VAL007 Computer System Vendor Qualification and Management (RiskVal^SM)

This procedure presents criteria for qualifying vendors based on the risk level associated with failure of their product. The qualification process and requirements become increasingly more stringent for low-, moderate- and high-risk products. Criteria are given for low-, moderate-, and high-risk system software, application software, computer hardware, support services, software development, and integration services. This approach enables you to spend less time and effort on lower risk systems and to be more thorough in assessing vendors of high-risk products.

This procedure is part of the RiskVal Life Cycle.^(SM) series of computer system validation documentation. It corresponds to the process of qualifying vendors described in chapter 5, "Phase 3: Select Vendors and Systems" in Computer System Risk Management and Validation Life Cycle written by the author of this procedure, Tim Stein, and published by Paton Press, 2006.