
The most useful RFID risk assessment asks what could prevent this particular workflow from succeeding and what evidence reduces that uncertainty. A vendor’s experience, product specifications and demonstration are inputs; the decision should be tied to your goods, environment, systems and operating team.
Use this guide before selecting an integrator or expanding a pilot. Identify the decision owner, operational sponsor, technical reviewer and people who will maintain the system. Agree which requirements are essential and which can be traded against cost or convenience.
Turn claims into evidence requests
On a small screen, scroll sideways to read both columns.
| Claim or dependency | Evidence that helps the decision |
|---|---|
| Relevant experience | References for a comparable workflow, materials, scale and integration; ask about failures and ongoing support. |
| Read performance | Repeatable results on representative loads, including misses, stray reads and awkward conditions. |
| Integration capability | A demonstrated transaction with identity checks, retries, outages and reconciliation. |
| Support and continuity | Named support responsibility, response commitments, firmware policy and replacement path. |
| Data portability | A usable export with identities, timestamps, definitions and enough configuration to interpret it. |
| Cost and delivery | Written scope, dependencies, recurring charges, excluded work and acceptance milestones. |
Prefer a demonstrated result to a general promise. Record who supplied each piece of evidence and under what conditions. A requirement can be “demonstrated,” “documented but untested” or “unresolved.” These are review states, not probabilities of failure or a mathematical guarantee.
Ask references how the installation behaves after a packaging change, staff turnover or an outage. A technically impressive demonstration can still leave the owner dependent on a particular engineer or undocumented adapter.
Understand what verification covers
Technical approvals have boundaries. Auburn’s ARC program relates inlay performance to end-user specifications; it does not evaluate every part of a warehouse deployment. Similarly, OSDP Verified listings describe device and profile conformance, with deployment design considerations still required.
Ask for the exact model, version, test scope and applicable conditions behind each badge or certification. Identify which requirements remain to be tested in your installation. Record a planned future capability separately from a feature demonstrated in the delivered configuration.
For connected readers, middleware and cloud services, apply the organization’s technology-supplier security review. NIST SP 1326, finalized in July 2026 provides ICT supplier due-diligence considerations including provenance, resilience and foundational cyber practices. It can inform that part of the assessment; it is not an RFID performance certification.
Make a paid pilot answer a decision
Write the pilot’s scope before buying it: site, goods, systems, trial period, permitted changes and expected deliverables. Include the operational baseline, realistic acceptance scenarios and the evidence required to proceed. Specify who owns the data and whether the test setup is representative of the proposed production system.
Record the consequence of each unresolved requirement and how it will be resolved. Where a workaround is proposed, test the labor and failure handling it adds. The supply-chain pilot guide helps compare operational effort and cost without assuming every minute of released time becomes cash savings.
Put responsibility for antennas, network, reader configuration, middleware, ERP changes, training and acceptance in writing. The phrase “end to end” should correspond to named deliverables and accountable parties.
Test support and exit before they are urgent
Request a sample export during evaluation and have your team interpret it independently. Preserve stable item identities, time zones, event meanings and the mapping between readers and locations. An export file that opens successfully can still be incomplete for migration.
Identify what stops working if a subscription ends, a network is unavailable or a reader model is discontinued. Discuss configuration backups, replacement hardware, credential/key transfer where applicable, ownership of custom code and access to interface documentation. Use secure processes for any secrets; ordinary project spreadsheets or worksheets are unsuitable key stores.
Price the work needed to leave or replace part of the system, including data validation, equipment changes, retraining and parallel operation where required. Procurement and legal reviewers should capture the agreed obligations. The technical team should demonstrate the practical steps instead of assuming a contract sentence makes them executable.
At the decision meeting, list accepted evidence, remaining conditions, owners and review dates. Revisit the assessment after material changes to suppliers, service terms, firmware, packaging or the workflow. Keep a concise decision record that another team can understand without relying on the original salesperson or project sponsor.
Take the guide into your workflow
Download the working checklist (plain text). The editable text file includes its purpose, instructions, evidence fields and a link back to this guide. Record observed results and unresolved questions before making the decision.
Related reading
- Define customer acceptance requirements
- Test business-event recovery
- Require reproducible read-performance evidence
- Explore all RFID guides
Researched and updated September 11, 2026. Recheck the linked primary sources when equipment, standards or operating requirements change.