Risk and Compliance

You design the third-party risk program, set the standard and challenge the rest of the organisation when it is not met. You hold the view across every arrangement, which makes you the seat most likely to see a gap before it becomes an incident.

3.5 hours of continuing professional development (CPD) · Certificate on passing · Checkout in Third Party Labs Academy

Risk and ComplianceProcurementand SupplyChainResponsiblePartyThird Party
Your seat and the two gaps it shares

When this seat works

Some roles are held by the same person. Each one still needs someone doing it. When someone does, this is what the organisation gets.

  • One standard, applied the same way by every team.
  • A view across every arrangement, so concentration risk and regulatory triggers are seen early.
  • Clear accountability for the program as a whole.

Where your seat meets the other three

These are the gaps your seat shares. Close them and the arrangement holds.

  • Procurement and Supply Chain

    Procurement is the front door. Agree the risk questions that must be answered before a third party is selected, not after the contract is signed.

  • Responsible Party

    The Responsible Party owns the arrangement day to day. Agree who monitors what, how often, and who reports it to the board.

  • Third Party

    The third party runs the controls. Set the evidence you will accept, so monitoring does not rest on self-reported answers.

The course built for your seat

TPRM Foundations: APAC Financial Services

Written by Kimberly Brooks, founder of Third Party Labs

By the end of the course you will be able to:

  • Describe the governance a credible program needs (policy, ownership, committee oversight and board reporting) and set out what Asia-Pacific (APAC) regulators require at each level.
  • Set a monitoring rhythm that is proportionate to classification, explain the role key performance indicators (KPIs) and service level agreements (SLAs) play, and score your monitoring against the Third Party Labs maturity model.
  • Identify the contract provisions APAC regulators require for material arrangements, and review a contract for the gaps that create regulatory exposure.

See every module

Core course

AUD249

One payment. Access for 6 months from the day you enrol.

  • Format8 videos, about 75 minutes
  • IncludesCourse e-book with the working tools
  • Coverage13 APAC jurisdictions
  • CPD3.5 hours (4.25 CPE for ISACA members)
  • Assessment20 questions, 70 percent to pass
  • CertificateOn passing
  • Access6 months from enrolment
  • PreviewWelcome section, free with an account
Enrol now

You check out and learn in Third Party Labs Academy, our course platform. An invoice is emailed after purchase; add your organisation’s name at checkout. No refunds for change of mind; your rights under the Australian Consumer Law are not affected. Prices in Australian dollars; no goods and services tax (GST) is charged.

Content last updated September 2026

Can I see it before I buy?

Yes. The Welcome section is free to preview once you create an Academy account.

How long do I have access?

Six months from the day you enrol, for one run through the course. That includes three attempts at the final assessment.

Can I get an invoice for my employer?

Yes. An invoice is emailed after purchase. Add your organisation’s name at checkout so it appears on the invoice. Buying for five or more people? See the team seats.

What happens after I enrol?

You create your Academy account at checkout, and the course opens in Third Party Labs Academy at academy.3rdpartylabs.com. Sign in there any time during your 6 months.

Where is my data held?

Your Academy account and learning record are held by LearnWorlds, which is ISO 27001 and SOC 2 certified. Payments go through Stripe, so your card details never reach us or LearnWorlds. See Our third parties.

What if I change my mind?

We do not offer refunds for change of mind. Your rights under the Australian Consumer Law are not affected. See our refund terms.

How do I record the CPD hours?

Your certificate states the hours. Log them with your professional body under its own rules for structured, assessed learning.

Start this week, free

The eight questions

Pick one third party you know. Ask one question per risk domain of the person who should know the answer, and record what you heard: a clear answer, a claim, or silence.

Run the check

The Lab Brief

What changed in APAC third-party risk regulation, which regulator it applies to, and what to do about it this month. Fortnightly and free.

Not your seat?

Take your seat.

TPRM Foundations: APAC Financial Services. AUD 249, 6 months’ access, certificate on passing.