Operational Guide — Sourcing Verification
AA-PROC-SOURCE-REC — Sourcing Verification
This artifact provides evidence that sourcing decisions are risk-based, documented, and approved prior to supplier qualification or purchasing.
Minimum evidentiary expectations include:
- Identification of proposed supplier and material or service
- Defined sourcing requirements and intended use
- Risk assessment or screening results
- Verification of ASL status or qualification pathway
- Quality review and approval of sourcing decision
Auditor focus: confirmation that suppliers are not engaged or advanced without documented, risk-based sourcing approval.
WIN-PROC-SOURCE-VERIFY
Governs controlled, risk-based sourcing decisions prior to supplier qualification or purchasing activity.
Define sourcing requirements and intended use.
Perform and document sourcing risk assessment.
Verify supplier ASL status or approved qualification pathway.
Obtain Quality review and approval of sourcing decision.
Control outcome: Only risk-evaluated and Quality-approved suppliers progress to qualification or purchasing.
Authority resides in the applicable Family Pack.
The AA and WIN above are reproduced verbatim for reference only and are
maintained under formal change control in the Family Pack.
This Operational Guide is non-authoritative and provides execution guidance
only. It does not modify, reinterpret, or replace governing documentation.
Process: Sourcing Verification
Business Process Owner: Procurement / Supply Chain
Primary Systems: Supplier Management System, ERP, Risk Assessment Tools
Applies When: A new supplier or material/service is proposed prior to qualification or purchasing
Operational Step Sequence
This sequence supports controlled, risk-based sourcing decisions and aligns
execution to the requirements defined in the Family Pack.
- Identify the proposed supplier and clearly document the material or service under consideration.
- Define the intended use and sourcing requirements relevant to the proposed supplier.
- Perform a sourcing risk assessment or screening using the designated risk evaluation method.
- Record the results of the risk assessment in a traceable format.
- Verify whether the supplier is listed on the Approved Supplier List (ASL) or identify the applicable qualification pathway.
- Submit the sourcing package for Quality review, including risk assessment results and ASL status.
- Document Quality approval prior to advancing the supplier to qualification or purchasing activities.
- Retain sourcing verification records to support audit readiness.
Operational Ownership & Change Flexibility:
The operational steps described above are owned by the Business Process
Owner (BPO). These steps may be updated without formal change control,
provided execution remains aligned with the intent and outcomes defined
in the governing Family Pack.
Escalation:
Any sourcing decision lacking documented risk assessment or Quality approval
is escalated prior to supplier qualification or purchasing.
Completion Criteria
Execution is complete when sourcing requirements are defined, risk is evaluated,
Quality approval is documented, and only approved suppliers progress to
qualification or purchasing.