Running Meridian's third-party risk program along the assessment rail of eight stations — intake, tier, assess, evidence, score, contract, monitor and offboard — with the core payments processor riding it; tiering by real risk so the payments processor gets a deep review and the desk-plant vendor a short form instead of the same 300 questions; reading the SOC 2 report's scope and exceptions instead of trusting self-attestation; and a scored, owned residual risk with security clauses in the contract, ongoing monitoring and a confirmed secure exit.

CY-MID-091Mid Level · Vendor Security

Vendor Security Assessment — The Assessment Rail

A hands-on mid-level course that assesses and manages the security of the vendors you depend on. Work the assessment rail - eight stations: Intake, Tier, Assess, Evidence, Score, Contract, Monitor, and Offboard - running right-sized assessments and continuous oversight instead of a once-a-year questionnaire. Honest and risk-based. Four hands-on activities in every lesson.

14 hours8 chapters32 lessons220 activities8 labs

What you'll learn

Intake and tier vendors by the risk they actually carry.
Assess with right-sized questionnaires and real evidence.
Score risk and put security into contracts.
Monitor vendors continuously and offboard cleanly.

Price:৳8,000