Third-Party Risk, End to End
The whole supplier lifecycle, not the questionnaire. Finding the suppliers nobody told you about, deciding how much diligence each one is worth, getting the few clauses that matter, reading the evidence that keeps arriving, finding the four suppliers who turn out to be one, and getting out cleanly.
- trending_upIntermediate
- schedule7h 21m
- menu_book12 lecciones
- publicEnglish
- workspace_premiumBasic
Briefing
Somebody in your organisation has bought something this month that holds customer data, and procurement has never heard of it. It was thirty pounds on a card, it was signed up for with a work email address, and there is no contract. That supplier is now inside your risk position and outside your register. Most third-party risk work fails there, before any questionnaire is sent. This segment is the lifecycle. You build a register from the card statement and the sign-in logs rather than from procurement, because those two sources know things procurement does not. You write a tiering rule that decides for you, so the level of diligence a supplier gets is not negotiated afresh every time somebody is in a hurry. You cut a question set down until it is short enough to actually come back, and you learn what a returned questionnaire is: a statement of intent, written by somebody who wants the deal, about a state of affairs nobody independent has checked. You get the handful of contract clauses that change what happens on a bad day, and you leave the rest to counsel, because contracts are legal territory and this segment says so in every lesson that touches one. You then handle nine months of evidence arriving at a mailbox nobody reads. Finally you map what is behind your suppliers, discover that four of them stop at the same moment for the same reason, and write an exit plan for the one you are leaving, whose administrator account is still active five months after the contract ended. A programme that produces a two-hundred-question spreadsheet has failed. It has externalised weeks of work onto suppliers who cannot afford it, selected for the ones with a compliance team rather than the ones with good practice, and produced no decision anybody changed. The test applied throughout this segment is narrower and harder: what would this question, if answered honestly, change about what we do? If the answer is nothing, the question comes out. You finish with five artefacts: a supplier register with owners and review dates, a written tiering rule, a question set of fifteen with a closing artefact against each one, a clause list with what each clause buys you, and an exit plan. None of them is long. All of them are the sort of thing that has to survive somebody else picking it up while you are on holiday. Every money figure, count and date in this segment is illustrative. The numbers are shaped so the arithmetic behaves realistically; none of them is a claim about what anything costs or how long anything takes in the real world. Nothing in this segment is legal advice: contract and data-protection content is legal territory, and the learner's own counsel decides.
Temario del curso · 4 módulos
lockSe desbloquea con acceso- 01 El Registro, Construido a Partir de Lo que Puedes Ver3 lecciones·1h 36m
Si le pides a adquisiciones la lista de proveedores, obtendrás una lista de cosas compradas a través de adquisiciones. Ese no es el mismo conjunto. El extracto de tarjeta conoce los cargos…
- 02 ¿Cuánto Esfuerzo Vale la Pena?3 lecciones·1h 59m
El proveedor de cuatro personas no puede responder doscientas preguntas. Lo intentará, se tomará siete semanas en ello, responderá sesenta, y lo aprobarás de todas formas porque el proyecto los…
- 03 El contrato y la evidencia que sigue llegando3 lecciones·1h 40m
Una cláusula no detiene el incidente. Lo que te compra es notificación, un derecho de evidencia, y una salida. Eso vale la pena tener y vale la pena saber qué es, porque un derecho de auditoría que…
- 04 Terceras partes, concentración y desvinculación3 lecciones·2h 6m
Tienes cuatro proveedores en cuatro funciones y estás cómodo porque eso es diversificación. Luego lees las cuatro listas de subprocesadores y tres de ellas están en el mismo lugar. La concentración…
Preguntas frecuentes
- ¿Qué aprenderé en Third-Party Risk, End to End?
- The whole supplier lifecycle, not the questionnaire. Finding the suppliers nobody told you about, deciding how much diligence each one is worth, getting the few clauses that matter, reading the evidence that keeps arriving, finding the four suppliers who turn out to be one, and getting out cleanly.
- ¿Necesito experiencia previa?
- Se recomienda tener conocimientos previos antes de empezar Third-Party Risk, End to End.
- ¿Cuánto tiempo lleva completar Third-Party Risk, End to End?
- Third-Party Risk, End to End incluye 4 módulos y 12 lecciones. Aprendes a tu propio ritmo.
- ¿Cómo obtengo acceso?
- Third-Party Risk, End to End está incluido en cualquier suscripción de pago.
Más en Programación
