95 lines
No EOL
5.5 KiB
Text
95 lines
No EOL
5.5 KiB
Text
Business Process: Supplier Compliance Check
|
|
|
|
START
|
|
|
|
|
|- [Task: 2000] New Supplier Registration Submitted
|
|
| Team: Procurement
|
|
| Description:
|
|
| A new supplier has submitted their registration data via the portal. Initial data quality check is required.
|
|
| |-- [Event: 10] Data Complete (Registration data appears complete) --> [Task: 2100] Initial Risk Screening
|
|
| |-- [Event: 20] Data Incomplete (Critical data missing) --> [Task: 2900] Request Completion
|
|
| |-- [Event: 30] Reject (Clearly non-compliant or irrelevant supplier) --> [Task: 2990] Registration Rejected
|
|
|
|
|
|- [Task: 2100] Initial Risk Screening
|
|
| Team: Compliance
|
|
| Description:
|
|
| Automated and manual screening for country sanctions, PEP lists, and basic financial health. Determine risk category (Low/Medium/High).
|
|
| |-- [Event: 10] Low Risk (Passed automated checks, non-critical industry) --> [Task: 2200] Document Collection
|
|
| |-- [Event: 20] Medium Risk (Flagged in partial checks or medium-risk industry) --> [Task: 2250] Enhanced Due Diligence
|
|
| |-- [Event: 30] High Risk (Sanction flag, high-risk country, critical industry) --> [Task: 2400] Compliance Committee Review
|
|
|
|
|
|- [Task: 2200] Document Collection
|
|
| Team: Supplier Master Data
|
|
| Description:
|
|
| Request and collect mandatory compliance documents (e.g., ISO certificates, business license, tax registration, bank details).
|
|
| |-- [Event: 10] All Documents Received (Documents uploaded by supplier) --> [Task: 2300] Document Verification
|
|
| |-- [Event: 20] Reminder Sent (Supplier did not provide all documents) --> [Task: 2200] Document Collection
|
|
| |-- [Event: 30] Non-Responsive (Supplier did not react within timeframe) --> [Task: 2990] Registration Rejected
|
|
|
|
|
|- [Task: 2250] Enhanced Due Diligence
|
|
| Team: Compliance
|
|
| Description:
|
|
| Conduct in-depth background checks, request additional financial statements, and assess sustainability practices.
|
|
| |-- [Event: 10] Due Diligence Passed (Assessment positive) --> [Task: 2200] Document Collection
|
|
| |-- [Event: 20] Due Diligence Concerns (Unclear findings or minor issues) --> [Task: 2400] Compliance Committee Review
|
|
| |-- [Event: 30] Due Diligence Failed (Critical issues found) --> [Task: 2990] Registration Rejected
|
|
|
|
|
|- [Task: 2300] Document Verification
|
|
| Team: Quality & Compliance
|
|
| Description:
|
|
| Validate authenticity and expiry dates of submitted documents. Check for consistency with registration data.
|
|
| |-- [Event: 10] Verified & Valid (All documents are valid and authentic) --> [Task: 2500] Final Approval
|
|
| |-- [Event: 20] Document Invalid (Forgery or major discrepancy found) --> [Task: 2990] Registration Rejected
|
|
| |-- [Event: 30] Update Required (Document expired or needs clarification) --> [Task: 2900] Request Completion
|
|
|
|
|
|- [Task: 2400] Compliance Committee Review
|
|
| Team: Compliance Committee
|
|
| Description:
|
|
| Formal review meeting for medium/high-risk suppliers or cases with due diligence concerns. Final risk assessment and decision.
|
|
| |-- [Event: 10] Approved (Committee grants approval, possibly with conditions) --> [Task: 2200] Document Collection
|
|
| |-- [Event: 20] Approved with Conditions (Specific actions required from supplier) --> [Task: 2450] Monitor Conditions
|
|
| |-- [Event: 30] Rejected (Committee rejects the supplier registration) --> [Task: 2990] Registration Rejected
|
|
|
|
|
|- [Task: 2450] Monitor Conditions
|
|
| Team: Compliance
|
|
| Description:
|
|
| Track and verify that the supplier fulfills the conditions set by the Compliance Committee (e.g., audit, implementation of a code of conduct).
|
|
| |-- [Event: 10] Conditions Met (Supplier fulfilled all requirements) --> [Task: 2500] Final Approval
|
|
| |-- [Event: 20] Conditions Not Met (Supplier failed to meet requirements in time) --> [Task: 2990] Registration Rejected
|
|
|
|
|
|- [Task: 2500] Final Approval
|
|
| Team: Procurement Lead
|
|
| Description:
|
|
| Final activation of the supplier in the master data system. Supplier receives compliant status and is eligible for contracts.
|
|
| |-- [Event: 10] Activate Supplier (Supplier activated in system) --> [Task: 2800] Supplier Active
|
|
|
|
|
|- [Task: 2800] Supplier Active
|
|
| Team: System
|
|
| Description:
|
|
| Supplier is approved and active. Process is completed. Periodic re-screening will be triggered automatically.
|
|
| |-- [Event: 10] Add Comment (Notes for master data) --> [Task: 2800] Supplier Active
|
|
|
|
|
|- [Task: 2900] Request Completion
|
|
| Team: Supplier Master Data
|
|
| Description:
|
|
| Request missing or updated information/documents from the supplier. Set a deadline for response.
|
|
| |-- [Event: 10] Information Provided (Supplier submits requested data) --> [Task: 2100] Initial Risk Screening
|
|
| |-- [Event: 20] Reminder Sent --> [Task: 2900] Request Completion
|
|
| |-- [Event: 30] No Response (Deadline passed) --> [Task: 2990] Registration Rejected
|
|
|
|
|
|- [Task: 2990] Registration Rejected
|
|
| Team: Procurement
|
|
| Description:
|
|
| Supplier registration has been rejected due to non-compliance, incomplete data, or failed checks. Supplier is informed.
|
|
| |-- [Event: 10] Archive Record (Process data archived) --> [Task: 2999] Closed
|
|
| |-- [Event: 20] Appeal Received (Supplier files an appeal) --> [Task: 2400] Compliance Committee Review
|
|
|
|
|
|- [Task: 2999] Closed
|
|
| Team: System
|
|
| Description:
|
|
| The compliance check process for this supplier is closed (either active or rejected).
|
|
|
|
|
END
|
|
|
|
|
|- [Task: 2999] Closed
|
|
| |