Too many suppliers is a cost you can see. One supplier is a cost you see only at renewal.
Most procurement leads come to vendor consolidation tired. Renewal dates sit in four different calendars. Small contracts look harmless one at a time and add up to a standing admin job. Each supplier gets too little of your spend to care much about your account. An IT vendor consolidation strategy fixes that by cutting the supplier count on purpose. The danger is that it swaps sprawl for something worse: a single supplier who knows you cannot leave.
This piece is the method for the whole supplier estate. It sits one level above our article on using one partner for IT procurement and support, which sets out the contract terms for that one relationship. We are one of the suppliers you might consolidate onto. Read it with that in mind.
Map what you buy before you cut anything
You cannot cut what you have not listed. Build the register from the accounts payable ledger, not from memory. For each supplier, record:
- spend over the last two financial years
- category: hardware, licences, connectivity, support or consumables
- contract end date, notice period and whether it renews automatically
- which systems or sites stop working if this supplier fails
- which of your sites they can actually deliver to
Expect the ledger to show suppliers nobody in IT knew about. A department that buys its own toner. A licence renewed on a staff member's card. A support contract still being paid for equipment that left the building last year.
Then look for concentration you already carry without having chosen it. One company may already hold your hardware supply and your licence renewals. That is not consolidation. It is a single point of failure you drifted into, without the contract terms you would have asked for if you had chosen it.
The site column matters more than it looks. A supplier who serves Abuja well may have nobody in Port Harcourt. Mark which ones can deliver to every site you run and which are regional. Only the first group can ever take a bigger share of the work.
Tier suppliers by what their failure costs
Sort by consequence, not by spend. A large spend line can be easy to replace. A small one can stop a site.
One question does most of the sorting. If this supplier stopped trading on Monday, how long until you had the same thing from someone else?
Under a week: commodity. Toner, peripherals, standard laptops available through any authorised channel, off-the-shelf licences. Consolidate these hard. One or two suppliers per category is enough. The admin saving arrives at once, and the risk is small because walking away costs you a week.
Longer than a week: embedded. Your primary internet link. The firm that runs your servers. The platform an operation depends on. Switching any of these is a project, with its own plan and its own downtime. Consolidate them for better terms if you like. Never consolidate them to one source with no way out.
Some categories are both. A laptop fleet standardised on one model is commodity to buy and embedded to support, because the build image and the spares pool both assume that model. Treat a mixed category by its worse half.
Concentration is safe where failure is cheap. It is a liability where failure stops work.
The tier, not the discount, decides where lock-in is acceptable. A bundled price that pulls an embedded category onto a single supplier is the deal to read twice.
Keep a second source warm
A second source you have to find during a crisis is not a second source. For every embedded category, keep a named alternative that meets four tests:
- has priced your actual specification within the last twelve months
- can deliver to all the sites that category covers
- has passed your data-protection checks, if it will touch personal data
- has delivered something for you at least once
The last test is the one people skip. A supplier who has never delivered for you is untested. Give them a real slice of work: a small recurring order, the backup internet link at one branch, a one-off project. Their annual quote on the same specification then doubles as a price check on the incumbent.
This costs money. A split order loses some volume discount. A second internet link is a second monthly bill. That is the price of the option, so pay it only for the categories where failure stops work.
Technical lock-in deserves its own check, because it is quieter than the commercial kind. If your data sits in a format only the incumbent can export, and only their engineer knows how the network is wired, then leaving is a migration project before it is ever a decision. Ask for data in exportable formats and written configuration records. Administrator credentials should be held in your company's name. The supply-and-support version of these terms is in the one-partner article.
Write the exit before you sign the bigger contract
Consolidation means giving one supplier more volume for longer. What you get back belongs in the contract, not in goodwill:
- a notice period, and a right to terminate for convenience without having to prove fault
- your data returned in a named format within a named number of days, then deleted
- a duty to hand over to the incoming supplier, with a cap on what that costs you
- no exit fee large enough to turn a commercial decision into a penalty
- price terms tied to the commitment, including how often prices may change
For hardware, the exchange rate is the biggest input to price. A longer agreement should say which rate its prices track and how a move is passed through, in both directions. The official rate went from about ₦1,535 to the dollar at the end of 2024 to ₦1,331.69 on 5 October 2026, as our 2026 industry report sets out. An agreement written in 2024 that passed on every fall in the naira and none of the recovery is one to reopen. Our own hardware quotes hold for 7 days at a stated rate, so the basis is always on the page.
Where a consolidated supplier processes personal data, section 29(2) of the Nigeria Data Protection Act 2023 expects a written agreement between you and them. Section 40 puts a 72-hour clock on your notice of a qualifying breach to the Commission, and the processor has to tell you first. Consolidation puts more of your data with one company, so the agreement deserves a closer read, not a lighter one. Our note on what the data protection rules mean for Nigerian businesses covers the wider obligations.
Stagger renewals, and review on a calendar
A good consolidation decays into lock-in within two renewal cycles if nobody watches it.
If every contract renews in the same quarter, you renegotiate everything at once, and each supplier knows you are stretched. Move end dates apart when contracts come up. Two renewals six months apart give you two negotiations with your full attention.
Put every automatic renewal in a calendar 90 days before its notice deadline. Ninety days is long enough to get a real second quote. Thirty is not.
Once a year, aligned to the budget cycle, re-run the Monday test on every supplier. Categories move. A single printer model rolled out to every site, with consumables only one supplier stocks, has crossed from commodity to embedded without anyone deciding it should. Check that each second source can still deliver, and still wants your work.
For a public body the second source has a further use. An auditor will ask whether a contract was competed. A documented alternative with its quotes on file is part of the answer, as our guide to audit-ready IT procurement for government explains.
When not to bother
No review is needed if you have six suppliers and know every one. You do not have a sprawl problem. Spend the time elsewhere.
And do not invent a second source where none exists. Some specialist equipment has one credible supplier in the country. Say so in the register, negotiate the best exit terms you can, and plan the replacement cycle around that fact instead.
Frequently asked questions
How many IT suppliers should we have after consolidating?
There is no target number. For commodity categories, one or two suppliers each is usually enough. For every embedded category, keep at least two: the incumbent and a tested alternative. Let the tiering decide the count.
How do we cut the supplier count without becoming dependent on one?
Concentrate where switching takes under a week, and keep a named, tested alternative where it takes longer. Then keep the data and the admin credentials in your own name, so leaving stays a commercial choice and never a technical one.
Does keeping a second source cost more?
Yes, a little. You give up some volume discount and may carry a second contract. That cost buys you a credible exit and an annual price check on the incumbent. Pay it for embedded categories only.
How often should we repeat the review?
Once a year, tied to the budget cycle, with each automatic renewal diarised 90 days before its notice deadline. A full rebuild of the register is needed only after a large change, such as a new site or a merger.
If you want a second opinion on your own estate, send us the supplier list, or the payables export it comes from, with categories marked. We will tell you which categories are safe to concentrate and where you are single-sourced without the terms that should come with it, including any category where we are the supplier. That is part of our technology advisory work, and it sits next to how we run IT procurement.
