Home / Approach

A framework for IT vendor management

Sourcing, Procurement & Vendor Management works when three things are in place: a clear strategy and governance model, processes that cover the full vendor lifecycle, and the data to steer on. Here is how I assess and build them.

Overview

Three pillars

Each pillar can be assessed independently, but value only compounds when they reinforce each other. Most organisations are strong in one and thin in the other two.

Pillar 01

Strategy & Governance

  • Defined scope and vendor tiering
  • Defined goals and purpose (charter)
  • Defined roles and responsibilities
  • Defined processes and controls
  • Defined KPIs
  • Defined maturity journey
Pillar 02

Processes

  • Demand and requirement management
  • RFx, negotiation and procure-to-pay
  • Contract management and renewal
  • Vendor onboarding and offboarding
  • VMO operations: spend, performance, risk
  • Relationship management
Pillar 03

Data & Technology

  • Contract repository and templates
  • Spend data: vendor portal, ERP and PO
  • Performance information and risk register
  • Procurement tooling: RFP and e-tendering
  • Data management process
  • 360° reporting: trends, accuracy, actions
Governance roll-out

Not every vendor deserves the same attention

Governance effort has to be proportionate. Tiering is the mechanism: a small group of strategic vendors gets full governance, the next tier gets a lighter cadence, and the long tail is managed by exception and process.

This is almost always the first thing to fix. Without tiering, teams either over-govern everything and burn out, or govern nothing consistently.

Tier 1 Top 1–5 vendors · full governance, executive sponsorship, QBRs, joint roadmap
Tier 2 Top 6–10 vendors · scorecards, periodic reviews, managed renewals
Tier 3 Remaining vendors · process-driven, managed by exception and spend threshold
Vendor lifecycle

From demand to renewal — or exit

The process spine that connects sourcing, procurement and vendor management into a single loop rather than a series of handovers.

Step 01 · Sourcing

Demand & strategy

IT demand and requirement management, market intelligence, and a maintained sourcing strategy with vendor portfolio and ecosystem planning.

Step 02 · Procurement

RFx & negotiation

RFx execution and due diligence, commercial negotiation, and a procure-to-pay path that stands up to audit.

Step 03 · Contract

Contracting & onboarding

Contract management, controlled vendor onboarding, and the transfer into steady-state operations.

Step 04 · Run

VMO operations

Spend reporting, relationship management, performance management and vendor risk management on an agreed cadence.

Step 05 · Renewal

Renewal or exit

Contract renewal driven by performance evidence — or a planned termination and offboarding with knowledge transfer.

Step 06 · Adoption

Stakeholder adoption

The step most models omit. Without adoption across IT and the business, the framework stays on paper.

A typical vendor management team shape

  • Head of Vendor Management — reporting into the VP of IT & Digital, on the IT leadership team
  • VMO Manager — running the operating cadence
  • Vendor management specialist — sourcing, RFx and contract execution
  • ITAM specialist — asset and entitlement management
  • SAM / VMO consultant — tooling, data and reporting

With dotted-line engagement into IT functions, product owners and supporting functions such as Finance, Legal, Security and Procurement.

Organisation

Who does the work matters as much as the process

A framework without owners is documentation. Part of every engagement is defining the roles, the reporting line, and the interfaces into the rest of the organisation — then either recruiting for them or building the capability in the existing team.

Where a full team isn't justified, the same outcomes can be reached with a leaner model and stronger process automation. The point is that accountability is explicit.

Want a read on where you stand?

A vendor baseline assessment maps your current position against the three pillars and gives you a sequenced action list.