Professional training course · AGRC-044
Third-Party Risk Management and Due Diligence
Modern organisations depend on suppliers, distributors, agents, outsourcing partners and technology providers for critical activities. Each of these relationships can…
- 5 daysClassroom
- 49Upcoming dates
- 12Cities
- £2,250Fees from
Course overview
Introduction
Modern organisations depend on suppliers, distributors, agents, outsourcing partners and technology providers for critical activities. Each of these relationships can expose the organisation to bribery, sanctions breaches, data leaks, operational failure, reputational damage and regulatory penalties, often without the organisation having direct control.
This Third-Party Risk Management and Due Diligence training course provides a complete, practical approach to managing risk across the third-party life cycle. Participants learn how to build an inventory of third parties, segment them by risk, design proportionate due diligence, negotiate protective contract terms, monitor ongoing performance and risk, and manage exit.
The course draws on recognised good practice in compliance, procurement and operational resilience, and shows how to coordinate the many functions that share responsibility for third-party risk.
Course Objectives
By the end of this training course, participants will be able to:
- Explain the types of risk introduced by third-party relationships
- Design a third-party risk management framework and governance model
- Segment third parties by inherent risk and criticality
- Plan and perform proportionate due diligence
- Use contract clauses to manage third-party risk
- Monitor third parties through the life of the relationship
- Manage red flags, remediation and termination
- Report third-party risk to senior management and the board
Target Audience
This training course is suitable for a wide range of professionals, including:
- Compliance and risk professionals
- Procurement and supply chain managers
- Vendor and outsourcing managers
- Internal auditors
- Legal and contract professionals
- Information security and data protection staff
- Operational resilience and business continuity professionals
Training Methodology
The course uses practical case studies, sample questionnaires and due diligence reports. Participants segment a portfolio of third parties, design a risk-based questionnaire, analyse red flags from screening results, review contract clauses and build a monitoring dashboard. Group discussions share experiences across different functions and industries.
Target Competencies
- Third-party risk segmentation
- Risk-based due diligence
- Red flag analysis
- Contractual risk controls
- Ongoing third-party monitoring
- Cross-functional coordination
Course outline
-
1Day One: The Third-Party Risk Landscape
- Why third-party risk has become a board-level concern
- Types of third parties and the risks each can introduce
- Bribery, sanctions, data, operational and reputational exposures
- Regulatory expectations for third-party oversight
- Lessons from major third-party failures and enforcement cases
- Roles of procurement, compliance, legal, security and business owners
- Exercise: building an inventory of third parties
-
2Day Two: Framework, Segmentation and Risk Scoring
- Designing a third-party risk management policy and framework
- Inherent risk factors: country, sector, service and access
- Criticality and dependency assessment
- Building a risk scoring model and tiering approach
- Aligning due diligence depth with risk tier
- Technology platforms for third-party risk management
- Workshop: segmenting a portfolio of third parties
-
3Day Three: Conducting Due Diligence
- Questionnaires, document requests and self-assessments
- Ownership and beneficial ownership verification
- Screening against sanctions, watchlists and adverse media
- Financial health and operational capability checks
- Information security and data protection assessments
- Site visits, interviews and enhanced due diligence
- Exercise: analysing red flags in a due diligence file
-
4Day Four: Contracts, Onboarding and Ongoing Monitoring
- Key contract clauses: audit rights, compliance and termination
- Service levels, reporting duties and incident notification
- Onboarding approvals and conditions
- Ongoing monitoring triggers and periodic reviews
- Continuous screening and performance management
- Managing fourth parties and subcontractors
- Case study: monitoring a high-risk distributor
-
5Day Five: Remediation, Exit and Reporting
- Responding to issues, breaches and control failures
- Remediation plans and escalation routes
- Planning orderly exit and replacement of critical third parties
- Key risk indicators for the third-party portfolio
- Reporting third-party risk to management and the board
- Internal audit review of the third-party programme
- Personal action plan for improving third-party risk management
Schedule
Dates and fees
49 upcoming dates in 12 cities. Fees are per delegate; bring colleagues and every seat is discounted.
No dates in this city right now. Request a quotation and we will suggest the nearest date.
Questions
Frequently asked questions
How long is the Third-Party Risk Management and Due Diligence course?
The course runs over 5 days of classroom training, usually Monday to Friday.
When is the next Third-Party Risk Management and Due Diligence course?
The next public date is 7 - 11 Dec 2026 in Frankfurt. There are 49 upcoming dates in total.
Where is this course held?
Upcoming sessions run in Frankfurt, London, Barcelona, Madrid, Munich, Paris, Rome, Vienna, Cape Town, Dubai, Istanbul, Kuala Lumpur.
How much does the course cost?
Fees start from £2,250 per delegate, depending on the city. Fees include tuition and course materials.
Do participants receive a certificate?
Yes. Delegates who complete the course receive a London Leadership Management Innovation certificate of completion.
Can this course be delivered in-house for our team?
Yes. LLMI can tailor and deliver this course privately for your organisation at your premises or in one of our training cities.
Course information last updated 14 November 2026.
Related
More Auditing and Governance Risk and Compliance courses
Adding Value in Internal Audit
Next: 16 - 20 Nov 2026 · Amsterdam
Amsterdam, London, Barcelona +4 more
Advanced Project Economics, Risk & Decision Analysis
Next: 16 - 20 Nov 2026 · Barcelona
Barcelona, Dubai, Cape Town +11 more
Advanced Risk, Reliability & Safety Management Techniques
Next: 14 - 18 Dec 2026 · Rome
Rome, Kuala Lumpur, Barcelona +4 more