Harborline's vendor risk desk: eight lifecycle tabs — identify, tier, assess, decide, contract, monitor, respond and exit — above a desk holding an in-tray of 300 vendors tiered from a critical payroll processor down to a low-risk office-plant supplier; an open vendor file where 15 findings and a SOC 2 report, read for scope and exceptions, become one risk picture and a mitigate decision; and a contract with breach notice within 24 hours, security controls, a right to audit and data returned at exit.

CY-SENIOR-009Senior Level · Risk Management

Third-Party Risk Management — The Vendor Risk Desk

A strategic, decision-focused senior course on managing the risk of the vendors you rely on. Run the vendor risk desk at Harborline — moving each third party through Identify, Tier, Assess, Decide, Contract, Monitor, Respond, and Exit — making proportionate, evidence-based, defensible calls and enabling the business to use third parties safely. Four decision activities in every lesson.

16 hours8 chapters40 lessons265 activities8 labs

What you'll learn

Own third-party risk as a lifecycle: you outsource the work, never the accountability.
Inventory and tier vendors by risk, and assess proportionately with evidence over questionnaires.
Decide to accept, mitigate, or reject against a risk appetite, and embed protections in contracts.
Monitor risk across the relationship, respond to vendor breaches, exit cleanly, and run the program.

Price:৳10,000