9 Topics
5 Days
45 Sessions
Programme Overview
Training Description
Who Should Attend
This course is designed for professionals responsible for managing and auditing third-party relationships, including:
- Internal Auditors
- IT Auditors
- Compliance Officers
- Risk Managers
- Procurement Professionals
- Vendor Managers
- Anyone involved in managing or overseeing third-party vendors
Session Objectives
- Understand the importance of TPRM and the risks associated with third-party vendors.
- Identify and assess third-party risks across different categories (e.g., security, compliance, operational, financial).
- Evaluate the effectiveness of vendor controls and risk mitigation strategies.
- Conduct TPRM audits using industry best practices and standards.
- Develop audit programs and procedures for TPRM assessments.
- Understand contractual considerations related to third-party risk.
- Assess vendor compliance with relevant regulations and standards.
- Monitor and report on third-party risk.
- Develop recommendations for improving TPRM processes.
- Communicate TPRM audit findings effectively to management.
- Collaborate with business units and vendors on TPRM initiatives.
- Stay up-to-date with the latest TPRM trends and best practices.
- Contribute to a stronger third-party risk management culture within their organizations.
- Enhance their understanding of vendor risk management.
- Become a more valuable and sought-after TPRM audit professional.
About the Course
Organizations increasingly rely on third-party vendors for various services, creating potential risks to data security, compliance, and operations. This comprehensive training course on Third-Party Risk Management (TPRM) Audit equips participants with the specialized knowledge and skills to effectively assess and mitigate these risks. Participants will learn how to identify third-party risks, evaluate vendor controls, conduct TPRM audits, and ensure vendor compliance with organizational policies and regulatory requirements. This course bridges the gap between vendor management and audit practices, empowering participants to become valuable assets in protecting their organizations from third-party related risks.
Curriculum & Topics
9 Topics | 45 Sessions
-
Workshop 1.1:
The increasing reliance on third parties and the associated risks.
-
Workshop 1.2:
Defining TPRM and its importance in mitigating vendor-related risks.
-
Workshop 1.3:
Key TPRM concepts and terminology.
-
Workshop 1.4:
Different types of third-party risks (e.g., security, compliance, operational, financial, reputational).
-
Workshop 1.5:
The role of TPRM in protecting organizational assets and reputation.
-
Workshop 2.1:
Developing a third-party risk assessment methodology.
-
Workshop 2.2:
Identifying potential third-party risks across different categories.
-
Workshop 2.3:
Assessing the likelihood and impact of third-party risks.
-
Workshop 2.4:
Categorizing third parties based on risk level.
-
Workshop 2.5:
Creating a third-party risk register.
-
Workshop 3.1:
Importance of due diligence in vendor selection.
-
Workshop 3.2:
Conducting background checks and financial assessments.
-
Workshop 3.3:
Evaluating vendor security posture and compliance certifications.
-
Workshop 3.4:
Assessing vendor capabilities and capacity.
-
Workshop 3.5:
Developing vendor selection criteria.
-
Workshop 4.1:
Including risk-related provisions in vendor contracts.
-
Workshop 4.2:
Defining responsibilities and liabilities.
-
Workshop 4.3:
Service Level Agreements (SLAs) and performance metrics.
-
Workshop 4.4:
Data ownership and privacy clauses.
-
Workshop 4.5:
Contract termination and exit strategies.
-
Workshop 5.1:
Developing a third-party control framework.
-
Workshop 5.2:
Implementing security, compliance, and operational controls for vendors.
-
Workshop 5.3:
Monitoring vendor performance against SLAs.
-
Workshop 5.4:
Tracking key risk indicators (KRIs) for third-party risks.
-
Workshop 5.5:
Regularly reviewing and updating vendor controls.
-
Workshop 6.1:
Developing a TPRM audit program.
-
Workshop 6.2:
Planning and executing TPRM audits.
-
Workshop 6.3:
Gathering and analyzing audit evidence.
-
Workshop 6.4:
Documenting and reporting TPRM audit findings.
-
Workshop 6.5:
Following up on TPRM audit recommendations.
-
Workshop 7.1:
Identifying relevant regulations and compliance requirements for third parties.
-
Workshop 7.2:
Assessing vendor compliance with industry standards and regulations.
-
Workshop 7.3:
Auditing vendor compliance programs.
-
Workshop 7.4:
Managing compliance risks related to third-party relationships.
-
Workshop 7.5:
Data privacy and security considerations for third-party data access.
-
Workshop 8.1:
Continuously monitoring and assessing third-party risks.
-
Workshop 8.2:
Regularly reviewing and updating the TPRM program.
-
Workshop 8.3:
Identifying areas for improvement in TPRM processes.
-
Workshop 8.4:
Integrating TPRM with enterprise risk management.
-
Workshop 8.5:
Managing third-party relationships throughout the vendor lifecycle.
-
Workshop 9.1:
The evolving landscape of third-party risk.
-
Workshop 9.2:
Use of technology and automation in TPRM.
-
Workshop 9.3:
Data analytics for third-party risk assessment and monitoring.
-
Workshop 9.4:
Global third-party risk management considerations.
-
Workshop 9.5:
Best practices for building a world-class TPRM program.
