers, inspection bypasses and payment accommodations before they quietly become the new operating baseline.
When to run it
- One or more orders have shipped after normalization, but controls were waived or modified.
- A buyer says the supplier is “back to normal” while old exceptions still appear in email or PO notes.
- Payment release, inspection skip, document delay or packaging tolerance was approved as a one-time case.
- Management needs a clean decision: close, renew with controls, downgrade status or reopen restriction review.
Audit principles
Temporary means datedEvery waiver has ownerEvidence before closureNo silent renewalRollback trigger visibleNext PO protected
If the exception does not have an expiry date and a named owner, treat it as uncontrolled.
Audit register columns
| Column | What to record | Decision use |
|---|---|---|
| Supplier / order | Supplier, product family, PO or shipment affected by the exception. | Prevents broad normalization claims from hiding order-specific risk. |
| Exception type | Inspection bypass, document delay, payment reserve release, shipment tolerance, spec deviation, response delay or commercial waiver. | Groups recurring exceptions for pattern review. |
| Approval basis | Who approved it, on what evidence, and whether the approval was one-time or conditional. | Separates documented management decisions from informal drift. |
| Expiry / next checkpoint | Date, order milestone or proof condition that ends the exception. | Creates a hard review point before the next PO inherits the waiver. |
| Control still active | Inspection gate, capped volume, payment reserve, backup source, extra document check or none. | Shows whether risk is still contained. |
| Closure evidence | QC result, document file, arrival confirmation, supplier corrective proof, payment confirmation or customer acceptance. | Defines what must exist before the exception closes. |
| Audit decision | Close, renew once, tighten control, downgrade to watch, reopen restriction review or exit planning. | Turns scattered exceptions into a visible supplier-status action. |
Fast scoring rule
- Start at 10 points for a normalized supplier with no open exceptions.
- Subtract 2 points for each active exception without complete closure evidence.
- Subtract 3 points for any exception missing expiry date, owner or rollback trigger.
- Subtract 4 points for repeated exceptions of the same type across two orders.
- Keep normal status at 8–10, normalize with controls at 5–7, reopen restriction review below 5.
Copy-ready audit row
Supplier / order:
Exception type:
Approval basis:
Expiry / checkpoint:
Control still active:
Closure evidence:
Audit decision:
Recommended closeout path
- Close only when the exception has evidence, owner sign-off and no repeat signal in the next operating window.
- Renew once only when the exception remains justified and the next checkpoint is stricter than the last one.
- Tighten controls when exceptions are accumulating faster than proof is closing.
- Reopen restriction review when the supplier uses normalization to reintroduce the same risk that caused the original restriction.