Kit de responsable de compras

Thresholds, approval matrix, sourcing methods, single-source grounds, evaluation, sustainable procurement, ethics, public sector rules, KPIs

Flow-down, labour and human rights (ILO), environment, business ethics, management systems, grievance channel, remediation, legal context

AP control policy: risks, segregation of duties, approval thresholds, vendor master, POs, three-way match tolerances, payment runs, T&E, corporate cards, metrics

Make-or-buy analysis, procurement items, contract types, weighted supplier evaluation, timeline, supplier management, approvals

Spend analysis, stakeholder requirements, supply market, Kraljic positioning chart, sourcing levers with savings, risks, roadmap, KPIs

Purpose and non-commitment, background, objectives, scope, timetable, capability, technical, security, delivery and commercial questions, rules, next steps

Issuer RFP: bidder instructions, timetable, Q&A rules, mandatory/scored/informational IDs, NFR and security questions, weighted scoring, pricing

Evaluation plan, panel and conflicts, anchored scale, knock-outs, weighted criteria, individual and consensus scores, demos, due diligence, price score

Capability need, differentiation test, sourcing options, knock-outs, fit, 5-year cost, time to market, lock-in and exit, skills, risk, weighted score, decision

Risk tiering, checks by tier (identity, owners, sanctions, bribery, security, ESG), bank details verification, decision, monitoring

Supplier tiering with review intervals, security posture checklist, secure development and SBOM questions, concentration and exit risk, NIS2, DORA, CRA, GDPR hooks, decision

Regimes, scoring method, geography, customer, product and channel exposure, OFAC 50% vs EU and UK ownership tests, typologies, controls, residual risk

Requisition with sourcing route and approvals, PO header and lines, delivery terms, Incoterms rule, key terms of purchase, error checklist

Mutual NDA format: parties, purpose, confidential information, exclusions, obligations, compelled disclosure, term, remedies, signatures

Controller-processor DPA: Art. 28(3)(a)-(h) terms, sub-processors, breach notice, audits, transfer tools (SCCs, DPF, UK IDTA), CCPA s. 7051 terms, annexes

SOW: scope in/out, deliverables with acceptance criteria, milestones, roles of both parties, change control, payment schedule, signatures

Field definitions, risk tiers, worked register with notice deadlines and alert dates, key terms, renewal workflow, reconciliation checks

KPI definitions and bands, weighted scorecard with trend, corrective actions and SCAR, relationship plan, re-evaluation decision for external providers

DORA Art. 28(3) register: templates B_01.01 to B_99.01, arrangements, providers and LEI/EUID, supply chain ranks, functions, assessments, concentration, exit