Administrative Process Checklist: New Vendor Onboarding

Fictitious Company: Stratos Logistics (Global Freight & Supply Chain Management)

Process Description: The end-to-end administrative workflow for vetting, registering, and activating a new third-party service provider in the corporate procurement system.

1. Checklist

• [ ] Initial Screening: Business case approved and initial conflict of interest check performed.
• [ ] Documentation Collection: All legal and tax certificates received from the vendor.
• [ ] Risk Assessment: Security and compliance vetting completed by the Legal team.
• [ ] System Entry: Vendor profile created in the Stratos-ERP system.
• [ ] Contract Execution: Signed Master Service Agreement (MSA) uploaded and archived.
• [ ] Activation: Financial “Green-light” given for first invoice processing.

2. Steps

1. Request & Approval: The department head submits a “Vendor Request Form” detailing the service need and budget allocation.
2. The “Welcome Pack”: Send the digital onboarding folder to the vendor, containing the NDA, Tax W-9/ID forms, and the Code of Conduct.
3. Compliance Review: The Compliance team runs the vendor through the “Watchlist Scraper” to ensure no regulatory red flags.
4. Data Entry (The “Nexus” Step): Manually enter the vendor’s banking details and contact information into the ERP.
5. MSA Signature: Send the final contract via e-signature platform.
6. Internal Notification: Notify the Accounts Payable (AP) and the requesting department that the vendor is now “Active.”

3. Validation Points

4. Risks

• Payment Fraud: If banking details are taken via email rather than the secure Stratos-Portal, they are susceptible to “man-in-the-middle” attacks. Mitigation: Mandatory phone verification for all bank changes.
• Compliance Lag: The process can stall for weeks in the Legal review phase. Mitigation: Implementation of a “Fast-Track” for low-risk, small-value vendors.
• Data Errors: Typos in the ERP can lead to misdirected payments or tax filing failures. Mitigation: “Four-Eyes” rule (One person enters the data, a second person approves it).

5. Improvements

• Self-Service Portal: Move away from “Welcome Pack” emails to a vendor-facing portal where they upload their own documents directly.
• Automated Vetting: Integrate the Stratos-ERP with an API-based compliance tool to perform real-time background checks upon submission.
• Digital Archiving: Automatically push signed MSAs from the e-signature platform directly into the Aero-Intel Hub (Knowledge Base).