Supplier Strategy and Policy
Strategy vs policy
Supplier strategy is the long-term direction: what to source, why, from where, and how much to depend on suppliers. Supplier policy is the mandatory rule set that governs behavior: roles, approvals, risk appetite, compliance, ethics, and review requirements. Strategy sets direction; policy constrains decisions.
Strategy content
- Sourcing choices: make/buy, insource/outsource, single vs multi-source, nearshore/offshore.
- Alignment with business strategy and service value chains.
- Risk appetite, resilience, sustainability, and exit or transition options.
- Criteria for strategic versus transactional supplier relationships.
Policy content
- Segmentation rules and governance forums.
- Due diligence, onboarding, and contract approval thresholds.
- Performance reporting, review cadence, and escalation.
- Compliance with legal, regulatory, security, and ethical requirements.
Worked example
A hospital decides to outsource medical imaging transcription. Its strategy prioritizes patient-data security and continuity; policy requires a security assessment, a data-processing agreement, and a tested exit plan before approval. Two suppliers are shortlisted: one is cheapest but single-region; the other costs more with multi-region failover. Strategy selects the resilient option despite higher cost because continuity is a strategic priority. Policy then enforces the assessment and exit plan. Reasoning: cost is not the only criterion; strategy translates risk appetite into sourcing choices.
Traps
- Writing a supplier list and calling it a strategy.
- Treating policy as a procedure or a one-off document.
- Omitting exit, transition, and concentration risk.
- Letting procurement savings override service continuity and compliance.