How do ISO standards govern vendor evaluation?

ISO 9001:2015 clause 8.4 requires controlled external provision of products and services with documented evaluation and monitoring of suppliers. ISO 55001:2014 clause 8.3 requires asset management activities outsourced to suppliers to be subject to defined controls. ISO 20400:2017 provides specific guidance on integrating sustainability into procurement decisions including environmental, social and governance criteria. ISO 27001 governs information security controls for suppliers handling customer data. Modern Slavery Act 2018 (Cth) applies to large organisations and requires risk assessment of supply chains for forced labour. A documented scorecard demonstrates compliance across the framework.

What weighting should I apply across capability, commercial, risk and service?

Weightings depend on the Kraljic quadrant. For strategic suppliers typical weightings are 25 to 30 percent capability, 15 to 20 percent commercial, 15 to 20 percent risk, 15 to 20 percent service, 10 to 15 percent ESG and 10 percent cyber. For routine suppliers weightings shift toward 50 percent commercial, 25 percent service and 25 percent capability with risk and ESG light-touch. Always document the weighting rationale up front so suppliers cannot challenge the decision after the fact. Reviewing the weights before evaluation also surfaces internal disagreement about what the organisation actually values in the category.

What ESG and modern slavery evidence should the scorecard capture?

For ESG, the scorecard should capture Scope 1 and 2 emissions performance, Scope 3 disclosure where available, ISO 14001 environmental management certification, diversity and inclusion targets and indigenous participation commitments. For modern slavery, organisations covered by the Modern Slavery Act 2018 must publish an annual statement covering their structure, operations, supply chains and the risks of modern slavery practices, and the actions taken. The scorecard captures the supplier modern slavery statement, the risk assessment outcome and any remediation commitments. Suppliers serving major banks, government or ASX 200 customers will typically have these on file.

How does the post-award SRM scorecard differ from the selection scorecard?

The selection scorecard scores forecasted capability, commercial offer and risk profile before contract award. The post-award SRM scorecard scores actual performance against the contract: response time SLA achieved, defect rate, service quality, billing accuracy, ESG progress against committed targets and cyber posture maintenance. The same criteria structure is used so trend lines are comparable across selection and ongoing performance. Strategic suppliers receive quarterly SRM scorecards while routine suppliers receive annual ones. Scorecard drift greater than 0.5 of a rating point triggers an improvement plan or a re-tender decision.

Free vendor evaluation scorecard template

Q: What is the Kraljic procurement matrix and how does it drive scorecard depth?

The Kraljic matrix (HBR 1983) classifies spend on two axes (profit impact and supply risk) into four quadrants: strategic (high impact high risk), leverage (high impact low risk), bottleneck (low impact high risk) and routine (low impact low risk). Strategic and bottleneck categories warrant a deep scorecard with site visits, financial health review, ESG audit and quarterly SRM. Leverage and routine categories warrant a faster scorecard focused on commercial, basic capability and service. The matrix prevents asset-heavy organisations from spending equal effort on a $5K stationery contract and a $5M OEM service agreement.

Jump to download form ↓

Enter your email below to download this vendor evaluation scorecard template as a ready-to-use PDF.

Free vendor evaluation scorecard template (PDF-ready). Capability commercial risk service and ESG scoring with Kraljic matrix. ISO 20400 aligned.

Jarrod Milford

Commercial Director

Updated 18 May 2026

Also see:Asset tracking →Best asset tracking software →MapTrack vs Asset Panda →

Updated 18 May 2026

How to use: download the PDF, print or complete digitally on any device.

PDF format, ready to print or fill on screen
Use as-is or customise to suit your operation
Go digital in MapTrack for photos, alerts and audit trails

Download free PDF template

FreePDFUpdated May 2026

Trusted by teams across Australia and New Zealand

We respect your privacy. Unsubscribe anytime.

Used by construction, mining and field service teams

What is a vendor evaluation scorecard template?

