Third-Party Risk Management Training that gets everyone on the same page
When the business, program owners and the risk team all understand why third-party risk matters and what each of them owns, decisions get made sooner, issues surface earlier, and audit sees a program that actually runs.
Training a team? See organization options ↓For you
Know your part in third-party risk
Self-paced courses for everyone who touches a vendor. Learn why it matters, what your role is, and when to bring in the risk team, and earn CPE and a certificate for your resume as you go.
- Business owners
- Procurement
- Security & IT
- Finance
- CPAs & audit
- Risk professionals
For your organization
Give everyone the same playbook
Annual TPRM training where everyone who touches a vendor learns why it matters, their part in it, and when to bring in the risk team. Your people finish it, and audit gets the evidence.
- Our course, ready in a week
- Your brand on it
- Built from your program
Proud to be a Vendor Member of TPRA, supporting the advancement of Third-Party Risk Management through education and training.
A NASBA-registered CPE sponsor. Every course is built and taught by practitioners with more than 15 years in third-party risk. Visit the Third Party Risk Association →One minute on why we built Risk Tide training, and how it is different.
Built by someone who has run these programs
Garit brings more than 15 years of third-party risk experience to every course. The scenarios, checklists and language come from programs he has built and run, so you can put them to work the next day. Most risk training teaches you what risk is. We teach you what to do with it.
More about Garit and Risk Tide →“Risk Tide Solutions is a leader in understanding and addressing third-party risk management.”
“It really helped me uncover blind spots I didn’t even know I had.”
TPRM training for your whole organization
One course that gives everyone the same language for your program, in the LMS you already run. Pick how much of your program goes into it. One flat price per organization, paid by invoice.
Ready ships within a week of payment. Leave your people about two weeks to finish, and order with that in mind.
What we hear every year, and what changes
Where do I even start to request a third party?
People learn how a request moves, and who owns each step.Generic training does not fit how we work.
Branded and Custom use your terms, your contacts and your policy.We need evidence, not attendance.
Every option ends in an assessment you can hand to audit.
Ready
Live in 1 week
$9,000
Our course as it is: Why Third-Party Risk Management Really Matters, 5 modules, about 3 hours.
Branded Recommended
Live in 3 to 4 weeks
$12,000
Your brand on it: your logo, colors, images, contacts and terms, with two review rounds.
Custom
Live in 4 to 6 weeks
From$15,000
Built from your program: your policy, your tiers and your roles, with four review rounds.
Every option arrives as a SCORM file with a 12-month license, and renews at 20% off. Want NASBA CPE for your people? We can host the course on our platform.
Other ways we train teams
-
Your TPRM platform just went live
A course built on your real screens and workflow, so people learn the system they will actually use. Hosted in your LMS.
Post-implementation training → -
Live sessions for your team
Instructor-led workshops, trends and regulatory updates, run virtually or on-site and scoped to your program.
Corporate TPRM training → -
Not sure which fits
Tell us your deadline, your audience and what audit asked for. We will point you to the right option in one call.
Book a 30-minute call →
Courses you take yourself
For everyone who touches a vendor, from business owners and procurement to security, CPAs and risk teams. Start with the foundation, add a specialty for your role, or go deep on the full lifecycle.
- NASBA CPE on completion, toward credentials you already hold
- Self-study CPE with a certificate stating your hours
- Instant access: no cohort dates, no waiting
1Start here
Risk Tide Core: Why Third-Party Risk Management Really Matters
Essential TPRM concepts and the full vendor risk lifecycle in about three hours. The fastest way to earn CPE and a certificate for your resume.
- 5 modules · about 3 hours
- 12-month access · Shareable certificate
2Go deeper
Risk Tide Deep Dive: How Third-Party Risk Management Really Works
Complete vendor risk management training across the full lifecycle, including an in-depth technology enablement module and a 1:1 instructor check-in.
- 7 in-depth modules
- 30-day 1:1 check-in · Shareable certificate
3Add a specialty
About an hour each, 1 CPE, for a specific role or risk.
