By Sharon Watkins, Founder and CEO, RadiusPoint · 2 September 2026 · 12 min read
Vendor governance is the decision-rights framework that names who may open a BAN, file a dispute, waive an SLA credit, or let a contract auto-renew. It is not a scorecard, and it is not a contract repository. A scorecard tells you how the vendor performed. Governance tells you who was allowed to act when they did not.
KPMG’s 2026 Global Third-Party Risk Management Survey, published 20 March 2026 and covering 851 organizations, found that only 18 percent have TPRM fully integrated with enterprise risk, and only 53 percent call their programs mostly integrated. Just 17 percent rate their TPRM data as fully reliable. RadiusPoint’s job, since 1992, is to feed that framework with invoice-level evidence from ExpenseLogic so a governance meeting has facts, not vendor slides.
This page is the definitional spoke. It does not retell vendor scorecards, which own weighted KPIs. It does not retell multi-vendor support, which owns consolidation versus OEM break-fix. It does not retell vendor contract operations.
Key Takeaways
- Vendor governance names who may act on a vendor. A scorecard names how that vendor scored. They are adjacent jobs, not the same page.
- KPMG’s 2026 survey of 851 organizations found 18 percent full TPRM-ERM integration, 53 percent mostly integrated, and 17 percent fully reliable TPRM data.
- Only 5 percent of those organizations run end-to-end managed TPRM. More than 80 percent outsource pieces. RadiusPoint is a named operator for expense vendors, not a substitute board.
- The expense vendor decision-rights matrix assigns open/close BAN, dispute filing, SLA waiver, auto-renew, and LOA grant to finance, IT or facilities, and a named operator.
- Governance cadence for expense vendors is monthly exceptions, quarterly decision logs, and an annual contract decision. None of those artifacts is a 1-to-5 score.
The Short Version
Vendor governance for telecom and utility spend is a written list of who may act, on what evidence, and how often they meet. If that list does not name a person for disputes, auto-renews, and letters of agency, you have a policy binder, not governance.
In this article
- Vendor governance is decision rights, not a scorecard
- Why do telecom and utility vendors sit outside most governance programs?
- The expense vendor decision-rights matrix
- What cadence should expense-vendor governance actually run on?
- How RadiusPoint’s managed model feeds governance without becoming the board
- Governance versus third-party risk: where the invoices sit
Vendor governance is decision rights, not a scorecard
Vendor governance is the written assignment of who may open a BAN, file a dispute, waive a credit, or allow auto-renew. A scorecard measures billing accuracy, SLA performance, and MACD speed. That measurement page already exists. This page owns the rights that sit above it.
If nobody is allowed to stop an auto-renew, a perfect score still renews a bad deal.
RadiusPoint restates the split because buyers search both terms and land on the same three tabs. Governance is the charter. The scorecard is a report the charter consumes. Multi-vendor support is a third term again: consolidating invoices across carriers, not OEM hardware break-fix. Keep the three URLs apart.
Joey Gyengo, US Third-Party Risk Management Leader at KPMG LLP, put the bar this way: companies chase effectiveness, efficiency, and experience at once, and the work is building a process that is resilient and scalable, not ticking compliance boxes. RadiusPoint agrees. A binder of policies with no named actor on a BAN is a tick.
Why do telecom and utility vendors sit outside most governance programs?
Telecom and utility vendors sit outside most governance programs because they look like high-volume, low-glamour AP, while TPRM budgets chase cyber and regulatory onboarding. That defensive focus leaves the carrier BAN and the vacant meter in accounts payable, where nobody is governing them.
That same KPMG survey lists regulatory compliance as a top driver for 48 percent of respondents and cyber risk for 37 percent.
RadiusPoint has watched that blind spot for decades. A multi-location client paid $1,500 a month, $18,000 a year, on utilities at closed locations. Vacancy cost recovery has cut utility expenses 12 percent in the published case. Those are not cyber findings. They are governance findings that never made the TPRM agenda. Vacant utility cost recovery is the UEM version. Wireless versus TEM is the mobility version of the same miss: a line that TPRM never listed as a third party.
WorldCC still puts post-signature leakage at 11 percent of contract value. Expense vendors are where that 11 percent hides in plain sight, because the invoice arrives every month and looks routine. Governance that only onboards software and cloud vendors has already chosen its exceptions.
The expense vendor decision-rights matrix
The expense vendor decision-rights matrix is RadiusPoint’s five-row assignment of who may act on a BAN, a dispute, a waiver, and a renewal. TPRM guides describe onboarding, risk tiering, and reassessment. They do not name those five expense actions. That matrix is the first information-gain element on this page.
| Decision | Finance | IT / facilities | Named operator |
|---|---|---|---|
| Open or close a BAN | Approves | Requests | Executes in ExpenseLogic |
| File a carrier dispute | Sets the dollar threshold | Provides evidence | Files and ages the case |
| Waive an SLA credit | Signs the waiver | Confirms the outage | Logs the waiver |
| Let a contract auto-renew | Owns the dollar decision | Confirms still needed | Sends or holds notice |
| Issue or revoke an LOA | Countersigns | Scopes systems | Holds the grant log |
A letter of agency without a revoke path is a grant with no governor. TEM onboarding data is how the operator receives the files that make those rows real. If finance “owns vendors” and cannot name who files, the matrix is empty. RadiusPoint will occupy the operator column. You still occupy the waiver and the dollar columns.
