TPRM Foundations: APAC Financial Services

Curriculum

Three shared foundations, then three modules built for your seat.

The first three modules are shared across all four Academy core courses, because third-party risk is a shared responsibility and the foundations are the same whichever seat you hold. Module 03 comes in two parts: the eight risk domains, then the eight lifecycle stages. Modules 04 to 06 are written for Risk and Compliance. Take the modules in the order you choose.

• WWelcome

  Welcome

  Emery welcomes you, shows you your seat at the table, and explains how the course runs and how the certificate is earned. Free to preview.

  3 min
• 01Module

  Third-Party Risk: Where It Sits, Who Owns It, and Why Now

  Emery places third-party risk inside the risks your organisation already manages, introduces the four seats at the table, and shows through three verified APAC cases why regulators are raising the standard now.

  13 min
  Shared foundation
• 02Module

  The APAC Regulators of Third Party Risk Management

  A reference module. Thirteen jurisdictions, one panel each: the regulator, the framework, the core considerations and the date that matters. Then the five obligations that recur across almost every APAC framework.

  11 min
  Shared foundation
• 03Module

  Eight Risk Domains and the Third-Party Lifecycle

  One framework, two parts. Part A: the eight risk domains, what each one covers, and the one question each raises about any third party. Part B: the eight lifecycle stages, what each is for, and how the domains and stages work together.

  22 min, two parts
  Shared foundation
• 04Module

  Policy, Ownership, Oversight and Reporting

  Built for your seat. Draw your organisation's third-party risk governance on one page: policy, owner, committee, board. What the policy must contain, who approves it, and what the committee, the board and the regulator each see.

  7 min
• 05Module

  Ongoing Monitoring and Program Maturity

  Stage seven of the lifecycle. Set a monitoring rhythm that is proportionate to classification, documented and followed. What key performance indicators (KPIs) and service level agreements (SLAs) tell you about how an arrangement is governed. Score your monitoring against the Third Party Labs maturity model and choose three priority actions.

  10 min
• 06Module

  The Contract Provisions APAC Regulators Require, and How to Find the Gaps

  Stage five of the lifecycle, seen from the risk and compliance seat. The six provisions APAC regulators expect in a material third-party contract, weak versus strong in plain language, and the method for finding gaps: map, read, rate, escalate.

  8 min

Presented by Emery, the Third Party Labs Academy presenter, speaking in the voice of Kimberly Brooks. Kimberly is the founder of Third Party Labs and wrote the course from more than 20 years in procurement and third-party risk, at Accenture and PwC and in executive roles at Commonwealth Bank and Westpac working on third-party risk transformation.