The Executive Diagnostic and Governance Toolkit
Mastering Procurement and Vendor Risk
Score your own function red, amber or green, find out which part is weakest, and walk into the next budget round able to defend what you want to fix. Built for leaders reviewing running RFPs on spreadsheets, scoring responses manually, re-assessing vendor risk annually.
Each order is checked and updated against the latest insights before delivery. That is why access takes up to 24 hours rather than being instant.
| 1 |
You stop guessing where you stand. You finish with a score, not an opinion: every part of your function rated red, amber or green, with the weakest ranked first. Evidence: a Quick Scan for the shape of it, then seven domain assessments of 30 scored questions each, 210 in all, rolled into one scorecard, plus a maturity radar and a current-versus-target gap analysis. |
| 2 |
You can defend the decision. You walk into the budget round with the gap named, the owner named and done defined, instead of a case built on instinct. Evidence: project charter, scope statement, RACI, requirements traceability and work breakdown structure, pre-filled in your domain's language. |
| 3 |
The work actually moves. The month after the decision is already built, so nothing stalls waiting for someone to design a form. Evidence: more than 60 project templates across all five PMBOK process groups, plus runbooks, SOPs, a KPI framework, audit checklists and a risk matrix. 55 to 65 files in total. |
| 4 |
You use it the day it lands. No blank templates to interpret. Every workbook opens with what it is, who uses it, when, how, a 1 to 5 scoring guide, what good looks like, and a worked example you delete and type over. |
The situation this is built for
You're spending too much time chasing responses, manually scoring proposals, and re-running the same vendor risk reviews annually. The tools haven't caught up, but the expectations have. Stakeholders demand faster decisions, better visibility, and stronger risk controls — all while your team runs on fragmented data and outdated processes. You know it's unsustainable, but you can't point to a clear path forward without overhauling everything at once.
Who this is for
Head of Procurement in mid-to-large organizations managing complex vendor portfolios, leading RFPs, overseeing due diligence, and accountable for ongoing vendor risk management.
Who this is not for
Individual contributors not responsible for end-to-end procurement strategy, vendors selling procurement tools, or teams looking for software implementation guides.
What you walk away with
- Conduct a rigorous self-assessment of your current procurement maturity
- Identify high-leverage opportunities to reduce process friction
- Design risk-based vendor review cycles that scale with exposure
- Standardize RFP evaluation to eliminate scoring drift
- Build a living vendor risk framework aligned to business impact
How this maps to your situation
- Diagnose current state
- Design future state
- Implement improvements
- Sustain transformation
Before vs. after
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed to be completed at your pace over 12 weeks.
How this compares to the alternatives
Unlike generic procurement certifications or software-specific training, this course focuses on the underlying decisions, artifacts, and governance practices that define effective vendor risk management — independent of any toolset.
Also included: the full course, for when you want the reasoning behind a finding (12 modules, 144 chapters)
Depth reference. The diagnostic and the templates stand on their own; this is what to read when you want the reasoning behind a finding.
- Mapping the full lifecycle of a procurement initiative
- Identifying manual touchpoints in current workflows
- Assessing vendor data fragmentation across systems
- Evaluating consistency in RFP documentation
- Measuring time spent on non-strategic tasks
- Benchmarking against functional capability levels
- Reviewing escalation patterns for vendor issues
- Analyzing frequency of process deviations
- Documenting stakeholder feedback on procurement speed
- Classifying procurement categories by complexity
- Tracking approval cycle durations by category
- Scoring process predictability across regions
- Defining minimum technical and compliance thresholds
- Structuring RFP sections by decision criteria
- Writing questions that reveal implementation risk
- Avoiding ambiguous language in solicitation documents
- Incorporating scenario-based response requirements
- Balancing comprehensiveness with vendor effort
- Setting clear expectations for response format
- Designing for automated parsing and comparison
- Including proof-of-concept evaluation triggers
- Aligning RFP content with risk tiering
- Integrating sustainability and ethics requirements
- Planning for post-submission clarification rounds
- Assigning weights based on business impact
- Creating rubrics for qualitative responses
- Normalizing scores across evaluation teams
- Documenting rationale for scoring adjustments
- Using threshold gates to filter non-compliant bids
- Calculating composite scores with error checks
