Third-Party Risk Management Training
Practitioner-built TPRM courses, online and in-person. Earn CPE credits and build vendor risk management skills you can put to work the next day, whether you’re new to TPRM or sharpening an expert edge.
Choose your TPRM course
Self-paced online courses you can start today. More launching soon.
Risk Tide Core: Why Third-Party Risk Management Really Matters
Essential TPRM concepts and the full vendor risk lifecycle in about three hours. The fastest way to earn CPE and a certificate for your resume.
- 5 modules · ~3 hours
- 12-month access · Shareable certificate
Risk Tide Deep Dive: How Third-Party Risk Management Really Works
Complete vendor risk management training, including an in-depth technology enablement module and a 1:1 instructor check-in.
- 7 in-depth modules
- 30-day 1:1 check-in · Shareable certificate
Risk Tide Core: Managing Risk from AI Used by Third PartiesFind, assess, and monitor AI across your vendors
AI is already in your vendor ecosystem, and most TPRM programs were not built to catch it. Learn to find, assess, and monitor it through a third-party risk lens with Risk Tide’s AIMED framework. No data-science background needed.
- 4 modules · ~1 hour
- Lifetime access · Shareable certificate
Risk Tide Core: The Partnership PlaybookBuilding partnerships as third-party relationships
Navigate the full third-party partnership lifecycle, from the first decision to a clean exit, in about an hour. Built for business teams who choose and manage partners, not just compliance.
- 4 modules · ~1 hour
- Lifetime access · Shareable certificate
Risk Tide Core: TPRM Clarity for CPAsThird-party risk management built for CPAs and auditors
CPAs are increasingly on the front lines of third-party risk, but most TPRM training was not built for them. Learn to evaluate vendor risk programs, meet regulatory expectations, and audit a TPRM program as an independent arm, in about an hour.
- 4 modules · ~1 hour
- On-demand access · Shareable certificate
Risk Tide Core: Special Categories in TPRMNon-traditional third parties your program may be missing
Not every third-party relationship fits neatly into your program, and the ones that do not are where oversight quietly breaks down. Learn to find them, run them through the lifecycle, and govern the category, in about an hour. Builds on a TPRM foundation.
- 4 modules · ~1 hour
- On-demand access · Shareable certificate
Training that counts with auditors and employers
Senior-level TPRM training, built by people who do the work
Every course is built and taught by working third-party risk practitioners, not academics.
Senior-level training at a fraction of what traditional courses and bootcamps charge.
Pick up NASBA-eligible CPE credits in hours, not weeks, on your own schedule.
Real scenarios, checklists and language you can apply to your program immediately.
Why we built Risk Tide TPRM training
One minute on what makes Risk Tide different: practical, practitioner-built training your team can put to work the next day.
Learn from a practitioner, not a textbook
Garit brings more than 15 years of industry experience to every Risk Tide course. He combines real-world insight with practical application to create engaging sessions that challenge perspectives and prepare professionals to lead with confidence.
“Most risk training teaches you what risk is. We teach you what to do with it.”
Understand third-party risk across the full vendor lifecycle
Earn your CPE and certificate in three steps
Pick your course and get instant access. No waiting, no cohort dates to chase.
Work through focused modules and real scenarios whenever it suits you.
Finish, claim your NASBA-eligible CPE, and get a shareable certificate.
Continuing education you can count on
Risk Tide is a NASBA CPE sponsor, so the time you invest counts as continuing education toward the credentials you already hold. If you hold CISA, CRISC, CISM, CGEIT, or AAISM, ISACA’s policy recognizes structured self-study with no annual limit, and you decide whether a given course fits your domains. Our certificate gives you the documentation either way.
Every course awards NASBA-eligible CPE credits on completion, ready to log toward your CPA or other certifications.
Online, self-study format you complete on your own schedule, with progress saved as you go.
Receive a shareable certificate of completion you can share on LinkedIn and add to your resume.
Questions, answered
What is third-party risk management (TPRM)?
Third-party risk management is how you understand and manage the risk that comes with the outside organizations you rely on. A strong program does three things: it identifies and manages risk before you sign, it holds vendors and internal owners accountable for what was promised, and it keeps the business running when something goes wrong. It is not a compliance exercise. It protects your organization, your customers, and your reputation.
What counts as a third party?
A third party is any entity, individual, or organization that enters into a business arrangement with your organization to provide products or services. No contract or payment is required for the relationship to count.
In scope: vendors, consultants, staff augmentation firms, IT and cloud providers, outsourced payroll or support, law firms, FinTechs, affiliates, and joint ventures.
But here is the critical distinction. Your customers and your regulators are not third parties. And the subcontractors your vendors hire are fourth parties, not third parties, unless they contract with you directly. Fourth parties still carry risk. You manage it through your direct vendor.
Which course is right for me?
Start with Risk Tide Core: Why Third-Party Risk Management Really Matters for a fast, practical foundation and 3 CPE in about three hours. Take Risk Tide Core: The Partnership Playbook to manage partnerships and other third-party relationships with confidence in about an hour. Choose Deep Dive for comprehensive coverage, 7 CPE and a 1:1 instructor check-in. Prefer in-person? Register interest for Risk Tide Labs.
Are the CPE credits NASBA-eligible?
Yes. Risk Tide is a NASBA CPE sponsor, and each course awards NASBA-eligible CPE credits you can log toward your CPA or other certifications once you complete it.
Can I report these courses as ISACA CPE if I hold CISA, CRISC, CISM, CGEIT, or AAISM?
That is your determination as the certificate holder, and we would rather point you at the rule than make the call for you. ISACA’s policy recognizes structured self-study courses with no annual limit on them, and requires that the activity be relevant to your certification’s domains. Third-party risk is squarely in that territory, but you know your own domains best. What we provide is the documentation: a certificate of completion showing the CPE hours earned, the course, the topic, and Risk Tide as the provider. ISACA audits a sample of reported CPE each year, so keep it. Read ISACA’s CPE policy and decide for yourself.
How long do I have access?
Access varies by course. Risk Tide Core: Why Third-Party Risk Management Really Matters includes 12-month access, while The Partnership Playbook includes lifetime access. The exact terms for each course are listed on its course page.
Do I get a certificate?
Yes. Every course gives you a shareable certificate of completion you can add to LinkedIn and your resume.
Do I need prior TPRM experience?
No. Every self-paced course starts from the fundamentals. Risk Tide Core builds the full vendor risk lifecycle, The Partnership Playbook covers managing third-party partnerships, and Deep Dive goes further for those who want comprehensive, role-ready depth.
Can you train my whole team?
Yes. We offer corporate and team training tailored to your program. Book a time with our team to scope it.
Earn your CPE with TPRM training you’ll actually use
Practical third-party risk skills, NASBA-eligible CPE, and a certificate for your resume. Pick your course and start in minutes.
Need TPRM training for your organization?
These are the requests we hear most. Pick the one that fits and book a time with our team to scope it.
Popular courses
Pages