Suppliers evaluation
Inovar + defines rules for selecting suppliers in accordance with the requirements of its quality and information security policies. Whenever the acquisition of equipment, products or services is necessary, the selection of the most suitable supplier is carried out according to the following criteria, as applicable.
Quality Requirements
1. Quality of service/product/equipment provided:
- as intended (100);
- specific problems/punctual failures(80);
- specific problems/frequent failures (40);
- specific problems/constant failures (0).
2. Quality of technical support:
- actively supports and anticipates problems (100);
- actively supports and solves problems (80);
- solves problems raised (40);
- does not solve or shows great inertia to solve problems (0).
3. Delivery time:
- no delays (100);
- minor delays (80);
- significant delays without repercussions on the final customer (40);
- significant delays with repercussions on the final customer (0).
Information Security Requirements
1. Confidentiality agreement
2. Level of availability:
- above the agreed level (100);
- at the agreed level (80);
- half a percentage point below the agreed level (60);
- one point below the agreed level (40);
- more than one percentage point below the agreed level (0).
3.SLA compliance rate:
- compliance with what was agreed (100);
- 20 points below the agreed level (60);
- more than 20 points below the agreed level (20).
4.Quality of information security:
- no occurrences (100);
- occurrences that did not result in security incidents (80);
- with 1 security incident (60);
- with 1 security incident without corrective actions (40);
- more than 1 security incident (0).
As a result of the evaluation, a category is assigned to the supplier reflecting its degree of compliance with the requirements, corresponding to the average of the applicable criteria, in which:
- A – the supplier meets the agreed requirements (Total assessment equal to or greater than 90);
- B – the supplier presents occasional failures with low impact (Total evaluation equal to or greater than 75, but less than 90);
- C – the supplier presents specific failures that may have a relevant impact (Total assessment equal to or greater than 50, but less than 75);
- D – the supplier presents systematic flaws that could have a relevant impact (Total rating less than 50).
