Four seats.
One table.
Working together.
Third-party risk in financial services is shared by four seats: Risk and Compliance, Procurement and Supply Chain, the Responsible Party (the business owner who needs the service) and the Third Party itself. Problems start in the gaps between them. We train each seat so all four work as one.
Two courses open now, AUD 249 eachCertificate on passing
The gaps, where things go wrong
Which seat do you sit in?
Pick the one that sounds like your job. Each seat has its own page: what the seat delivers when it works, where it meets the other three, and the course built for it.
- Risk and Compliance I design the program and answer the regulator When this seat works: one standard, one view across every arrangement, and concentration risk is seen early. Course openSee your seat
- Procurement and Supply Chain I source, contract and onboard third parties When this seat works: risk is assessed before the contract is signed, while it still has leverage. Course openSee your seat
- Responsible Party I need the service and own the relationship When this seat works: the organisation sets the terms of the relationship and someone decides. Course in productionSee your seat
- Third Party I provide services to a financial institution When this seat works: subcontracting chains are visible and monitoring runs on current evidence. Course in productionSee your seat
You lead the function. You need all four seats working together.
For chief risk officers, chief procurement officers and heads of third-party risk: team seats across every seat, a course built on your own policy, and, coming soon, a self-assessment of your program.
Each seat does its job. The risk sits between them.
Regulators across Asia-Pacific (APAC) expect all four seats to work from the same picture. Most failures are not one team getting it wrong. They are two teams each assuming the other had it covered. The examples below are illustrative.
-
Risk and ComplianceandProcurement and Supply Chain
The contract is signed before the risk assessment is finished, so the clauses that make oversight possible are missing.
-
Responsible PartyandRisk and Compliance
The business owner thinks the risk team is monitoring the third party. The risk team thinks the business owner is.
-
Third PartyandProcurement and Supply Chain
The third party subcontracts part of the service. Nobody at the organisation knows that subcontractor, the fourth party, exists.
-
Responsible PartyandThird Party
The third party has an outage. The business owner hears about it from their own staff, days before the third party reports it.
Every core course includes
- Eight videos, about 75 minutes in total, taken at your own pace and in the order you choose
- Shared foundations, so every seat speaks the same language, then modules built for your seat
- A course e-book with the working tools taught in each module
- 13 Asia-Pacific (APAC) jurisdictions, each traced to the regulator’s own publication
- A graded final assessment and a certificate when you pass
- 3.5 hours of continuing professional development (CPD) across the videos, course e-book and graded assessment
Core course
AUD249
One payment. Access for 6 months from the day you enrol.
- Risk and ComplianceEnrol
- Procurement and Supply ChainEnrol
- Responsible PartyIn production
- Third PartyIn production
6 months’ access for one run through the course. Enrol shows the full terms before checkout in Third Party Labs Academy, our course platform. Buying for five or more people? See the team seats.
Current today. Kept current.
Regulation in this region moves, and the courses move with it.
- Updated when the rules changeModules are revised when a regulator changes its requirements.
- New releases on a regular cadenceCountry deep dives and emerging-risk modules, added over time.
- Built around your topicCustom courses for your organisation, on your own policy.
Built by a practitioner who has sat at the table.
Kimberly Brooks
Founder, Third Party Labs
More than 20 years in procurement and third-party risk, at Accenture and PwC and in executive roles at Commonwealth Bank and Westpac working on third-party risk transformation.
Kimberly started Third Party Labs because the same problem showed up in every program: capable teams, each in their own seat, with the risk falling between them. Academy courses are presented by Emery, our presenter, speaking in Kimberly’s voice.
Questions before you enrol
Does it count towards my CPD?
Yes. Both open courses carry 3.5 hours of continuing professional development (CPD), and TPRM Foundations, our third-party risk management (TPRM) course, also carries 4.25 continuing professional education (CPE) hours for ISACA members. Your certificate records the hours. Check your professional body’s rules for how to log them.
Does it cover my country?
The courses cover 13 APAC jurisdictions: Australia, Singapore, Hong Kong, New Zealand, Malaysia, Japan, India, China, South Korea, Indonesia, the Philippines, Thailand and Taiwan.
How do you keep it current?
Modules are updated when a regulator changes the rules, and new modules are released on a regular cadence, including country deep dives and emerging-risk content. Every regulatory statement is traced to the regulator’s own publication.
How long do I have access?
Six months from the day you enrol, for one run through the course. That includes three attempts at the final assessment.
Can I see it before I buy?
Yes. The Welcome section of each course is free to preview once you create an Academy account.
Can my team buy seats together?
Yes. If you are buying for five or more people, email hello@3rdpartylabs.com and we will set up team seats. See the options for leaders.
Can you build a course on our own policy?
Yes. Academy Custom builds a course from your own policy and documents, hosts it on the Academy and reports completions to you. Fixed scope, fixed price, from AUD 1,900. See the packages.
Do I get the templates when I buy a course?
Each course includes a course e-book with the working tools taught in the modules. The editable templates in The Lab Vault are sold separately and are in production. Join the waitlist to hear when each one opens.
Take your seat.
Start with the course for your seat, or bring your whole team to the table.
Leading a team? Options for leaders
Not ready yet? Get The Lab Brief: what changed in APAC third-party risk regulation and what to do about it, fortnightly and free.
Free. Unsubscribe any time. See our Privacy Policy.