A vendor evaluation scorecard is a structured assessment document used by procurement, asset management and finance teams to compare suppliers across capability, commercial, risk, service and ESG criteria before awarding a contract and to monitor performance after award. Each criterion is weighted, each supplier scored against a calibrated scale (typically 1 to 5) and the weighted total feeds the supplier selection decision and the ongoing supplier relationship management (SRM) cadence. The methodology aligns with ISO 20400 (Sustainable procurement Guidance), ISO 9001 clause 8.4 on externally provided processes and the supplier evaluation requirements widely adopted by Australian asset-heavy organisations under their procurement framework. The Kraljic procurement matrix (Harvard Business Review 1983) categorises spend into strategic, leverage, bottleneck and routine quadrants, which determines how much depth the scorecard applies to each supplier.\n\nFor maintenance, fleet, IT and indirect spend categories, the scorecard replaces the ad-hoc supplier selection that exposes asset-heavy organisations to single-source risk, undocumented capability claims and ESG blind spots. Categories where supply failure stops production (strategic and bottleneck per Kraljic) warrant a deep scorecard with site visits, financial health review and ESG audit. Routine and leverage categories warrant a faster scorecard focused on commercial, basic capability and service. A documented scorecard provides defensible evidence for the procurement decision, satisfies ISO 9001 clause 8.4.1 supplier control requirements and ISO 55001 clause 8.3 on external provision of asset management activities, and produces the supplier risk profile that procurement, asset management and the executive committee use during the annual supplier review. Beyond compliance, a structured scorecard cuts total cost of ownership: organisations that score on capability, service and risk rather than headline price typically pay 5 to 10 percent more on day one but recover that and more in lower failure rate, faster response and reduced commercial dispute over a three year contract.

Learn more about asset tracking in MapTrack.

Benefits of using this vendor evaluation scorecard template

Defensible supplier selection: a weighted criterion-by-criterion scorecard replaces the headline-price-only decision that exposes asset-heavy organisations to capability gaps, single-source risk and unreported ESG exposure across critical supply categories.
Kraljic alignment: classifying every supplier as strategic, leverage, bottleneck or routine drives the right depth of evaluation, the right contract length and the right SRM cadence rather than applying one template to a $5K stationery contract and a $5M OEM service agreement.
Risk and ESG coverage: explicit risk and ESG criteria capture financial health, insurance, cyber security, modern slavery exposure and emissions performance that headline procurement processes routinely miss until an incident or audit exposes the gap.
Total cost of ownership clarity: scoring on capability, commercial, risk and service against the asset lifecycle rather than headline price prevents the cheapest quote from winning a strategic spend that ends up costing 20 to 40 percent more over three years.
Audit and standards compliance: the documented scorecard, signed by procurement and the budget owner, satisfies ISO 9001 clause 8.4.1, ISO 20400 sustainable procurement and ISO 55001 clause 8.3 on external provision of asset management activities.
SRM cadence: the same scorecard reused for post-award performance review converts the annual supplier review from a debate into a tracked scorecard with trend lines and improvement actions per category.

Benefits of digitising forms in MapTrack

When you move your assessments from paper to MapTrack, you get:

Field users can easily scan a QR code to complete a form on mobile. Unlimited users.
Automatically get alerts when faults are identified.
Link every form digitally as a PDF to the relevant asset, location or person.
Receive a digital PDF copy with every submission to your email.
Ability to share forms digitally.
Build conditional logic (show or hide questions based on answers).
Take pictures or attach photos. Not possible with a paper-based form.
Electronic signatures.
Edit forms later without reprinting.
Restrict permissions (who can view, complete or approve).
Build forms with AI (describe what you need and MapTrack suggests the form).
Maintain a live asset register with location, condition and custody history.
Schedule and track calibration, certification and warranty expiry dates.
Generate depreciation and total-cost-of-ownership reports per asset.

Book a demo to see how MapTrack handles assessments.

Try MapTrack free for 30 days

Full access to every feature. No credit card required. Per-asset pricing so you scale as your fleet grows.

Start free trial

No credit card required
30 days free trial
Cancel anytime

1-2 days/week saved

“Bloody amazing! We used to spend 1-2 days a week tracking and managing our generators alone.”

