Procurement & Vendor Risk — User Guide

Case 03 · Procurement

What decision does this actually settle?

Veridian BioSystems is a fictional $640M medical-device manufacturer sourcing regulated components, lab services, software and facilities from 100 vendors tracked across six spreadsheets. A renewal date sits on a calendar; the earlier non-renewal notice window that actually decides your leverage sits on page 17 of a master agreement. The model doesn't negotiate. It finds the last date a counteroffer would still work, checks a new quote against the signed baseline, and drafts what a buyer would send.

Who uses itProcurement leads, category managers, third-party risk analysts

WhenContinuously — leverage windows close on their own schedule, not a quarterly review

Playbook versionThird-Party Playbook — v2026.3

Quick start

From a scored portfolio to a negotiation draft

Read the case brief first

Day 120 (the notice window opens invisibly), day 64 (the new quote becomes the baseline), day 18 (evidence expires) — the vendor list below is scored against that same clock.

Run a fresh scan

Rescans all 100 vendors for renewal timing, price drift, and expiring compliance evidence (SOC 2, ISO, insurance).

Filter by risk tier

All / Critical / Watch / Clear, plus a direct "Renewal ≤ 90d" filter for the vendors whose leverage window is closing soonest.

Open a vendor, e.g. Helix Cloud Systems MSA-492

Shows the signed baseline, the new quote, and exactly where they diverge — this is where the 7.4% quote-vs-3%-cap gap in the case brief gets caught.

Preview the counteroffer, then mark it reviewed

The draft is buyer-approved language, not a sent email. A buyer still has to send it — the model stops one step short on purpose.

Screen map

What each part of the workbench is for

Area	What it shows	Where the decision happens
Matrix panel	All 100 vendors scored by risk tier and days to notice deadline.	Pick which vendor to open — the ≤90-day filter is where urgency actually lives.
Detail panel	Signed baseline vs. new quote, expiring evidence, and the drafted counteroffer.	Preview counteroffer / mark reviewed — a buyer decides whether it goes out.
Download risk brief / draft	Exports the scored portfolio or a single counteroffer.	Take the brief into a procurement review; take the draft to the buyer who owns the relationship.

Reading the output

Three numbers, in order of usefulness

Metric	What it means	What to do about it
Uncontrolled annual exposure	$1.60M across the portfolio — the cost of price drift and lapsed evidence nobody caught in time.	Sort by risk tier; the Critical vendors are where this number actually lives.
Addressable spend	$72.0M across 100 active vendors — the base the exposure is measured against.	Use it to size which categories are worth a formal sourcing event versus a one-off counteroffer.
Days to notice deadline	The actual leverage window — always earlier than the renewal date itself.	Anything under 90 days needs a buyer's attention this week, not this quarter.

Use cases

Three questions this actually settles

"A 90-day non-renewal deadline is buried on page 17 of a master agreement. Did we already miss it?"

The model reads the clause out of the contract itself and surfaces the notice date separately from the renewal date — the two are rarely the same.

"A supplier's renewal quote is 7.4% higher. Is that inside or outside what we agreed to?"

Open the vendor and compare the quote against the signed 3% cap and the prior AP history side by side, instead of trusting the supplier's framing.

"SOC 2 and insurance certificates are expiring while a questionnaire circulates. Which vendors does that actually put at risk?"

Filter to Critical or Watch — a vendor can look green in an operations dashboard and still be unsupported on the compliance side.

Pitfalls

Where this breaks if you push it too far

The risk score is built from the terms on file. A vendor whose actual contract was renegotiated informally, off-document, will score wrong until the paper catches up.

A drafted counteroffer is not a negotiation strategy. It reflects the playbook position, not what a specific buyer relationship can actually bear.

Inputs & outputs

What goes in, what comes out

	Detail
Input	A pre-loaded illustrative portfolio of 100 vendors across NJ, NC, and MN — no email is sent.
Agent output	Credential timing, price comparison against the baseline, a counteroffer draft.
Stays with a person	Supplier outreach, contract amendment, purchase commitment.