Supplier evaluations may be reduced when the supplier demonstrates an effective software quality management system. A proven quality management system gives objective confidence that the supplier has defined processes, controls, audits, corrective actions, configuration management, testing, documentation, and management oversight. Contract requirements are important, but they do not prove the supplier can consistently meet them. Agreeing to correct defects is reactive and does not reduce the need to evaluate capability. Internal audit results showing “no problems found” may be useful evidence, but they are not enough by themselves unless the overall quality system is effective and credible. Software quality engineering uses supplier capability and process maturity as important factors in determining evaluation depth and oversight effort.

================