Steve McAllister

Asset Coordinator, Saunders International

What to include in a vendor evaluation scorecard template

This vendor evaluation scorecard template covers 10 key areas:

Sourcing context: spend category, Kraljic quadrant (strategic, leverage, bottleneck, routine), annual spend value, contract length, business criticality and the budget owner and procurement lead.
Capability criteria: technical fit against the specification, relevant industry experience, plant and equipment, technical team qualifications, capacity utilisation and reference site evidence.
Commercial criteria: pricing competitiveness, total cost of ownership over contract life, payment terms, rebate and incentive structure, currency and price escalation mechanism.
Service criteria: response time SLA, geographic coverage, on-call and after-hours support, spares stock holding, ramp-up capacity and digital integration with the customer CMMS or ERP.
Quality and assurance: ISO 9001 certification, ISO 14001 environmental, ISO 45001 safety, AS 9100 or industry-specific accreditations and audit findings from third parties.
Risk profile: financial health (Equifax / Dun and Bradstreet score), public liability and professional indemnity insurance, business continuity and disaster recovery, single-source dependency and concentration risk.
Cyber security: ISO 27001 status, ASD Essential 8 maturity, data-handling and breach-notification commitments and any subcontractor cyber risk passed through the contract.
ESG and modern slavery: Scope 1 / 2 / 3 emissions reporting, modern slavery statement under the Modern Slavery Act 2018, diversity and inclusion targets, indigenous participation and waste reduction commitments.
Weighting and scoring: criterion weights aligned to the Kraljic quadrant, calibrated 1 to 5 scoring scale with worded anchors and weighted score totals per supplier.
Decision and sign-off: shortlist outcome, recommended supplier, dissenting opinion if any, budget owner and procurement lead signatures and the annual SRM review date.

How to use this vendor evaluation scorecard template

Define the sourcing context and Kraljic quadrant: capture the spend category, annual spend value, business criticality and contract length, classify the category as strategic, leverage, bottleneck or routine using the Kraljic matrix, document the supply market structure and confirm the scorecard depth and weighting profile that applies to this category before going to market.
Issue the RFI or RFP and capture evidence per criterion: list the criteria the scorecard will score against in the RFP, require evidence per criterion (certifications, financial accounts, reference sites, ESG statement, modern slavery statement, cyber attestations), schedule supplier presentations for strategic categories and run site visits for shortlisted suppliers where required.
Score each supplier against the weighted criteria: apply the calibrated 1 to 5 scale per criterion with worded anchors, capture evidence references against every score, run a moderation session with the procurement lead, budget owner and a technical subject matter expert to surface scoring inconsistency and lock the weighted scores per supplier.
Run the risk and ESG due diligence layer: confirm financial health with Equifax or Dun and Bradstreet, verify insurance coverage and currency, run the modern slavery and emissions disclosure check, validate ISO 9001, ISO 14001, ISO 45001 and ISO 27001 certifications against current registers and document any condition or remediation item required at contract award.
Recommend, document and embed the SRM cadence: rank the suppliers, recommend the preferred supplier and any dissenting opinion, secure budget owner and procurement lead sign-off, embed the scorecard as the post-award performance review document, schedule the quarterly or annual SRM cadence and lodge the signed record against the contract file for audit.

In MapTrack, you can manage your full asset register digitally. Each submission is stored as a timestamped PDF against the asset record.

Get the free templateEnter your email above to download the full vendor evaluation scorecard template as a PDF.Back to download form

How often should you complete this assessment?

A vendor scorecard is built before contract award and then reused for post-award performance review on a cadence set by the Kraljic quadrant. Strategic suppliers (high spend high risk) are reviewed quarterly with a formal annual scorecard refresh. Leverage suppliers (high spend low risk) are reviewed annually. Bottleneck suppliers (low spend high risk) are reviewed annually with a deep risk and continuity refresh. Routine suppliers (low spend low risk) are reviewed every two to three years or on contract renewal. Out-of-cycle refresh is triggered by a major service failure, financial distress event, ownership change, modern slavery disclosure, cyber breach or change in the underlying spend category. ISO 20400 expects a documented review cadence and ISO 9001 clause 8.4.1 expects ongoing monitoring of external providers. MapTrack stores the scorecard against the supplier record so the next quarterly or annual review starts from the last set of scores rather than a blank sheet.

Frequently asked questions

Applicable regulatory standards

This template aligns with the following regulations and standards:

ISO 9001:2015 (clause 8.4 externally provided processes)
ISO 55001:2014 (clause 8.3 external provision of asset management activities)
ISO 20400:2017 (Sustainable procurement Guidance)
ISO 27001:2022 (Information security management)
Modern Slavery Act 2018 (Cth)

Need to manage your full asset register digitally?

Register every asset in MapTrack, attach digital forms, and get a complete history of every inspection, service and compliance record.

Start free trial Book a demo

Asset tracking · All templates · Pricing · Book a demo