Please find the PDF attached
Vendor Questionaire.pdf (178.0 KB)
The PDF was useful. Could you please comment or answer to the following questions:
Thank you in advance,
Kristina
Do you perhaps have a Vendor Qualification Questionaire for auditing of a company developing software for example a Process Automation system?
Thanks.
Victor
First, recognize that âVendor Qualification Questionnairesâ are not suitable for auditing a prospective company. They are only filters to ensure they meet your basic requirements.
Regardless, youâll want to know if they have an established Software Development Life Cycle (SDLC) in place. If not, then theyâre probably just a âgarage shop.â Even though itâs target is for medical device software, you could tailor a checklist based on IEC62304 to let them define their processes. Key aspects would include software configuration management and change control.
Another consideration is their experience on the target platform / environment. For example, a web site development shop may have software engineers that could do process control systems but if thatâs not their âcoreâ business, the software may not be properly architected. Further, even if process controls is a core capability, if they have no experience on the target hardware, there could be some nuances in operations that could become problematic.
Since this is in the context of life sciences, youâd be wise to pick a supplier that has done software in the industry before. There are specific Qualification requirements that will need to be met. If they (or you) donât understand those requirements, you could easily end up with audit findings or regulatory sanctions.
If you have no internal expertise about the whole software development process, youâll want to partner with a company that can guide you through the process. Youâll want to emphasize collaboration rather than just throwing the requirements over the wall and waiting until they churn out a system.
While itâs probably outside the scope of your question, youâll want to ensure that you always have control (physical ownership) of the software and related artifacts (design docs, etc.). This is often accomplished by having them send you baseline snapshots of the source code and documents. Make that explicitly clear when you start into contract negotiations.
I tried to open the attached PDF, but can not.May be it is closed?