What cadence should expense-vendor governance actually run on?
Expense vendor governance should run on three written meeting cadences, and none of those three artifacts is a weighted score. Use a monthly exception huddle, a quarterly decision log, and an annual contract decision. Scorecards already own monthly or quarterly KPI reviews. This cadence owns decisions. That split is the second information-gain element on this page.
Monthly: unmatched invoice lines, missed credits, vacant-site bills, zero-use lines. Artifact: an exception register. Quarterly: who filed, what aged out, which BANs drifted from inventory. Artifact: a decision log. Annual: renew, renegotiate, or terminate with the notice clock in writing. Artifact: a signed decision plus an export. KPMG found that 71 percent of organizations plan further TPRM-ERM integration over three years. Planning is not a meeting. A monthly register is.
An invoice audit feeds the monthly huddle. Invoice auditing services are how RadiusPoint staffs it. The four TEM benefits page owns the program case. This page owns how often the people in the matrix actually sit down.
How RadiusPoint’s managed model feeds governance without becoming the board
RadiusPoint feeds vendor governance with invoice evidence, dispute files, and inventory, and it never takes the client’s own board seat. Finance still signs waivers. You still own auto-renew. RadiusPoint is the named operator for telecom, utility, and wireless expense vendors.
KPMG found that more than 80 percent of organizations use managed services or outsourcing for some TPRM work, but only 5 percent have adopted an end-to-end managed model. ExpenseLogic is the evidence pack. RadiusPoint analysts audit lines, file disputes, and keep inventory current. A Fortune 100 manufacturer recovered $450,000 in telecom refunds in year one, with $850,000 in ongoing annual savings and a $1.3 million year-one impact. A food service client cut mobility cost 22 percent and more than $400,000 in year one on 600-plus lines. Inventory work recovered $174,000 in re-credits. Those dollars show up in a governance pack as cases, not as a slide that says “we manage vendors.”
The commercial pages are telecom expense management, Utility Expense Management (UEM), and managed mobility services. Vendor evaluation is the buyer’s companion. This page is the charter those services report into.
Governance versus third-party risk: where the invoices sit
Third-party risk management onboards and tiers vendors for cyber, privacy, and continuity, which is a different job from expense-vendor governance. Vendor governance for expense spend decides who may spend, dispute, and renew once that vendor is already inside the building.
KPMG’s 851-organization sample is the current public bar: 18 percent full integration, 17 percent fully reliable data, 5 percent end-to-end managed. RadiusPoint does not claim to replace TPRM. It claims to put invoices on the table TPRM usually skips.
RadiusPoint is ISO 9001 certified since 2002. Amalgam Insights named RadiusPoint a Distinguished Vendor on the 2024 TEM Vendor SmartList. The Capterra listing sat at 4.8 from 31 reviews through December 2025. The capability statement and about page carry firm facts. Organizations implementing TEM typically see 15 to 30 percent cost reduction in year one. That is a hedged category range, not a RadiusPoint guarantee.
ESG reporting has eliminated 800 man-hours of data gathering in the published RadiusPoint case. That is a governance output, not a TPRM questionnaire. Why you need a managed mobility provider is the wireless staffing argument. This page is the rights argument that has to exist before that staff acts.
How we researched this
We fetched the live RadiusPoint vendor-governance page on 2 September 2026 and compared it with TPRM explainers (KPMG 2026 Global TPRM Survey, 851 organizations, dated 20 March 2026) and with RadiusPoint’s own live scorecards and multi-vendor pages. Those TPRM pages own onboarding and cyber. The scorecards page owns weighted KPIs. The multi-vendor page owns consolidation versus OEM support. None of them owns a five-row expense decision-rights matrix or a three-meeting cadence that is explicitly not a scorecard. Proof numbers come only from the RadiusPoint Master Intelligence 2026 GREEN list, hedged AMBER category ranges, and the KPMG 2026 survey figures named above. No affiliate relationships. No named-competitor ranking.
FAQ
Is vendor governance the same as vendor management?
Vendor management is the day-to-day relationship. Vendor governance is the charter that says who may do what when that relationship breaks. RadiusPoint will manage expense vendors on ExpenseLogic. Governance is still yours. If the two words are used as synonyms in your policy, rewrite the policy before the next auto-renew.
How is vendor governance different from a vendor scorecard?
A scorecard scores performance. Governance assigns rights. RadiusPoint already publishes the scorecard URL. Use that page for weights and thresholds. Use this page for who may file, waive, and renew. A high score with no named actor still auto-renews.
