TechKnowSurge
NIST CSF GV.SC-06 NIST 800-53 SR-6 NIST 800-53 SA-4 CompTIA Security+ 5.3 NIST CSF GV.SC-05 NIST NICE S0797 NIST NICE K0650
TechKnowSurge Catalog Videos Vendor Selection
VideoSecurityFree

Vendor Selection

Vendor selection and negotiation are overlapping processes that follow supplier assessment, culminating in a formal agreement and contract. A thorough assessment makes choosing the right vendor more straightforward and strengthens negotiating position.

⚑ Complete this video to capture a CTF flag worth 1 point.

About this video

Vendor selection and negotiation are not strictly sequential steps — they overlap significantly and often happen in parallel following a completed vendor assessment. Organizations frequently enter negotiations with more than one candidate vendor, using competing offers as leverage to secure better pricing or more favorable terms. Conversely, if negotiations with a preferred vendor break down and agreement cannot be reached, the process may require shifting focus to an alternative selection. The fluidity between these two phases is a normal part of supplier management, not a deviation from it. A thorough and well-documented vendor assessment is one of the most effective tools for strengthening a negotiating position. When requirements are clearly defined and vendor capabilities have been rigorously evaluated, the right choice often becomes self-evident, and negotiations proceed with greater confidence and clarity. Vendors themselves may respond to a detailed, well-prepared buyer by offering more competitive terms proactively. Once an agreement is reached and both parties are aligned, the relationship moves into the contracting phase, where all negotiated terms are formalized in writing to provide a legally documented foundation for the engagement.

What you'll learn

What's covered

Vendor Selection & Negotiation

Aligned to

NIST CSF
GV.SC-06 Planning and due diligence are performed to reduce risks before entering into formal supplier or other third-party relationships.
GV.SC-05 Requirements to address cybersecurity risks in supply chains are established, prioritized, and integrated into contracts and other types of agreements with suppliers and other relevant third parties.
NIST 800-53
SR-6 Supplier Assessments and Reviews
SA-4 Acquisition Process
CompTIA Security+
5.3 Explain the processes associated with third-party risk assessment and management.
NIST NICE
S0797 Skill in negotiating vendor agreements.
K0650 Knowledge of supplier assessment criteria.

Key terms

Vendor Assessment
The evaluation of potential vendors to determine whether they can meet an organization's defined requirements.
Vendor Selection
The process of choosing one or more vendors to proceed with based on assessment results and business requirements.
Contract Negotiation
The process of reaching a mutually agreed upon set of terms and conditions with a vendor before formalizing a business relationship in writing.
Vendor Management Lifecycle
The end-to-end process of assessing, selecting, negotiating with, and managing vendors throughout a business relationship.

Topics

Vendor Management Vendor Selection Contract Negotiation Supplier Assessment Third Party Risk Management Procurement

Transcript

Once we've assessed our different vendors and their supply chains, it's time for the next step: selecting a vendor and starting negotiation.

Where Vendor Selection Happens

Vendor selection happens somewhere between vendor assessment and negotiating. The reason why I'm not being real specific on where we do vendor selection is because of a few reasons.

Number one, we may select several vendors to go into negotiation with. We can pit them against each other. We can say, well, if you don't drive your price down to this certain level, I'm going to go with this other vendor. So we can do some negotiation; that can be part of the negotiation.

Another thing that can happen is that during the negotiation process we don't come to terms. We don't have the same level of agreement, and we realize we're going to have to go with one of our other selections. So there's kind of this process that happens where a lot of stuff happens all at the same time.

If we've done a proper vendor assessment, it could be really clear what the right vendor to select is — that it's very obvious, based off of the requirements that we have, what the number one choice is that we'd make. In which case it'd be pretty easy to know what to choose and go to the next level with.

Negotiation

Then it's time for negotiation, and there's a lot that can go into the negotiation process. This course is really not designed to go over how to negotiate, but I can tell you that just by gaining information and fully understanding what your choice is and what the value is, it's going to make negotiating a lot easier and just natural. Just by going through this process, they may even start cutting the deal, like the price of this, down, based off of how inquisitive you are and how detailed you are through this whole process.

Reaching an Agreement

At some point in time we've reached an agreement. At this point in time we're ready to do business. We've selected our vendor and we're ready to move forward. That doesn't mean that we can't back out at this point in time, but it does mean that we're ready for the actual paperwork to back everything up that we've agreed upon.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →