Hi guys, I am really stuck on this part of the program and the program I wrote seems to be conflicted and I have encountered many issues. For example, I calculate the overall supplier risk based on criteria-based risk assessment. Our main supplier is a distributor and almost all the products have different manufacturers. When I assign risks for each material (which comes from the same supplier), I then have too many different "overall supplier risks" (low/med/high) from literally the same supplier and my monitoring method & frequency are based on the supplier risk. It is impossible to have different monitoring procedure for each material which come from the same supplier but with different manufacturers which would lead to different risks and different monitoring frequency and requirements because that would make the whole receiving and monitoring way too complicated.
Also, once in a while, my company would buy new ingredient from the "approved supplier" using a form called "new inventory item policy" (written by someone else in the past) but it doesn't even includes any food safety screening of the distributor/manufacturer, they are only asking for documents like the specifications and kosher cert to be approved, I am thinking of making the approved supplier to do a self-assessment like completing the Supplier Questionnaire when buying and approving a new item.
What should I do guys to fix this and make it all works and make sense as a program? I have spent way too much time on this part and my boss has been putting pressure on me but I am pretty much a one man army at this small company. I would appreciate if anyone could help me clear out this confusion.