Most companies do not have a vendor problem. They have a vendor management problem: too many suppliers, contracts nobody has read since signing, invoices that never get checked against a service level, and one critical supplier who could take the operation down tomorrow and nobody has a backup.

As COO, this sits squarely with you. Vendor spend is often the second-largest line on the operating budget after payroll, and it is the line with the most slack in it. A clear framework does three things at once: it protects you from the supplier who fails, it holds quality to a standard you can measure, and it recovers real money that is currently leaking through auto-renewals and unmanaged scope.

This guide gives you the system: how to tier your suppliers, run a selection process that avoids expensive mistakes, write contracts and SLAs that actually hold, manage risk on the vendors that matter, score performance so it improves, and cut cost without cutting quality. You do not need all of it in place next week. You need to start with the vendors that could hurt you.

Build the framework: tier before you manage

The single biggest mistake in vendor management is treating a $2,000-a-year stationery supplier with the same rigour as the payroll processor that touches every employee's pay. You cannot manage 300 suppliers to the same depth, and you should not try. Tier them by two questions: how much do we spend, and how badly does it hurt if they fail?

Weak looks like a flat vendor list in a spreadsheet, everyone reviewed once a year (or never), with the loudest supplier getting the most attention rather than the most important one. Strong looks like a short tier definition that decides how much governance each supplier gets, so your team spends its hours where the risk and money actually are. A dedicated Vendor Management Office (VMO) — even a virtual one — makes this stick. It does not need to be a big team. It needs one owner plus standing input from procurement, legal, finance, and the business unit that actually uses the supplier. Their job is to own the selection process, keep the contract repository current, run the reviews, and flag risk before it becomes an incident. Getting the tiering and ownership right is the same discipline as good process optimization: define the standard, then apply it consistently instead of case by case.

Run a selection process that avoids expensive mistakes

Selection is where you either lock in years of good service or years of pain. The goal of an RFP or RFQ is not paperwork — it is to make suppliers compete on the things you actually care about, in a format you can compare side by side.

Start from requirements, not from a shortlist. Write down what "good" means before you talk to anyone: the outcomes, the volumes, the integrations, the compliance needs, the must-haves versus the nice-to-haves. Then send an RFP (for complex services where approach matters) or an RFQ (for defined goods where price is the main variable). Score responses against a weighted matrix agreed before the responses come in, so a slick sales deck cannot move the goalposts.

Due diligence is the part people skip and later regret. Before you sign, check:

• Financial health — can this supplier still be trading in three years? A cheap vendor going under mid-contract is the most expensive kind.
• References you chose, not the ones they gave you — ask their reference customers about failures and how they were handled, not just whether they are happy.
• Security and compliance — data handling, certifications, and where your data physically sits.
• Scalability — can they handle you at double the volume, or will you be re-running this process in 18 months?

A worked example: a mid-market firm replacing its logistics carrier scored four bidders on on-time delivery history, claims rate, integration with the warehouse system, and price — weighted 30/25/25/20. The cheapest bidder came third on the total score because its claims rate was double the field. Choosing on the matrix rather than the sticker price avoided a year of damaged shipments. That is the whole point of scoring before you fall in love with a demo.

Write contracts and SLAs that actually hold

A contract you never look at again is a liability. The version that protects you defines what good performance is, what happens when it is not delivered, and how you get out.

The service level agreement is the heart of it. A weak SLA says the supplier will provide "high-quality service in a timely manner" — unmeasurable, and therefore unenforceable. A strong SLA says "99.5% of orders shipped within 24 hours, measured monthly, with a 5% service credit for each half-point below target." Now a missed target has a consequence you do not have to argue about.

Every contract on a strategic or operational vendor should carry:

• Specific, measurable SLAs tied to service credits or remedies, not vague promises.
• A clear termination clause — including termination for convenience and an exit / data-return plan, so you are never trapped.
• Change management terms so scope creep goes through a defined process rather than showing up on the invoice.
• A dispute-resolution path with named contacts and timelines before anything reaches lawyers.

Keep every signed contract in one repository with renewal dates flagged 90 days out. Auto-renewal is where negotiating leverage quietly dies: the date passes, the contract rolls at last year's rate plus an increase, and you have lost the one moment you had real power. A calendar of renewal dates is one of the highest-return things a VMO produces.

Manage the risk on the vendors that matter

Every material vendor is a dependency, and a dependency you have not planned for is a single point of failure. Risk management is not about eliminating risk — it is about knowing where it sits and having a move ready. Map each strategic vendor against the ways it could fail, and pair each with a concrete mitigation rather than a hope.

The most dangerous risk is concentration, because it feels like efficiency right up until the day it does not. If one supplier handles a function you cannot run without, "we have a great relationship" is not a continuity plan — a tested second source is. This maps directly onto a broader risk assessment framework: identify, rate by likelihood and impact, and put controls on the exposures that would actually stop the business. For the vendors that could halt operations, work the mitigations you would build into any strategic outsourcing decision — exit rights, data portability, and a named alternative — before, not after, you depend on them.

