Skip to content

Supplier Risk Management & Due Diligence Training Course

Manages supplier risk across the whole supply base and lifecycle: identifying and rating risks, monitoring critical suppliers and planning continuity and exit.

PRG · Procurement Risk, Compliance & GovernanceAll Levels#2202ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Course Overview

The Supplier Risk Management & Due Diligence Training Course equips procurement, supply chain, compliance, and risk professionals to manage supplier risk across the entire supply base and throughout the supplier lifecycle: identifying risks, assessing and rating them, building protections into contracts, monitoring suppliers over time, and planning for continuity and exit when a critical supplier fails. Government entities, ministries, banks, oil and gas companies, and large corporations depend on external suppliers for critical goods, services, technology, and expertise. When a key supplier fails financially, breaches regulations, suffers a cyber incident, or cannot deliver, the consequences fall directly on the organization in the form of service disruption, financial loss, legal liability, and reputational damage. Due diligence is treated here as one stage of that lifecycle, not the whole of it. Many organizations still treat supplier due diligence as a one-time registration exercise focused on documents and certificates. Risk assessments may apply the same level of scrutiny to every supplier regardless of criticality, beneficial ownership and sanctions exposure may not be verified, financial health may be checked only at onboarding, and warning signs may go unnoticed during the contract period. Responsibility for supplier risk may be divided between procurement, compliance, legal, IT security, and business units without clear coordination, leaving gaps in oversight. This course provides a practical, lifecycle-based approach to supplier risk management and due diligence. Participants learn how to segment suppliers by criticality and inherent risk, design proportionate due diligence, and assess suppliers across key risk dimensions, including financial stability, operational capability, legal and regulatory compliance, anti-bribery and corruption, sanctions and export controls, cybersecurity and data protection, environmental, social, and governance factors, geopolitical exposure, and dependency and concentration risk. The program covers practical due diligence techniques such as structured questionnaires, document verification, beneficial ownership checks, sanctions and adverse media screening, financial analysis, site visits and audits, and enhanced due diligence for high-risk suppliers. It also addresses risk rating models, contractual protections, ongoing monitoring and trigger events, remediation and exit planning, and governance and reporting of supplier risk. Throughout the five days, participants apply each tool to suppliers and categories from their own organizations. They leave with a supplier segmentation model, a due diligence questionnaire and checklist, a supplier risk rating tool, a red flags guide, a monitoring and trigger event plan, and a supplier risk management implementation plan.

Learning Objectives

  • Analyze the sources and consequences of supplier and third-party risk and their link to organizational objectives on Day 1.
  • Evaluate the participant's current supplier onboarding, due diligence, and monitoring practices and identify priority gaps.
  • Develop a supplier segmentation model that classifies suppliers by criticality, spend, dependency, and inherent risk.
  • Design a proportionate due diligence approach that applies standard, simplified, and enhanced checks based on supplier risk level.
  • Apply structured assessment methods across financial, operational, compliance, anti-bribery, sanctions, cybersecurity, data protection, ESG, and geopolitical risk dimensions.
  • Implement practical due diligence techniques, including questionnaires, document verification, beneficial ownership checks, and sanctions and adverse media screening.
  • Analyze supplier financial statements and indicators to assess financial stability and early signs of distress.
  • Develop a supplier risk rating model that combines inherent risk, control effectiveness, and residual risk.
  • Evaluate contractual protections, including audit rights, compliance obligations, data protection clauses, subcontracting controls, and termination rights.
  • Design ongoing monitoring arrangements with key risk indicators, reassessment frequencies, and trigger events.
  • Develop remediation, contingency, and exit plans for high-risk and critical suppliers.
  • Design a supplier risk management implementation plan with governance, roles, and reporting by the end of Day 5.