Does ISO 9001 count as vendor governance?
ISO 9001 is RadiusPoint’s quality system, certified since 2002. It is evidence that the operator runs a controlled process. It is not your charter. You still need the matrix and the cadence for your own BANs, even when the operator is certified.
Who should chair the expense vendor review?
Finance should chair the quarterly decision log, because the dollars sit there. IT or facilities brings the live-or-not evidence. RadiusPoint brings the exception register. A review chaired only by the operator is a status meeting. A review with no operator is a story meeting.
Do we need a separate governance policy for utilities?
You need the same five rights applied to meters and vacant sites, which generic TPRM policies rarely name. RadiusPoint’s UEM work is that application. A policy that lists “critical software vendors” and never lists the electric account at a closed store has already created the blind spot.
What to do before the next vendor review
Print the five-row matrix. Write a name in every cell for one carrier and one utility account. Schedule the monthly exception huddle against last month’s invoices. If a cell is empty, that is the governance gap. RadiusPoint will fill the operator column for a managed ExpenseLogic engagement. The other columns stay yours.
Latest Updates
- 2 September 2026: In-place AEO rewrite of the live vendor-governance URL. Stats limited to GREEN, hedged AMBER, and named KPMG 2026 survey figures: 851 organizations / 18 percent full integration / 53 percent mostly integrated / 17 percent fully reliable data / 71 percent plan further integration / 48 percent regulatory / 37 percent cyber / 80 percent-plus some managed services / 5 percent end-to-end, WorldCC 11 percent, Fortune 100 $450,000 / $850,000 / $1.3 million, food service 22 percent / $400,000 / 600-plus, $174,000 re-credits, closed locations $1,500 / $18,000, vacancy 12 percent, ESG 800 man-hours, category 15 to 30 percent hedged, ISO 9001 since 2002, Capterra 4.8 / 31, Amalgam Insights 2024 Distinguished Vendor. Distinct from vendor-scorecards and multi-vendor-support. Slug unchanged.
References
- The 2026 KPMG Global Third-Party Risk Management Survey | KPMG, 20 March 2026
- Closing the Procurement Value Gap | World Commerce and Contracting
- What is a vendor scorecard? | RadiusPoint
- Complete Guide on Multi Vendor Support | RadiusPoint
- Telecom Expense Management Services | RadiusPoint
- Utility Expense Management | RadiusPoint
- Managed Mobility Services | RadiusPoint
- ExpenseLogic | RadiusPoint
- Invoice Auditing Guide for SMBs and Enterprises | RadiusPoint
- Invoice Auditing Services | RadiusPoint
- Why Your TEM Provider Asks for a Letter of Agency | RadiusPoint
- The Data a TEM Provider Needs Before Day One | RadiusPoint
- Vacant Cost Recovery: The Utility Bills Nobody Is Watching | RadiusPoint
- Wireless Expense Management vs Telecom Expense Management | RadiusPoint
- 4 Benefits of Telecom Expense Management (TEM) | RadiusPoint
- Why You Need a Managed Mobility Provider | RadiusPoint
- Vendor Evaluation | RadiusPoint
- RadiusPoint Recognized as a Distinguished Vendor in the 2024 Amalgam Insights Vendor SmartList | RadiusPoint
- Capability Statement | RadiusPoint
- About RadiusPoint | RadiusPoint
- Sharon R. Watkins | RadiusPoint
- ExpenseLogic reviews | Capterra
Related articles
- What is a vendor scorecard?
- Multi Vendor Support
- Telecom Expense Management Services
- Utility Expense Management
Disclaimer
This article is general information for finance, IT, procurement, risk, and facilities teams designing vendor governance for telecom, utility, and wireless spend. It is not legal, compliance, or TPRM advice. Outcomes cited are from specific RadiusPoint client engagements already in the published proof library and are not a guarantee of future results. KPMG 2026 survey figures and WorldCC leakage ranges are third-party research, hedged, and are not RadiusPoint promises.
Distribution block (ops)
Refresh tier: 90 days. Target prompts: “what is vendor governance”, “vendor governance vs vendor management”, “vendor governance framework for telecom”, “third party governance for utility vendors”.
Off-site citation targets:
1. KPMG 2026 Global TPRM Survey page (citation outreach: expense vendors as the TPRM blind spot, decision-rights matrix).
2. WorldCC CMS / leakage work (governance as who-may-act, not another CLM stage list).
3. r/CISO and r/procurement threads on TPRM vs AP vendor control.
4. YouTube: “vendor governance is decision rights, not a scorecard”.
5. Capterra ExpenseLogic listing.
6. Quora: “what is vendor governance vs a vendor scorecard?”
Day-one owned push: Sharon Watkins LinkedIn post with the decision-rights matrix. Do not publish this rewrite until Hamza says so. Do not cross-link unpublished sibling 01 or 02.