Third Party Risk
Management (TPRM)
Implementation Workshop
Date
25th - 26th April 2026
Time
10:00 AM - 5:00 PM(IST)
Third Party Risk
Management (TPRM)
Implementation Workshop
Date
25th - 26th April 2026
Time
10:00 AM - 5:00 PM(IST)
Workshop Description
The TPRM Implementation Workshop is designed to equip you with the practical skills needed to identify, assess, and manage risks arising from vendors, partners, and supply chains. Across 12 hours of immersive, instructor-led Workshop, you will explore real-world third-party breach scenarios, regulatory expectations, and proven risk assessment frameworks to build a resilient TPRM program. From vendor onboarding and risk scoring to continuous monitoring and incident response, this course empowers both technical and business professionals to move beyond checklists and implement a robust, scalable TPRM strategy that protects data, operations, and organizational trust with confidence.
Workshop Description
The TPRM Implementation Workshop is designed to equip you with the practical skills needed to identify, assess, and manage risks arising from vendors, partners, and supply chains. Across 12 hours of immersive, instructor-led Workshop, you will explore real-world third-party breach scenarios, regulatory expectations, and proven risk assessment frameworks to build a resilient TPRM program. From vendor onboarding and risk scoring to continuous monitoring and incident response, this course empowers both technical and business professionals to move beyond checklists and implement a robust, scalable TPRM strategy that protects data, operations, and organizational trust with confidence.
Workshop Highlights
Workshop Highlights
1-year access to
session recordings
Earn up to 12 CPE credits
Workshop completion certificate
Practical resources & ready-to-use templates
Interactive group activities & quizzes
1-year access to
session recordings
Earn up to 12 CPE credits
Workshop completion certificate
Practical resources &
ready-to-use templates
Interactive group activities & quizzes
Note: Please note that recording attendance will not be eligible for CPE credits & certificate.
Note: Please note that recording attendance will not be eligible for CPE credits & certificate.
CISSP Career Bootcamp
CISSP Career Bootcamp
Workshop Coverage
Workshop Coverage
Day 1: Foundations & Assessment
1. Foundations
- TPRM in modern organizations
- Vendor risk vs supply chain risk
- Regulatory framework mapping
- TPRM Lifecycle overview
2. Ecosystem Mapping
- Identifying third parties across business functions
- Identifying In-Scope vs Out-of-Scope
- Vendor classification (Pre-control Risk Rating)
- Creating a Third Party Inventory
3. Risk Identification & Threat Modelling
- Cyber, Data, Operational & Financial Risks
- Attack vectors through vendors
- Hidden risks in 4th parties
- Designing Risk Assessment Models
Activity Day 1: Activity on Vendor Risk Tiering and Third-Party Inventory
Day 1: Foundations & Assessment
1. Foundations
- TPRM in modern organizations
- Vendor risk vs supply chain risk
- Regulatory framework mapping
- TPRM Lifecycle overview
2. Ecosystem Mapping
- Identifying third parties across business functions
- Identifying In-Scope vs Out-of-Scope
- Vendor classification (Pre-control Risk Rating)
- Creating a Third Party Inventory
3. Risk Identification & Threat Modelling
- Cyber, Data, Operational & Financial Risks
- Attack vectors through vendors
- Hidden risks in 4th parties
- Designing Risk Assessment Models
Activity Day 1: Activity on Vendor Risk Tiering and Third-Party Inventory
Day 2: Governance & Response
1. Contractual & Governance Controls
- Security clauses in contracts
- Data protection and privacy clauses
- SLAs, OLAs, and Right to Audit
- Role of Legal & Procurement
2. Continuous Monitoring & Supply Chain Risk Management
- Key Risk Indicators (KRIs)
- Continuous assurance vs periodic assessment
- Managing supply chain disruptions
- Closing open findings
3. Incidence Response & Treatment
- Handling vendor incidents
- Exit strategies & Contingency planning
- Lessons learned from real breaches
- Building the program from scratch
Activity Day 2: Activity on Third-Party Vendor Risk Evaluation and Scoring
Day 2: Governance & Response
1. Contractual & Governance Controls
- Security clauses in contracts
- Data protection and privacy clauses
- SLAs, OLAs, and Right to Audit
- Role of Legal & Procurement
2. Continuous Monitoring & Supply Chain Risk Management
- Key Risk Indicators (KRIs)
- Continuous assurance vs periodic assessment
- Managing supply chain disruptions
- Closing open findings
3. Incidence Response & Treatment
- Handling vendor incidents
- Exit strategies & Contingency planning
- Lessons learned from real breaches
- Building the program from scratch
Activity Day 2: Activity on Third-Party Vendor Risk Evaluation and Scoring
Who Should Attend
Who Should Attend
GRC, Risk & Compliance Professionals
Cybersecurity & IT professionals
Vendor Risk, Procurement & Third-Party Management Professionals
Consultants, Managers & Leaders
GRC, Risk &
Compliance Professionals
Cybersecurity &
IT professionals
Vendor Risk, Procurement & Third-Party Management Professionals
Consultants, Managers &
Leaders
Why Choose TPRM Implementation Workshop?