-
Managing Risk from AI Used by Third PartiesFind, assess and monitor AI across your vendors with the AIMED framework.
- TPRM & vendor risk
- Risk & compliance
- Audit & assurance
$79
Enroll → -
The Partnership PlaybookThe full partnership lifecycle, from the first decision to a clean exit.
- Business stakeholders
- Partnership managers
- Finance & procurement
$59
Enroll → -
TPRM Clarity for CPAsEvaluate vendor risk programs and audit TPRM as an independent arm.
- CPAs
- Internal audit
- Risk & compliance
$59
Enroll → -
Special Categories in TPRMIntermediateThe non-traditional third parties your program may be missing.
- TPRM professionals
- Risk & compliance
- Internal audit
$59
Enroll →
Questions, answered
Taking a course
Which course should I start with?
Start with Why Third-Party Risk Management Really Matters: the full vendor risk lifecycle in about three hours, with 3 CPE. Want comprehensive depth across the full lifecycle plus a 1:1 instructor check-in? Take Deep Dive. Already have the foundation? Add a one-hour specialty for your role, or get four Core courses in the bundle for $179.
Do I need prior TPRM experience?
No. Why TPRM Matters, Deep Dive and most specialty courses start from the fundamentals. The one exception is Special Categories in TPRM, which is intermediate and assumes a TPRM foundation.
Are the CPE credits NASBA-eligible?
Yes. Risk Tide is a NASBA CPE sponsor, and each course awards NASBA-eligible CPE credits you can log toward your CPA or other credentials you already hold once you complete it.
Can I report these courses as ISACA CPE if I hold CISA, CRISC, CISM, CGEIT or AAISM?
That is your determination as the certificate holder. ISACA’s policy recognizes structured self-study with no annual limit, and requires that the activity be relevant to your certification’s domains. Third-party risk is squarely in that territory, but you know your own domains best.
What we provide is the documentation: a certificate of completion showing the CPE hours earned, the course, the topic, and Risk Tide as the provider. ISACA audits a sample of reported CPE each year, so keep it. Read ISACA’s CPE policy.
How long do I have access?
It depends on the course, and each course page lists its exact access terms. Why Third-Party Risk Management Really Matters, for example, includes 12 months of access.
What counts as a third party?
Any entity with a business arrangement tied to your organization is a third party. No contract or payment is needed for the relationship to count. That covers vendors, consultants, staffing firms, IT and cloud providers, outsourced payroll or support, law firms, FinTechs, affiliates and joint ventures.
Your customers and your regulators are not third parties. The subcontractors your vendors hire are fourth parties: they still carry risk, and you manage it through your direct vendor.
Training your organization
What is the difference between Ready, Branded and Custom?
Ready is our course, Why Third-Party Risk Management Really Matters, as it is. Branded is the same course with your logo, colors, images, contacts and terms. Custom rebuilds the content around your policy, your tiers and your roles. Branded changes how it looks and who it sends people to. Custom changes what it teaches.
How fast can we have it?
Ready ships within a week of payment. Branded takes 3 to 4 weeks and Custom 4 to 6. Leave your people time to finish before your deadline, usually two weeks, and order with that in mind.
How do we buy it?
Send the order form on the annual training page. Within one business day we send an invoice with a payment link for card or ACH. If you need a purchase order first, tell us and we send a quote and our W-9 instead.
Do our people earn CPE?
When we host the course, yes. Risk Tide is a NASBA-registered CPE sponsor, so when the course runs on our learning platform we track completion and issue NASBA CPE certificates. When it runs in your own LMS, CPE is not included, and your organization would need to have it cleared for CPE itself.
Can you train our team live instead?
Yes. We run instructor-led workshops and trends and regulatory sessions, virtually or on-site, and build post-implementation training when a new TPRM platform goes live. See corporate TPRM training, or book a 30-minute call to scope it.
Earn CPE this week, or train your team before the deadline
Practical third-party risk training from people who have run these programs, for you or for your whole organization.
Not sure which fits? Book a 30-minute call
ISACA Accredited Training Organization
NASBA National Registry of CPE Sponsors
TPRM TRAINING
