MAINSYSTEMS 
identify controls needed after supplier selection
1. Regulatory Concept & Core Standards
This video focuses on how to identify controls needed after supplier selection. Follow the sequence of decisions in the example rather than simply memorising a list. Notice who is involved, what information is needed and the expected result. These points help turn the content into a practice that another person can verify. Risk can arise from the identification of a need through to payment. The course presents recommended controls and identifies the scope of Slovak public procurement law separately. Not every private purchase follows the same statutory procedure.
A proper selection may be undermined by unjustified price or scope changes. Receipt must demonstrate delivery and invoices the amount due. For a public contract assess amendment under section 18 of Act No 343/2015. Bank-detail changes are a separate sensitive point.
Apply the following rule: Section 11(1) requires the reporting register to be kept for three years from receipt. It records receipt date, subject, result and completion date, plus the prescribed identifying details for non-anonymous reports. Do not equate the register with every document from other proceedings. Those documents need their own lawful basis, purpose and restricted access. GDPR requires proportionality and minimisation.
2. Practical Implementation & Procedure
Match contract or order, receipt evidence and invoice. Review changes and approvals. Check duplicates and unusual payments. Confirm bank changes independently through a previously verified contact under the procedure. Do not rely only on contact details in the change request itself. Record exceptions and authorisation. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.
3. Case Study & Compliance Action
An urgent message requests a new IBAN for an outstanding invoice. The team uses a previously verified contact and learns that the supplier requested no change. The control prevents payment based on an apparently genuine email. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.
The exercise is as follows: Why should the new IBAN not be checked only through the number supplied in the message? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.
That contact may form part of the same fraudulent request. Verification needs an independent, previously verified source. The procedure must specify who confirms and what evidence they retain.
One mistake to avoid is: relaxing controls because of urgency or an established supplier relationship.
Now apply the national rule to a second decision. The system deletes all data five years after closure. Is that suitable?
No. The section 11 register is kept for three years from receipt of the report. Other documents and related proceedings require their own purpose and legal basis. One universal date may cause premature destruction or unnecessary retention. Record the rule, trigger and deletion owner.