18Forensic Analysis of Supplier Control

Companies that make things or that provide services for sale invariably require supplies from sources external to themselves. A manufacturer of metal cabinets may purchase sheet metal from a steel manufacturer; a shoemaker purchases leather; a baker purchases flour; and a bank purchases forms and other kinds of software. Sometimes external services, too, are purchased, financial services, for example. The external sources are called by a number of names, among them “suppliers,” “vendors,” or “subcontractors.” All of these names are used here and there in this book, but for brevity in this chapter, we shall call an external source a supplier, in keeping with ISO 9000 (ANSI/ISO/ASQ, 2005), which defines a supplier as an entity that provides a product or service to an organization.

Good business practice requires that a company verify and validate the quality of supplied resources ...

Get Forensic Systems Engineering now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.