Third-Party Risk Management

Modern institutions rely heavily on third parties to deliver critical services, support operational efficiency, and enable innovation. This dependency creates exposure to operational failures, financial loss, data breaches, and regulatory non-compliance. As regulators in South Africa and globally continue to emphasise accountability, institutions must demonstrate that they understand, monitor, and effectively manage the risks inherent in outsourced and third-party arrangements.

This course is designed for professionals responsible for managing, overseeing, or interacting with third-party relationships, including:

• Financial institutions and regulated entities (banks, insurers, fintechs)
• Procurement and vendor management teams
• Compliance officers, risk managers, and AML/CFT specialists
• Internal audit and assurance professionals
• IT, cybersecurity, and data protection teams
• Legal and contract management professionals
• Senior management and executives responsible for governance and oversight

Across these functions, third-party risk is a shared responsibility, requiring coordination between operational, technical, and compliance teams.

The course provides a comprehensive, structured overview of Third-Party Risk Management (TPRM) across the full lifecycle from initial planning and risk assessment to due diligence, onboarding, monitoring, assurance, and crisis response.

It combines governance principles, regulatory requirements, practical tools, and real-world oversight practices to equip learners with the skills needed to protect their organisations and maintain compliance under frameworks such as the FIC Act, POPIA, FATF Recommendations, and Prudential Authority guidance.