Source selection analysis

Source selection analysis is a structured technique to evaluate and compare potential sellers using predefined criteria and weights, leading to a justified recommendation or award. It balances cost, capability, schedule, risk, and value while maintaining transparency and fairness.

Key Points

  • Used to compare and rank sellers against predefined, weighted criteria.
  • Combines rated factors (e.g., technical, past performance) with cost and risk considerations.
  • Requires transparent rules, an evaluation team, and documented scoring rationales.
  • Produces a defensible recommendation and an audit trail for procurement decisions.
  • Supports negotiations by highlighting strengths, weaknesses, and trade-offs.
  • Tailored to the procurement strategy, contract type, and market conditions.

Purpose of Analysis

The purpose is to select the supplier that provides the best overall value for the project, not just the lowest price. It ensures an objective, repeatable, and fair comparison of proposals that aligns with requirements, risk appetite, and organizational policies.

Method Steps

  • Define evaluation criteria and their weights aligned to the procurement strategy and requirements.
  • Specify pass/fail thresholds for mandatory requirements and compliance checks.
  • Create a scoring guide with clear descriptors for each rating level to reduce evaluator bias.
  • Collect proposals and screen for mandatory compliance before detailed scoring.
  • Independently score proposals on rated criteria; normalize and incorporate cost for comparability.
  • Consolidate scores, resolve anomalies, and document rationales and assumptions.
  • Conduct sensitivity or what-if analysis on weights if results are close or contested.
  • Produce a recommendation, including negotiation points, risks, and conditions for award.

Inputs Needed

  • Procurement statement of work and detailed requirements.
  • Procurement strategy, contract type guidance, and organizational policies.
  • Evaluation criteria, weights, and scoring guide.
  • Supplier proposals or bids, clarifications, and presentations if applicable.
  • Budget, independent cost estimates, and market research data.
  • Risk register, lessons learned, and vendor performance history.
  • Legal, regulatory, and compliance constraints.

Outputs Produced

  • Ranked list of sellers or a selected seller recommendation.
  • Completed evaluation matrix with scores, notes, and justifications.
  • Award recommendation memo and approval records.
  • Negotiation objectives and issues log for the preferred seller.
  • Updates to procurement documents, risk register, and contract approach.
  • Lessons learned for future procurements.

Interpretation Tips

  • Normalize cost and technical scores so no single dimension overwhelms the result unintentionally.
  • Use pass/fail gates for must-have requirements before applying weighted scoring.
  • Check for scoring drift by calibrating evaluators with sample proposals.
  • Apply tie-breakers consistently (e.g., lower risk, better delivery, superior past performance).
  • Run a quick sensitivity test on weights to see if the recommendation is robust.
  • Verify total cost of ownership and capacity to deliver, not just upfront price.

Example

A team evaluates three suppliers using weighted criteria: Technical (40%), Cost (30%), Delivery (15%), Past Performance (10%), and Risk (5%). After screening mandatory requirements, evaluators score proposals and normalize cost so the lowest price receives the highest cost score.

  • Supplier A: Strong technical and delivery, mid-range price; overall score 84.
  • Supplier B: Very strong technical, best past performance, slightly higher price; overall score 87.
  • Supplier C: Lowest price but weaker technical and higher risk; overall score 78.

Supplier B ranks highest. The team documents rationales, identifies negotiation points (e.g., warranty terms, schedule buffer), and recommends award subject to due diligence.

Pitfalls

  • Overweighting lowest price and ignoring lifecycle costs or delivery risk.
  • Vague criteria or scoring guides that invite inconsistent evaluations.
  • Failing to separate mandatory requirements from rated criteria.
  • Not normalizing or calibrating scores, leading to skewed results.
  • Insufficient documentation, reducing auditability and trust.
  • Changing criteria after seeing proposals, creating bias and compliance issues.

PMP Example Question

While conducting source selection analysis, what should the project manager do to ensure a fair and defensible award recommendation?

  1. Allow the sponsor to choose the seller based on prior relationships.
  2. Use predefined weighted criteria and document the scoring rationale.
  3. Select the lowest-priced proposal to minimize budget risk.
  4. Revise the scope to match the preferred vendor's solution.

Correct Answer: B — Use predefined weighted criteria and document the scoring rationale.

Explanation: Source selection analysis relies on transparent, predefined criteria and thorough documentation to enable an objective, auditable decision.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Build an ICS/OT cybersecurity foundation that fits the real environment

Standard IT controls can disrupt the industrial systems they are meant to protect. Learn how to assess OT risk, design zones and conduits, apply IEC 62443 security levels, use MITRE ATT&CK for ICS, and establish passive asset visibility without risking production. Eight reconstructed incidents connect attacker techniques to the controls that failed, giving you the vocabulary and judgment to make credible security decisions from day one.

Explore the Course