KR eCampusCourses coming soon

KR ECAMPUS

Choose your country

Select your country to switch to the right eCampus site.

Back to courses

Advanced · Self-paced learning

Managing ICT Third-Party Risk

Inquiry This course is not yet bookable.

Assess an ICT supplier and decide what evidence your organisation needs for the service, who checks it and what happens if it is missing.

In the case, the supplier provides a certificate for its data centre, but the service and a subcontractor fall outside its scope. Check what the document actually covers and compare further review, restricted use and switching supplier, taking available replacement capacity into account. Specify who obtains missing evidence, by when, and what happens if it remains unavailable. Check a later submission against its period, service and content, then revise the control plan.

Work with your own service or the substitute case. Take away your control sheet with deadlines, responsibilities and escalation steps. The method can be used internationally; sectoral and regional requirements must be established separately for the intended use.

What you will work on

  • Assess an ICT service's dependencies and associated risks
  • Assign controls, suitable evidence and responsible roles
  • Distinguish relevant from irrelevant evidence by its scope

Who it is for

  • Strategic ICT procurement professionals
  • IT service owners
  • Risk managers

Topics

  • Service criticality, data access and protection objectives
  • Subcontracting and provider concentration
  • Evidence and control effectiveness
  • Residual risk and decision rights
  • Change, exit and escalation

Your result

Your supplier control sheet records required evidence and deadlines, who checks it and how gaps are escalated.

Prerequisites

Basic procurement, IT management or risk management knowledge and access to essential information about one ICT service. Confidential contracts are unnecessary; a substitute case is planned if access is unavailable.

Format and approach

Planned: 5–6 hours of self-study. Work through case decisions and templates, with explanatory self-checks.

Planned learning time: 5–6 hours

Enquire about this course