Vendors Visiting Sites


Can anyone tell me if it’s common practice to ask a software vendor to sign a form before they are allowed on site to state that they are not allowed to change any software on site without going through the appropriate change control procedures.

If so, it is possible I could see some examples of this?



Why not just use your own SOP’s and the training you do on site for your SOP’s? If you train them on your site change control procedure and they do not follow it would lead me to ask why do you even have them on site? There are plenty of vendors and or system integrators out there that can follow your procedures.