Vendor Risk Ranking
Roll every vendor-level signal into one aggregated risk score per vendor.
- General ledger alone
What it checks
- Each module contributes a weighted partial score.
- Contributions drawn from the same underlying invoices are capped, not added.
- Total 0-100, banded Low 0-32 / Medium 33-66 / High 67-100.
- The cut points are a prioritisation convention, not calibrated probabilities.
How the result is read
Vendors flagged by two or more *independent* modules are the fraud-relevant population, and independence is the word that carries the weight. One supplier with two invoices can appear in duplicate detection, the split-transaction clusters and the RSF, all from the same two documents — summing those multiplies one piece of evidence into three. So the score is built from distinct evidence, not distinct modules.
The worksheet, on the demo engagement
Vendor Risk Ranking, as the application draws it for Harrow Precision Engineering Ltd, the fictional demo engagement — one row per vendor identity.
Bars in severity order, High to Low. The cut points are the ones the journal risk score uses, so a tier means one thing across the workbook.
- Vendors scored
- 184
- High-risk (60+)
- 3
- Top score
- Orion 91
- Aggregated exposure
- 9,580
Aggregated vendor risk. Cross-module signals roll up per Vendor_Customer_ID into a single 0-100 score.
Result grid6 rows
| Vendor | Concentr. | SoD | IBAN change | No PO/GR | Duplicates |
|---|---|---|---|---|---|
| Orion Supplies | +18 new+>10% | +22 | +15 | +12 | — |
| Summit Tools | — | +12 | — | — | — |
| Cedar Office | — | +10 | — | — | — |
| Global Parts | +12 >10% | — | — | — | +14 |
| Meridian Logistics | +10 >10% | — | — | — | +10 |
| Director Holdings LLC | — | — | — | — | — |
In the application
Vendor Risk Ranking is filed under Purchases & payables, index letter D. "Run all analyses" runs it with every other analysis the ledger can answer. The worksheet states the population it tested on its face — or "Not applicable" with the reason when a column it depends on is empty — and the Excel workbook the engagement exports files it under D, beside an index of the source files with their SHA-256 fingerprints.
Read it with
Run your next audit file test without the Excel crash.
One free engagement to evaluate, valid 60 days. The ledger never leaves the machine.
- 20 minutes
- Runs on a fictional engagement
- No client data required