Score performance so it actually improves

What you do not measure, you cannot manage — and what you do not review with the supplier, they will not fix. A vendor scorecard turns a vague sense that "they've slipped lately" into a specific, dated conversation.

Use a balanced scorecard across a handful of dimensions rather than a single number. For most operational vendors that means on-time delivery, quality (defect or error rate), SLA compliance, responsiveness (time to resolve issues), and cost performance. Score them monthly where the data is automatic, review them quarterly with the supplier in the room for strategic vendors, and share the scorecard with them — the point is to drive improvement, not to build a case file.

Weak performance management is an annual "how's it going" call with no data. Strong is a standing quarterly business review where you open the scorecard, walk the trend, agree corrective actions on anything red, and hold the last review's actions to account. Pick metrics that connect to your own operations metrics so a vendor's performance ties to an outcome the business feels — a carrier's on-time rate should map to your own order-fulfilment promise, not sit in a silo.

Cut cost without cutting quality

Cost optimization in vendor management is rarely about beating suppliers down on unit price. The bigger savings come from managing demand and structure. Given how expensive senior attention is — the US Bureau of Labor Statistics put the median chief executive wage at about $206,420 in May 2024 — the return on a COO spending a day on the top three contracts is usually enormous.

The reliable levers:

• Consolidate spend. Buying the same category from six suppliers means six negotiations and zero volume power. Consolidate to two and you gain leverage and lose administrative drag.
• Benchmark before every renewal. A quick market check tells you whether your rate is competitive and gives you a number to negotiate against.
• Eliminate what you are not using. SaaS seats nobody logs into, tiers you never reach, services duplicated across vendors — audit annually and cut.
• Standardise specifications. Custom requirements cost a premium; standard ones let suppliers price efficiently.
• Use payment terms as a lever — early-payment discounts or extended terms, whichever your cash position favours.

Route these into your wider cost optimization strategy so vendor savings are tracked as hard, verified numbers, not claimed ones. A "10% saving" that shows up nowhere in the budget did not happen.

Build relationships that make everything else work

The framework, contracts, and scorecards are the machinery. Relationships are what make the machinery run without a fight every quarter. A supplier who sees you as a valued long-term partner will bring you their best people, warn you early about problems, and offer improvements first. A supplier managed only through pressure will do the contractual minimum and no more.

This does not mean going soft. It means being a professional counterpart: clear expectations, prompt payment, honest feedback, and reviews that are two-way. For strategic vendors, share enough of your own roadmap that they can plan ahead and propose ideas. The best cost and innovation ideas frequently come from suppliers who understand where you are going — but only if you have given them a reason to invest in the relationship. Because vendor decisions shape cost, risk, and capability, keep them visible in your partnership with the CEO rather than treating them as pure back-office plumbing.

Key takeaways

• Tier first. Spend your governance where spend and impact are highest; do not manage every supplier to the same depth.
• Score before you sign. A weighted matrix agreed in advance beats a good sales demo every time — and due diligence on financial health and references prevents the expensive mistakes.
• SLAs must be measurable and have teeth. "High quality service" is unenforceable; "99.5% within 24 hours, with service credits" is.
• Concentration is the risk that hurts most. For anything you cannot run without, have a tested second source, not just a good relationship.
• Review with data, quarterly, in the room. Shared scorecards drive improvement; annual chats do not.
• The biggest savings are structural — consolidation, benchmarking at renewal, and cutting unused spend — not squeezing unit price.

Frequently asked questions

How many vendors should a COO personally manage? Very few directly — realistically the handful of strategic vendors where spend and business impact are highest. The rest should run through a defined framework and a VMO or category owner, with performance surfacing to you by exception. Your time is the constraint; tiering is how you protect it. What is the difference between an RFP and an RFQ? An RFQ (request for quotation) is for well-defined goods or services where price is the main variable and you already know exactly what you need. An RFP (request for proposal) is for complex work where the supplier's approach, capability, and design matter as much as price. Use an RFP when you are buying a solution, an RFQ when you are buying a known quantity. What should be in a vendor SLA? Specific, measurable targets (delivery times, uptime, error rates, response times), the measurement method and period, and a remedy when targets are missed — usually service credits. It should also name who is accountable on each side. If a clause cannot be measured, it is a hope, not a service level. How often should we review vendor performance? Match the cadence to the tier. Strategic vendors warrant a quarterly business review against a shared scorecard; operational vendors twice a year; transactional vendors only a spot-check. Automatic metrics (like on-time delivery) can be tracked monthly regardless, so trends are visible before a review. How do we cut vendor cost without damaging service? Start with structure, not price cuts. Consolidate fragmented spend to gain volume leverage, benchmark rates before every renewal, and eliminate services and seats you are not using. These recover money without touching the quality your operation depends on — unlike blunt price pressure, which suppliers recover by quietly cutting service. What is the most common vendor management mistake? Letting contracts auto-renew unmanaged. The renewal date is your one moment of real negotiating leverage, and it passes silently — the rate rolls forward with an increase and no market check. Flagging every material contract 90 days before renewal is one of the highest-return controls you can put in place.