DR-301Third-party riskExpertPaid
ICT third-party risk and register of information
The most underestimated deliverable in the regulation
Build and maintain the register of information, assess concentration, bring contracts into line with Article 30, and document testable exit strategies.
3
lessons
39 min
estimated time
3
standards cited
Learning objectives
- Produce a register matching the authorities' template
- Assess and document concentration risk
- Upgrade a contract portfolio
- Draft and test an exit strategy
Intended audience
- Procurement
- Legal
- Compliance
- Third-party risk
Prerequisites
- ICT risk management framework
Detailed curriculum
Module 1
Register, concentration, contracts
The real work behind Chapter V.
Module 2
Concentration and exit
Article 29 and upgrading an existing contract portfolio.
Assessment method
Self-check questions throughout the lessons, with no recorded score. Where an associated track leads to a certification, that certification has a separate exam.
Document issued
This course does not, on its own, lead to a certificate. A track certification, where one exists, is issued after its exam is passed.
Continuity & Resilience editorial team