Logo
Entry to Intermediate

Third-Party Risk Management

Assess, Tier, and Monitor Vendor Risk Like an Enterprise TPRM Team.

Watch Free Demo

Starting at $250 · Taught by industry-certified ThreatBlock instructors.

Trusted by teams at
South FloridaSynackLufthansaBooking HoldingsHCL TechWiproMicrosoftSouth FloridaSynackLufthansaBooking HoldingsHCL TechWiproMicrosoft
Duration: 10 / 20 / 35 Hrs Live
Level: Entry to Intermediate
Language: English

What You'll Learn

Vendor Risk Foundations
The vendor risk lifecycle. Building the vendor inventory. Inherent vs residual risk. Tiering vendors into a Vendor Risk Tiering Matrix.
Assessment Questionnaires
Designing effective assessment questionnaires. SIG and SIG Lite in depth. The Cloud Security Alliance CAIQ.
Assurance Reports
Reading SOC 1 reports. SOC 2 Type II and carve-outs. Critically reviewing vendor evidence.
Standards & Frameworks
NIST SP 800-161 supply chain risk management. ISO 27036 supplier relationship security.
Contracts & Negotiation
Contractual security requirements, SLAs, and clauses. Negotiating assessment findings with vendors.
Monitoring, Platforms & Reporting
Continuous vendor monitoring. OneTrust TPRM and Prevalent hands-on. Executive reporting and case studies. Capstone deliverables: Vendor Risk Tiering Matrix, SIG Lite review of a real SaaS vendor, and a Third-Party Risk Assessment Report.
Audience

Who It's For

Designed for learners at every stage of their journey.

Security Analysts
Analysts who want to specialize in vendor and supply-chain risk — one of the fastest-growing GRC niches.
Procurement & Legal
Procurement and contract professionals who need to evaluate vendor security posture properly.
Risk & Compliance Teams
GRC practitioners expanding into third-party governance and continuous monitoring.
Course Curriculum

What you'll master.

6 modules — tap any topic to expand the details.

The vendor risk lifecycle. Building the vendor inventory. Inherent vs residual risk. Tiering vendors into a Vendor Risk Tiering Matrix.
Enroll Now
$250
Book your demo

One-time payment for full course access. Flexible EMI options available at checkout.

Reviews & Testimonial

Loved by hackers. Trusted by organizations.
Pooja Menon
Vendor Risk Analyst
★★★★★

I reviewed my first SOC 2 report solo two weeks after finishing. The carve-out sessions were brilliant.

Aditya Rao
Supply Chain Risk Manager
★★★★★

Finally a course that teaches how TPRM actually runs. The SIG Lite review of a real SaaS vendor was a masterstroke.

Shruti Kapoor
GRC Consultant
★★★★★

The tiering matrix template alone replaced weeks of internal work for us.

Nikhil Bhatia
Procurement Lead
★★★★★

I can now push back on vendor security claims with real evidence. Game changer for contract negotiations.

Meera Krishnan
Third-Party Governance Specialist
★★★★★

Deep, practical, and current. The continuous monitoring module is exactly where the industry is heading.

Pooja Menon
Vendor Risk Analyst
★★★★★

I reviewed my first SOC 2 report solo two weeks after finishing. The carve-out sessions were brilliant.

Aditya Rao
Supply Chain Risk Manager
★★★★★

Finally a course that teaches how TPRM actually runs. The SIG Lite review of a real SaaS vendor was a masterstroke.

Shruti Kapoor
GRC Consultant
★★★★★

The tiering matrix template alone replaced weeks of internal work for us.

Nikhil Bhatia
Procurement Lead
★★★★★

I can now push back on vendor security claims with real evidence. Game changer for contract negotiations.

Meera Krishnan
Third-Party Governance Specialist
★★★★★

Deep, practical, and current. The continuous monitoring module is exactly where the industry is heading.

Meera Krishnan
Third-Party Governance Specialist
★★★★★

Deep, practical, and current. The continuous monitoring module is exactly where the industry is heading.

Nikhil Bhatia
Procurement Lead
★★★★★

I can now push back on vendor security claims with real evidence. Game changer for contract negotiations.

Shruti Kapoor
GRC Consultant
★★★★★

The tiering matrix template alone replaced weeks of internal work for us.

Aditya Rao
Supply Chain Risk Manager
★★★★★

Finally a course that teaches how TPRM actually runs. The SIG Lite review of a real SaaS vendor was a masterstroke.

Pooja Menon
Vendor Risk Analyst
★★★★★

I reviewed my first SOC 2 report solo two weeks after finishing. The carve-out sessions were brilliant.

Meera Krishnan
Third-Party Governance Specialist
★★★★★

Deep, practical, and current. The continuous monitoring module is exactly where the industry is heading.

Nikhil Bhatia
Procurement Lead
★★★★★

I can now push back on vendor security claims with real evidence. Game changer for contract negotiations.

Shruti Kapoor
GRC Consultant
★★★★★

The tiering matrix template alone replaced weeks of internal work for us.

Aditya Rao
Supply Chain Risk Manager
★★★★★

Finally a course that teaches how TPRM actually runs. The SIG Lite review of a real SaaS vendor was a masterstroke.

Pooja Menon
Vendor Risk Analyst
★★★★★

I reviewed my first SOC 2 report solo two weeks after finishing. The carve-out sessions were brilliant.