How do you calculate a supplier scorecard risk score?

Multiply the three ratings: severity x occurrence x detection. With severity 6, occurrence 4, and detection 3 you get 6 x 4 x 3 = 72 on a 1-1000 scale. Keep the identical 1-10 scale across every supplier so scores are comparable.

What is a good supplier RPN threshold?

There is no universal cutoff, but many quality teams flag any RPN above 100 for mandatory action, and any severity of 9-10 for action regardless of the total. Set your own escalation band from your data and hold it constant across the supply base.

Why multiply instead of add the three ratings?

Multiplication makes a single extreme dimension dominate, which is what you want: a defect that is severe, frequent, and undetectable should score far higher than three middling ratings. Adding would flatten those differences.

Should severity ever override the RPN?

Yes. A severity of 9 or 10 signals a safety or regulatory failure and should trigger action even if occurrence and detection are low, because low likelihood does not make a catastrophic escape acceptable.

How is a supplier scorecard risk score different from PPM?

PPM measures realized defects that already shipped; the RPN is forward-looking risk that also weights how severe and how detectable a failure would be. Use PPM to grade past performance and RPN to prioritize prevention.

How often should I re-score suppliers?

Re-score after any significant nonconformance, a process change at the supplier, or at each formal business review - typically quarterly - so the ranking reflects current risk rather than a one-time snapshot.

Supplier Quality, Development & Audits calculator

Supplier Scorecard Calculator

A supplier scorecard risk score is a Risk Priority Number (RPN) that combines how bad a supplier-caused failure would be (severity), how often it is likely to occur (occurrence), and how hard it is to catch before it reaches your line (detection). Supplier quality engineers and SQEs use it to rank incoming-material risks across a supply base on one common scale, so audit time and containment effort go where they matter most. It is the same logic as a process FMEA, applied to supplier performance instead of an internal process step. Because it multiplies three ratings, a single high dimension - say a safety-critical defect that stays invisible until final assembly - correctly dominates the score.

What this calculator does

Estimate supplier scorecard for supplier quality, development and audits using production-ready inputs so teams can rank risks and decide which issue needs containment, controls, or escalation first.
Use it when supplier scorecard in supplier quality, development and audits needs a defensible ranking against other supplier quality, development and audits risks for the next review.
It multiplies a supplier failure's severity, occurrence, and detection ratings into a single risk priority number for one scorecard line item.

Formula used

Supplier scorecard risk score = supplier scorecard severity score × supplier scorecard occurrence score × supplier scorecard detection score
Use the same scoring scale across comparable supplier scorecard risks.

Inputs explained

Failure severity rating (1-10):
Defect occurrence likelihood (1-10):
Detection difficulty rating (1-10):

How to use the result

Use it when triaging supplier nonconformances, deciding which suppliers earn a development audit, or building the quality-risk section of a weighted supplier scorecard.
RPN is ordinal, not linear - a score of 120 is not literally twice as risky as 60, and identical products can come from very different rating combinations, so always inspect the underlying severity, occurrence, and detection values.

Current U.S. benchmarks

U.S. manufacturing runs at 75.6% of capacity (Federal Reserve, May 2026). New factory orders are up 2.3% year over year (Census).

Common questions

How do you calculate a supplier scorecard risk score? Multiply the three ratings: severity x occurrence x detection. With severity 6, occurrence 4, and detection 3 you get 6 x 4 x 3 = 72 on a 1-1000 scale. Keep the identical 1-10 scale across every supplier so scores are comparable.
What is a good supplier RPN threshold? There is no universal cutoff, but many quality teams flag any RPN above 100 for mandatory action, and any severity of 9-10 for action regardless of the total. Set your own escalation band from your data and hold it constant across the supply base.
Why multiply instead of add the three ratings? Multiplication makes a single extreme dimension dominate, which is what you want: a defect that is severe, frequent, and undetectable should score far higher than three middling ratings. Adding would flatten those differences.
Should severity ever override the RPN? Yes. A severity of 9 or 10 signals a safety or regulatory failure and should trigger action even if occurrence and detection are low, because low likelihood does not make a catastrophic escape acceptable.
How is a supplier scorecard risk score different from PPM? PPM measures realized defects that already shipped; the RPN is forward-looking risk that also weights how severe and how detectable a failure would be. Use PPM to grade past performance and RPN to prioritize prevention.

Last reviewed 2026-05-12.