We are a supplier of Self Adhesive Label with Basic level BRC accreditation.
The supplier approval process has previously been produced by another colleague (who has now left the company) and I with my limited experience have been given the task of updating it.
At the moment there is no risk analysis, just a big list, everyone gets a Self Assessment Questionnaire at the start and a new one fill out again every year.
In the proposed update, our supplier list that will now be risk assessed into a "high" and "low" risk category
The "high" risk will get an assessment questionnaire at the start and possibly an audit.
For the low risk suppliers such as Stationery and First Aid Supplies etc they would not get a questionnaire.
And as for re-assessment, for the "high" risk if you are monitoring the supplier and they are not having any non conformances do you need to re-send the questionnaire every year? Or can you say if a supplier gets 3 NCR's they get an Audit and then act on its results?
And "low" risk has a new risk assessment very 3 years is this ok?
Would this update comply with issue 5 criterion
All comments are welcomed.