Vendor and Supply Chain Cyber Risk (IMCS-031) Training Course

Vendor and Supply Chain Cyber Risk

Many major breaches have occurred through suppliers, service providers and software vendors. Organisations must assess and manage cyber risks across their supply chains…

5 daysClassroom or online

13Upcoming dates

7Cities

£2,250Fees from

Course overview

Why Attend

Many major breaches have occurred through suppliers, service providers and software vendors. Organisations must assess and manage cyber risks across their supply chains.

This LLMI course covers supply chain cyber threats, vendor inventory and tiering, security assessments and questionnaires, contractual security requirements, continuous monitoring, software supply chain risks, incident coordination and regulatory expectations. Participants design a vendor cyber risk programme.

The course suits security, procurement and risk professionals.

Course Objectives

Explain supply chain cyber threats

Inventory and tier vendors by risk

Assess vendor security posture

Include security requirements in contracts

Monitor vendors continuously

Coordinate incidents with suppliers

Target Audience

Information security managers

Procurement and vendor managers

Risk managers

Compliance professionals

IT managers

Auditors

Course Methodology

Case studies

Tiering exercises

Questionnaire design

Contract clause reviews

Programme design

Course outline

1Day 1: Supply Chain Cyber Threats

Third-party breaches
Software supply chain attacks
Cloud and managed services
Regulatory expectations
Risk appetite
Case study: Supply chain attack

2Day 2: Vendor Inventory and Tiering

Vendor inventory
Data and access mapping
Risk tiering
Criticality
Ownership
Workshop: Tiering model

3Day 3: Assessment

Questionnaires
Evidence and certifications
On-site and remote assessments
Scoring
Remediation
Exercise: Assessment review

4Day 4: Contracts and Monitoring

Security clauses
Right to audit
Incident notification
Continuous monitoring
Offboarding
Exercise: Contract clauses

5Day 5: Programme Management

Governance
Metrics
Tools
Improvement
Roadmap
Capstone: Vendor cyber risk programme

Frequently asked questions

How long is the Vendor and Supply Chain Cyber Risk course?

The course runs over 5 days of classroom training, usually Monday to Friday.

When is the next Vendor and Supply Chain Cyber Risk course?

The next public date is 21 - 25 Dec 2026 in Istanbul. There are 13 upcoming dates in total.

Where is this course held?

Upcoming sessions run in Istanbul, Rome, Kuala Lumpur, Frankfurt, Geneva, Dubai, London.

Can I take Vendor and Supply Chain Cyber Risk online?

Yes. Every date can also be joined live online in a virtual classroom with the trainer, for £1,280 per participant. Choose "Live online" in the dates table when you register.

How much does the course cost?

Fees start from £2,250 per delegate, depending on the city. Fees include tuition and course materials.

Do participants receive a certificate?

Yes. Delegates who complete the course receive a London Leadership Management Innovation certificate of completion.

Can this course be delivered in-house for our team?

Yes. LLMI can tailor and deliver this course privately for your organisation at your premises or in one of our training cities.

Course information last updated 14 November 2026.

Vendor and Supply Chain Cyber Risk

Course overview

Course outline

Dates and fees

Frequently asked questions

More IT Management and Cyber Security courses

AI Security: Protecting Machine Learning Systems

Application Security and Secure Software Development

Artificial Intelligence (AI) in Cyber Forensics: Investigating Advanced Cyber Crimes

Training a team?