Third Party Risk Management

Third-party relationships are now the single largest source of operational, cyber, and regulatory risk in most GCC enterprises. Yet across the region, Third-Party Risk Management programmes remain fragmented, owned in pieces by Procurement, IT Security, Compliance, and Internal Audit, without a single accountable framework, a shared risk taxonomy, or a credible board-level reporting line. Regulators have responded: SAMA, NCA, EBA, OCC, and the EU's DORA now expect formal, evidenced TPRM lifecycles end to end.

The DERISKED Certified Third-Party Risk Management Practitioner program equips risk, compliance, audit, procurement, and resilience professionals with a complete operating model for TPRM, from inventory and tiering through due diligence, contracting, continuous monitoring, incident response, and exit,  fully mapped to ISO 27036, NIST SP 800-161, EU DORA, SAMA frameworks, and the IIA Three Lines Model. Participants leave with the knowledge,  and practical workshop experience needed to design, defend, and operate a TPRM programme inside their own organisation.