Vendor management challenges, written up for large organisations, are about governance, cross-functional alignment and data quality. In a small business they are four much more concrete things, and each one has a cheap fix that is not done because nobody has named the problem. Naming them is most of the work; three of the four are solved with a spreadsheet and an afternoon.
There is no list, so nothing else can start
Diligence, consolidation, renewal management and performance review all operate on a list of suppliers. A business that cannot say who its suppliers are cannot do any of them, which is why vendor programmes that start with a policy stall immediately. Export twelve months of payees, dedupe, add owner and category and status. That is the unlock.
Diligence is one size, so it is abandoned
A single checklist applied to every supplier is either too heavy to sustain or too light to be worth doing. Size it instead: a baseline for everybody, plus points for data access, site access, single-sourcing and spend. The worked example lands on ten checks for a data-handling, single-sourced supplier and three for a trivial one.
Dates exist but nobody owns them
Renewal dates and certificate expiries are usually recorded somewhere. What is missing is a person attached to each one and an alert that reaches them before the notice window opens. A tracked date with no owner expires exactly on schedule, and the suppliers this happens to are always the boring ones nobody thought needed an owner.
Review has no forcing event, so it never happens
Onboarding gets done because it blocks payment. Review blocks nothing, so it is skipped every year with no visible consequence until a renewal or an incident forces it. The fix is to attach review to something that does force: the contract alert date, or a spend threshold being crossed.
Questions people ask about vendor management challenges
What is the most common vendor management failure?
Renewing a contract nobody decided to renew, because the notice date was in a PDF in a folder rather than against the vendor with an owner attached to it.
Where should a business with no vendor programme start?
The list, from a twelve-month payee export, with owner, category and status added. Everything else depends on it and none of it can start without it.
Do we need a policy first?
No. A policy written before the list exists describes work nobody can do. Build the list, run one round of sized diligence, then write down what you actually did; that is a policy people follow.