Overview
This document outlines InContext Solutions' comprehensive approach to engaging and managing vendors and suppliers, from initial discussions through contractual agreements and ongoing relationships. This process is designed to be efficient and adaptable to the specific vendor or supplier type, ensuring clarity and alignment with our organizational objectives.
Scope
This policy applies to all employees and affiliates of InContext Solutions involved in the vendor onboarding process.
Vendor/Supplier Evaluation Phase
This initial phase includes several key steps to evaluate potential vendors or suppliers:
-
Engagement and Product/Service Overview
a. Initiate contact with the vendor/supplier to discuss their offerings.
b. Execute a Mutual Non-Disclosure Agreement (NDA) to protect proprietary information shared during discussions.
c. Obtain an overview of the vendor's product or service, including key features and benefits.
d. Review a product or service demonstration provided by the vendor to assess suitability.
-
InContext Evaluation
a. Conduct an internal evaluation of the vendor's capabilities, reputation, and any past performance records based on the information gathered.
Discussion/Agreement & Requirements Phase
During this phase, the organization evaluates the suitability of the vendor/supplier based on business requirements:
-
Business Needs and Expectations
a. Clearly define the business needs related to the vendor's offerings, including expected volumes of work and delivery frequency.
b. Establish specific product/service specifications to ensure precise alignment with organizational objectives.
c. Determine lead times required for delivery of goods or services.
-
Contractual Agreements
a. Develop a Work Order or Statement of Work (SOW) that outlines the specific terms and expectations.
b. Discuss rate cards, negotiate pricing options, and agree on payment terms.
c. Define delivery processes and logistics, ensuring clarity in operational needs.
d. Optionally, perform an IT Vendor Assessment to evaluate the vendor's technical capabilities and compatibility.
-
Pilot (Optional)
a. Consider implementing a pilot phase to test the vendor's offerings in real-world scenarios, assessing their performance and fit with the organization.
Information Gathering Phase
Once the decision to proceed with onboarding the vendor/supplier is made, the following steps are taken:
-
Finalizing Contractual Agreements
a. Negotiate a Master Services Agreement (MSA) that includes the InContext NDA and other necessary confidentiality agreements.
b. Optionally, conduct a site visit to evaluate the vendor's operational environment.
c. Ensure any outstanding IT assessment items are resolved before moving forward.
d. Establish Service Level Agreement (SLA) guidelines that outline performance expectations.
e. Complete the InContext Vendor Setup form and W-9, providing necessary tax information.
f. Share key details, including the vendor/supplier name, address, contact information, and banking/payment details.
g. Confirm vendor/supplier contacts, defining roles and responsibilities clearly.
h. Draft and finalize the SOW to stipulate all agreed-upon terms for the engagement.
Information Sharing
-
Internal Communication
a. Collaborate with Finance and Operations teams to set up necessary financial and operational systems to manage the vendor relationship effectively.
b. Optionally, develop or provide approved training materials to familiarize staff with the vendor's products and services.
-
Vendor Communication
a. Finalize any contractual agreements and send them for approval, ensuring that all terms have been discussed and agreed upon.
b. Complete and agree upon the SOW, along with finalizing any SLAs required.
c. Provide invoicing details to ensure smooth financial transactions.
d. Optionally, arrange training sessions to educate relevant staff on the use of products/services provided by the vendor.
e. Schedule regular account management discussions and performance reviews to ensure alignment with business objectives.
Ongoing Relationship Phase
Periodic reviews of vendors/suppliers will be conducted to ensure continued alignment with business needs and compliance with IT requirements, SLAs, and performance guidelines. This review process will occur at least annually or as deemed necessary.
-
Contractual Agreements Review
-
Regularly review and update vendor/supplier agreements to reflect any changes in partnership dynamics.
-
Re-evaluate NDA terms or confidentiality agreements as needed.
-
Create additional SOWs for new projects or initiatives as they arise.
-
Policy Compliance
-
Management and Compliance Verification
-
The vendor onboarding process will be managed by the InContext InfoSec team. Employees will be required to review the policy annually during the InfoSec policy review process or upon their onboarding.
-
Any exceptions to this policy must be approved in advance by the InfoSec team. Violations of this policy may result in disciplinary action, including termination of employment.
-
Revision History
| Date of Change | Responsible | Summary of Change |
|---|---|---|
| February 2017 | ICS InfoSec Team | Updated and converted to new format. |
| June 2018 | ICS InfoSec Team | MSA and Standard InContext NDA have been combined into a single document |
| August 2019 | ICS InfoSec Team | Annual review period, no changes |
| October 2020 | ICS InfoSec Team | Annual review period, no changes |
| June 2022 | ICS InfoSec Team | Annual review, no changes |
| February 2023 | ICS InfoSec Team | Annual review, no changes |
| October 2023 | ICS InfoSec Team | Rewrite for clarity and depth. |
| December 2024 | ICS InfoSec Team | Update for clarity. |
| March 2026 | ICS InfoSec Team | Published to Trust Center |