Third Party Risk Management and Due Diligence Course

Training Outlines

Introduction

Third parties can extend capability and market reach while introducing financial, operational, cyber, compliance and reputation exposure. Due diligence at onboarding is not enough; risk changes throughout the relationship and may extend through subcontractors and concentrated dependencies.

This five-day course equips procurement, risk, compliance, audit and contract professionals to manage third-party exposure across the lifecycle. Participants will segment relationships, conduct proportionate due diligence, define contractual controls, monitor performance and respond to incidents. Workshops culminate in a practical third-party risk framework with risk-based governance and exit readiness.

Objectives

By the end of this course, participants will be able to:

• Define third-party risk governance.
• Segment relationships by criticality.
• Conduct proportionate due diligence.
• Evaluate multi-domain third-party exposure.
• Embed risk controls in contracts.
• Design ongoing monitoring and escalation.
• Manage incidents and remediation.
• Plan resilient transition and exit.

Course Content

Day 1: Third-Party Risk Governance

• Third-party lifecycle and risk domains
• Roles, ownership and accountability
• Policy, appetite and minimum standards
• Third-party inventory
• Fourth-party and concentration risk
• Governance-maturity diagnostic

Day 2: Segmentation and Due Diligence

• Criticality and inherent-risk segmentation
• Financial and operational due diligence
• Compliance and integrity screening
• Cyber and data-risk assessment
• Evidence quality and enhanced review
• Due-diligence case workshop

Day 3: Contracting and Onboarding

• Risk-based contractual requirements
• Service levels and performance measures
• Audit, access and notification rights
• Security, continuity and subcontracting clauses
• Control validation before onboarding
• Contract-control laboratory

Day 4: Monitoring and Assurance

• Continuous and periodic monitoring
• Key risk and performance indicators
• Attestations and independent assurance
• Changes in ownership and services
• Concentration and portfolio reporting
• Third-party review simulation

Day 5: Incidents, Remediation and Exit

• Incident notification and coordination
• Escalation and executive decisions
• Corrective actions and risk acceptance
• Business continuity and contingency
• Transition, termination and data return
• Capstone third-party risk framework

Training Schedule

Below is the table of cities along with the respective dates for the upcoming training sessions of Third Party Risk Management and Due Diligence Course. Please review the schedule to find the most convenient option for you. You can also use the below search bar to type the city name and filter the results.