- Incorporating risk-adjusted scoring factors
- Validating scoring consistency across categories
- Training evaluators on calibration techniques
- Building audit trails for scoring decisions
- Handling tied scores with tiebreaker criteria
- Archiving scoring outputs for future reference
- Defining stage gate checkpoints for vendor onboarding
- Mapping stakeholder responsibilities by review phase
- Creating standardized feedback templates for reviewers
- Setting time-bound response expectations
- Consolidating input without losing context
- Resolving conflicting recommendations
- Escalating high-risk findings to leadership
- Tracking open items to closure
- Integrating contract review timelines
- Documenting exceptions and mitigation plans
- Maintaining version control of review artifacts
- Measuring reviewer participation and timeliness
- Defining criteria for high medium and low risk tiers
- Assessing data sensitivity handled by vendors
- Evaluating criticality of vendor-supported functions
- Incorporating geographic and regulatory exposure
- Using financial health indicators in tiering
- Applying cybersecurity maturity benchmarks
- Documenting rationale for assigned risk levels
- Reviewing tier assignments after major events
- Aligning due diligence depth to risk tier
- Automating tier re-evaluation triggers
- Communicating tier implications to stakeholders
- Maintaining a centralized risk tier register
- Designing risk-specific questionnaire modules
- Verifying third-party audit reports
- Conducting on-site assessment checklists
- Reviewing subcontractor management practices
- Evaluating incident response readiness
- Assessing business continuity planning
- Validating insurance coverage adequacy
- Checking compliance with industry standards
- Monitoring public records for red flags
- Tracking remediation of past findings
- Scheduling follow-ups based on risk triggers
- Documenting due diligence completion status
- Identifying key risk indicators for vendors
- Setting up news and sanctions screening alerts
- Integrating financial health monitoring services
- Tracking cybersecurity rating changes
- Monitoring contract milestone adherence
- Capturing service level agreement violations
- Logging security incident disclosures
- Recording stakeholder satisfaction feedback
- Updating risk profiles with new findings
- Establishing thresholds for re-evaluation
- Generating automated risk summary reports
- Assigning ownership for monitoring tasks
- Mapping contractual terms to risk obligations
- Tracking renewal and termination notice periods
- Monitoring compliance with audit rights
- Enforcing data handling requirements
- Verifying adherence to pricing agreements
- Managing change control processes
- Documenting contract amendments systematically
- Linking SLAs to performance reviews
- Scheduling contract health check meetings
- Identifying opportunities for renegotiation
- Archiving executed contract versions
- Training stakeholders on contract terms
- Defining KPIs by vendor and service type
- Collecting operational and quality metrics
- Incorporating stakeholder satisfaction scores
- Conducting structured quarterly business reviews
- Documenting performance improvement plans
- Tracking resolution of open issues
- Evaluating innovation and value-add contributions
- Assessing responsiveness to change requests
- Benchmarking against industry peers
- Linking performance to contract incentives
- Reporting trends to executive leadership
- Archiving review outcomes for continuity
- Mapping required onboarding activities by risk tier
- Creating checklist templates for implementation
- Assigning responsibilities across teams
- Tracking completion of security assessments
- Validating banking and tax documentation
- Setting up access provisioning approvals
- Confirming training completion records
- Integrating with master data management
- Scheduling kickoff and alignment meetings
- Managing dependencies with internal teams
- Documenting handover to business units
- Measuring onboarding cycle time
- Structuring fields for risk categorization
- Integrating risk scoring with tiering
- Linking to due diligence evidence
- Tracking open findings and remediation dates
- Incorporating risk owner assignments
- Displaying risk trend over time
- Generating risk heat maps by category
- Integrating with enterprise risk management
- Updating registers after major incidents
- Producing executive summary views
- Ensuring data accuracy through audits
- Archiving historical risk data
- Articulating the case for modernization
- Identifying change champions across functions
- Communicating updates to vendor partners
- Measuring adoption of new processes
- Gathering feedback from procurement teams
- Adjusting workflows based on pain points
- Documenting lessons from pilot initiatives
- Scaling improvements across categories
- Integrating feedback into future planning
- Reporting progress to executive sponsors
- Maintaining momentum after rollout
- Revisiting maturity annually
Frequently asked
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
Thousands of organisations have bought from The Art of Service since 2000.