Risk Tide Core
A growing series of short, self-paced TPRM courses.
Earn NASBA-eligible CPE, build real third-party risk management skills, and add a practical certificate to your resume, one focused course at a time. Start with a single course or work through the whole series at your own pace.
Choose your Risk Tide Core course
Self-paced online courses you can start today. More launching soon.
Why Third-Party Risk Management Really Matters
Essential TPRM concepts and the full vendor risk lifecycle in about three hours. The fastest way to earn CPE and a certificate for your resume.
- 5 modules · ~3 hours
- 12-month access · Shareable certificate
The Partnership PlaybookBuilding partnerships as third-party relationships
Navigate the full third-party partnership lifecycle, from the first decision to a clean exit, in about an hour. Built for business teams who choose and manage partners, not just compliance.
- 4 modules · ~1 hour
- Lifetime access · Shareable certificate
Managing AI Risk in Third-Party RelationshipsFind, assess, and monitor AI across your vendors
AI is already in your vendor ecosystem. Learn to find, assess, and monitor it through a third-party risk lens with Risk Tide’s AIMED framework, in about an hour. No data-science background needed.
- 4 modules · ~1 hour
- Lifetime access · Shareable certificate
Be first to know about new courses
More self-paced TPRM courses are on the way, including TPRM for CPAs and TPRM Special Categories. Follow us on LinkedIn or join The Current, our newsletter, to hear the moment they launch.
Inside Risk Tide Core: Why TPRM Really Matters
A self-paced online third-party risk management course that takes you through the full vendor risk lifecycle in about three hours. Across five practical modules you will learn why TPRM drives business value, how the lifecycle works from planning to termination, how governance holds up under pressure, and where the field is heading. Earn 3 NASBA-eligible CPE credits and a shareable certificate.
What you will cover
The Big Picture: Why TPRM Matters
Why third-party risk management is a business imperative, not a compliance checkbox. Define what counts as a third party, see how TPRM protects business value and creates competitive advantage, and balance competing stakeholder priorities.
The TPRM Lifecycle: From Need to Termination
Walk the five phases of the vendor risk lifecycle: planning and inherent risk, due diligence, contracting, ongoing monitoring, and a graceful exit. Learn the essential contract clauses and the early warning signs that matter.
Governance & Crisis Management: When Things Go Wrong
Apply the Three Lines Model, tell a routine finding from a formal issue, and escalate by risk tier. Build the governance and crisis response that holds up under pressure and meets regulator expectations.
Trends & the Future of TPRM
Where TPRM is heading: technology enablement and continuous monitoring over point-in-time reviews, assessing AI and emerging risks, and keeping pace with regulations that now have teeth.
Bringing It All Together: Your TPRM Playbook
Turn principles into practice. Build a true partnership between the business and TPRM, recognize the moments that matter, and apply TPRM thinking to the real vendor scenarios you will actually face.
See exactly what the course looks like
Before you enroll, take a quick walkthrough of Risk Tide Core. This is the real thing: the lesson format, how each module flows, and the kind of practical vendor scenarios you will work through. Know the look and feel before you sign up.
A walkthrough of Risk Tide Core: Why TPRM Really Matters. The full course is 5 modules, about 3 hours, 3 NASBA-eligible CPE credits.
Inside The Partnership Playbook
Learn to manage third-party partnerships as the strategic relationships they are. In about an hour across four modules, you will decide whether to pursue a partnership, run right-sized due diligence with the S.I.M.P.L.E. framework, put the right agreement in writing, and keep the relationship healthy through monitoring and a clean exit. Built for business, not just compliance. Earn 1.1 NASBA-eligible CPE credit and a certificate.
What you will cover
The Decision
Approach a new partnership deliberately. Tell a partnership mindset from a checkbox mentality, and assign ownership before you commit.
Due Diligence
Use the S.I.M.P.L.E. framework for focused, risk-based vetting that surfaces real control gaps, not paperwork.
The Agreement
Turn risk findings into clear, enforceable terms covering deliverables, data handling, and accountability for any arrangement.
Relationship Health
Design tiered oversight, spot early warning signs, and plan a clean exit before you need one.
Inside Managing AI Risk in Third-Party Relationships
AI is already in your vendor ecosystem, and most third-party risk programs were not built to catch it. The risk does not begin when a vendor sets out to build a model. It begins when AI quietly shows up inside tools you already use. This practical, foundational course gives you the frameworks to find, assess, and monitor AI across your vendors through a third-party risk lens. It is built around AIMED, Risk Tide’s framework for evaluating AI vendor risk, and you do not need a data-science background to use it. Earn 1 NASBA-eligible CPE credit and a certificate.
What you will cover
AI 101Foundations
See what makes AI-related third-party risk different from traditional vendor risk, the common categories and model types of AI in vendor relationships, and why existing vendor inventories often fail to capture them.
AI Governance FrameworkGovernance
Define the core components of an AI governance framework, how policy, process, and procedures work together, and what sets AI governance apart from existing third-party frameworks.
AI Assessment in ActionAssessment
Identify where AI exerts influence along the TPRM lifecycle, and see how each component of AIMED maps to the appropriate stage of that lifecycle.
Monitor, Report, RepeatMonitoring
Recognize why continuous, event-driven monitoring is required for AI vendors, identify the signals for reassessment, and let your governance framework dictate what to monitor and report.
Who is this for?
Risk Tide Core is built for anyone who chooses, manages, or oversees third-party relationships, whatever your title.






Common roles in our courses include:
Garit Gemeinhardt
Co-Founder & Head of Learning Experiences
Garit brings more than 15 years of industry experience into every training. He combines real-world insight with practical application to create engaging sessions that challenge perspectives and prepare professionals to lead with confidence.
More about the Risk Tide team →“Most risk training teaches you what risk is. We teach you what to do with it.”
Training your stakeholders or TPRM team?
Many organizations want their stakeholders and third-party risk teams trained together, on their own program and vendors. We build private, tailored sessions around your business and deliver them online or on-site, with volume pricing for groups.
Team Training? We've Got You Covered.
Popular courses
Pages
Who we are
contact@risktide.com
