Vendor onboarding metrics
Measure median and percentile cycle time, first-time-right submissions, time in each review stage, evidence expiry, duplicate prevention, approval exceptions and activation without complete mandatory controls. Segment by risk tier and business unit.
Sourcing metrics
Track competitive coverage, invited and responding suppliers, response quality, evaluation duration, award cycle time, savings methodology, late events and award concentration. Keep forecast, negotiated and realised value distinct.
Supplier and risk metrics
Monitor service attainment, defect and incident rates, corrective-action closure, critical supplier coverage, overdue reassessments, concentration, residual risk and business-continuity testing. Use leading and lagging indicators.
Govern the metric catalogue
Publish definitions, exclusions and systems of record. Version formulas, test data quality, restrict personal data, avoid vanity totals and assign an action threshold. Review whether each metric changes a decision; retire those that do not.
Related resources
Sources and research basis
This guide distinguishes general control recommendations from legal requirements. It is general information, not legal advice; applicability varies by entity, sector, jurisdiction and contract.