Third-Party Risk Management (TPRM) Practitioner Toolkit
A practical, Excel-based toolkit for managing third-party risks throughout the supplier lifecycle. Classify suppliers, conduct due diligence, assess security controls, evaluate risks, manage findings and remediation, monitor suppliers, and document risk decisions. Includes a worked example and a step-by-step Practitioner Handbook.
The Third-Party Risk Management (TPRM) Practitioner Toolkit helps aspiring and practising GRC analysts develop hands-on experience in assessing and managing supplier risks.
The toolkit provides a structured approach to third-party risk management, from initial supplier classification and due diligence to risk assessment, treatment, ongoing monitoring and supplier exit.
Practise evaluating supplier questionnaires, reviewing supporting evidence, identifying control weaknesses, calculating inherent and residual risks, documenting risk acceptance decisions, and preparing management reports.
What's included
- Clean Excel Template: A reusable workbook containing 19 interconnected worksheets covering the supplier risk management lifecycle.
- Worked Example: A populated workbook demonstrating supplier assessments, evidence reviews, risk decisions, findings and remediation tracking.
- Practitioner Handbook: Step-by-step guidance explaining the assessment process, workbook functionality and practical exercises.
Designed for independent learning, practical workplace preparation and professional development.