Why Choose TPRM Implementation Workshop?
Go Beyond Compliance
Learn how to manage real vendor and supply chain risks not just tick regulatory checkboxes.
Industry-Aligned Frameworks
Gain practical exposure to ISO 27001, NIST, RBI, SEBI, GDPR, and SOC 2 requirements.
End-to-End TPRM Coverage
From vendor onboarding and risk scoring to continuous monitoring and incident response.
Ready-to-Use Blueprint
Leave with a structured TPRM roadmap, templates, and implementation approach.
Hands-On & Practical
Learn how to implement TPRM in real organizations with hands-on exercises.
Go Beyond Compliance
Learn how to manage real vendor and supply chain risks not just tick regulatory checkboxes.
Industry-Aligned Frameworks
Gain practical exposure to ISO 27001, NIST, RBI, SEBI, GDPR, and SOC 2 requirements.
End-to-End TPRM Coverage
From vendor onboarding and risk scoring to continuous monitoring and incident response.
Ready-to-Use Blueprint
Leave with a structured TPRM roadmap, templates, and implementation approach.
Hands-On & Practical
Learn how to implement TPRM in real organizations with hands-on exercises.
Trainer Details
Trainer Details
Dr. Shweta Tripathi
Subject Matter Expert – Third Party Risk Management & Cybersecurity
Dr. Shweta Tripathi is a senior cybersecurity and risk management leader, currently Deputy General Manager at Grant Medical Foundation, Ruby Hall Clinic. She brings deep expertise in information security, IT risk, governance, and ISO 27001–aligned frameworks. With prior leadership roles in cybersecurity and compliance and active knowledge sharing with communities like CyberFrat, she offers strong real-world insight into enterprise and third-party risk management.
Dr. Shweta Tripathi
Subject Matter Expert – Third Party Risk Management & Cybersecurity
Dr. Shweta Tripathi is a senior cybersecurity and risk management leader, currently Deputy General Manager at Grant Medical Foundation, Ruby Hall Clinic. She brings deep expertise in information security, IT risk, governance, and ISO 27001–aligned frameworks. With prior leadership roles in cybersecurity and compliance and active knowledge sharing with communities like CyberFrat, she offers strong real-world insight into enterprise and third-party risk management.
Frequently Asked Questions
Frequently Asked Questions
Valentine's Day Special Offer
Ready to Master TPRM?
Join the workshop and build a resilient Third Party Risk Management program.
Valentine's Day Special Offer
Ready to Master TPRM?
Join the workshop and build a resilient Third Party Risk Management program.
TPRM Workshop
TPRM Workshop
Explore Other Trainings
Upcoming Trainings
CyberFrat Private Limited centers on Risk Management, Cybersecurity, and Emerging Technologies with the primary objective to provide Advisory, Awareness & Education to businesses, OEMs & individuals to help them build intelligence that is tailored to their specific market fit and upskilling requirements.
Our Brands
Common Links
- info@cyberfrat.com
- +91 89 2700 2700
- CyberFrat, F-203, EasternBusiness District, LBS Road,Bhandup West, Mumbai - 400078
CyberFrat Private Limited centers on Risk Management, Cybersecurity, and Emerging Technologies with the primary objective to provide Advisory, Awareness & Education to businesses, OEMs & individuals to help them build intelligence that is tailored to their specific market fit and upskilling requirements.
Our Brands
Common Links
- Home
- Resources
- Events
- Terms & Conditions
- info@cyberfrat.com
- +91 89 2700 2700
- CyberFrat, F-203, EasternBusiness District, LBS Road,Bhandup West, Mumbai - 400078