Defence contracts make you accountable for the suppliers you use. WHG runs supplier assurance for you – risk assessment, due diligence, onboarding, audits and monitoring – so every tier meets the cyber, quality, security and ethical requirements your contract flows down.
A single, evidence-led process from first contact to contract exit – proportionate to each supplier’s risk.
Tier suppliers by criticality and exposure.
Verify who they are and what they hold.
Flow down requirements; capture evidence.
Risk-based second-party audits.
Independent check of your own controls.
Performance, expiries and obligations.
We assess every supplier against the risks that matter in defence and set the level of control accordingly.
Output: a supplier risk register and tiering model that sets the assurance each supplier needs.
Evidence-based checks before you commit – and repeated at a frequency set by risk.
Output: a risk-rated supplier profile with a clear go / no-go recommendation and any conditions.
Your contract obligations, passed down clearly and acknowledged before work starts.
Output: an approved supplier with signed terms and a complete baseline compliance pack.
Independent second-party audits on site or remotely, scheduled by risk rather than habit.
Output: audit reports, a tracked corrective action log and an executive summary for your board or customer.
Internal audit is where most compliance gaps are found – or missed. Our lead auditors run your internal audit programme independently, so you get an honest view before your customer or certification body does.
Independence: our auditors never audit work they were responsible for, and we keep consultancy and certification activity strictly separate.
Assurance doesn’t end at approval. We keep your supply chain under control for the life of the contract.
Set up or overhaul your supplier assurance process.
We run it for you, month in, month out.
Extra qualified auditors when you need them.
Yes. We can operate within your supplier portal, ERP or quality system, or provide simple, structured trackers if you don’t have one.
Yes. Controls are sized to supplier risk and contract value. A small supply chain gets a small, efficient process that still satisfies your prime.
We typically start with your highest-risk suppliers, so the biggest exposures are covered first, then extend across the rest of the supply chain.
Supplier assurance work is scoped so it can be delivered at OFFICIAL. Where a requirement involves security-cleared personnel, we discuss arrangements directly with you.
Tell us about your suppliers and contract requirements. We’ll propose a proportionate assurance approach and where to start.
