QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Getting enforceable security terms into Lysander Mutual's supplier agreements and holding suppliers to them: one contract travelling an eight-station rail of specify, tier, library, draft, negotiate, flow-down, sign and operate, from 31 requirements in the tender and 1,184 suppliers tiered by risk to 41 owned obligations, 38 of them evidenced on time; a decorative clause — appropriate measures, notify without undue delay — redrafted to the four-part test of obligation, artefact, window and consequence; and the negotiation record of 31 challenged provisions, 11 held, 13 traded for compensating controls and 7 conceded on purpose, with a late notification handled through the contract and an exit closed by a deletion certificate.
CY-EXPERT-063Expert Level · Third-Party Risk

Procurement Clause Challenge

An expert-level course on how a security function gets enforceable security terms into supplier agreements and then actually holds suppliers to them. Travel the contract rail - eight stations along which one agreement moves: writing security requirements before the tender issues; tiering suppliers by the risk they actually carry; building a governed clause library with drafted fallbacks; testing every provision for measurable obligation, named artefact, defined window and stated consequence; negotiating what is worth a fight and what is theatre; making the obligations reach subprocessors; turning a signed schedule into an owned obligation register; and running evidence, remediation, renewal and exit for the life of the relationship.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Derive security requirements from what a service holds, touches and creates a dependency on, and get them scored inside the tender while they are still a condition of winning.
  • Tier a supplier estate on data, access, dependency, concentration and recoverability, reconcile it across source systems, and define what each tier receives contractually and in assurance.
  • Build and govern a clause library with tier applicability, drafted fallback ladders and intent notes, covering the data, assurance and operational clause families.
  • Test every provision against measurable obligation, named artefact, defined window and stated consequence, and design consequences proportionate enough to be used.

Price:৳12,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.