Who Should Attend

This course is designed for procurement and supply chain managers, category managers, supplier relationship managers, vendor management and supplier onboarding teams, and contracts managers responsible for selecting and managing suppliers. It is also highly relevant for third-party risk managers, compliance and anti-bribery officers, sanctions and financial crime professionals, risk managers, and internal auditors who oversee supplier and third-party exposure. It is particularly valuable for professionals in ministries and government entities responsible for supplier qualification, integrity checks, and continuity of public services; in banks and financial institutions managing outsourcing and third-party risk in line with regulatory expectations, including technology and cloud service providers; and in oil and gas and industrial organizations managing contractors, critical equipment suppliers, international supply chains, and suppliers operating in high-risk environments. Information security, data protection, legal, finance, and business continuity professionals who contribute to supplier assessments, as well as business unit managers who own critical supplier relationships, will also benefit from the course.

Learning Outcomes

  • By the end of the course, participants will be able to:
  • Explain the main categories of supplier and third-party risk and how they can affect their organization.
  • Segment their supplier base to focus due diligence and monitoring where risk is highest.
  • Determine the appropriate level of due diligence for different suppliers and engagements.
  • Design and use supplier due diligence questionnaires and verification checklists.
  • Verify supplier identity, ownership, and control, including beneficial ownership.
  • Conduct sanctions, watchlist, and adverse media screening and interpret the results.
  • Assess supplier financial health using key financial ratios and warning signs.
  • Evaluate supplier cybersecurity, data protection, and ESG practices at a practical level.
  • Assign consistent supplier risk ratings and document the rationale for decisions.
  • Recommend contractual clauses that manage identified supplier risks.
  • Monitor critical suppliers and respond to trigger events and emerging risks.
  • Prepare remediation and exit plans and report supplier risk clearly to management.

Course Outline

Course Outline:

Day 1

Foundations of Supplier Risk Management

  • The strategic importance of supplier and third-party risk
  • Supplier risk within enterprise risk management and procurement governance
  • The supplier risk management lifecycle: identify, assess, contract, monitor, and exit
  • Roles of procurement, compliance, legal, IT security, finance, and business owners
  • Practical application: participants assess their current supplier risk practices and identify priority gaps
Day 2

Supplier Segmentation and Risk Dimensions

  • Supplier segmentation by criticality, spend, dependency, and inherent risk
  • Key risk dimensions: financial, operational, legal, compliance, and reputational
  • Anti-bribery and corruption, sanctions, and export control risks
  • Cybersecurity, data protection, ESG, geopolitical, and concentration risks
  • Practical application: participants segment a supplier portfolio and identify critical and high-risk suppliers
Day 3

Conducting Supplier Due Diligence

  • Designing proportionate due diligence: simplified, standard, and enhanced
  • Due diligence questionnaires, document verification, and references
  • Beneficial ownership checks, sanctions screening, and adverse media screening
  • Financial analysis of suppliers and early warning signs of distress
  • Practical application: participants conduct due diligence on case study suppliers and identify red flags
Day 4

Risk Rating, Contracting, and Mitigation

  • Building a supplier risk rating model: inherent risk, controls, and residual risk
  • Site visits, supplier audits, and capability assessments
  • Contractual protections: audit rights, compliance obligations, data protection, subcontracting, and termination
  • Risk mitigation, remediation plans, and approval of high-risk suppliers
  • Practical application: participants rate supplier risks and recommend contractual and mitigation measures
Day 5

Monitoring, Continuity, Governance, and Implementation

  • Ongoing monitoring, key risk indicators, reassessment cycles, and trigger events
  • Supplier performance, incident management, and escalation
  • Business continuity, contingency, and exit planning for critical suppliers
  • Supplier risk governance, reporting, and use of data and technology
  • Final workshop: participants finalize a monitoring plan and a supplier risk management implementation plan for their organization

Upcoming Dates

Selected date

Amsterdam · 25 – 29 Jan 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
MakkahScheduled
2 – 6 Nov 2026€4,200—
ManamaScheduled
9 – 13 Nov 2026€4,700—
IstanbulScheduled
16 – 20 Nov 2026€4,700—
MilanScheduled
16 – 20 Nov 2026€6,000—
MunichScheduled
23 – 27 Nov 2026€5,400€4,860until 2 Nov
MuscatScheduled
30 Nov – 4 Dec 2026€5,300€4,770until 9 Nov
OnlineScheduled
6 – 10 Dec 2026€1,700€1,530until 16 Nov
JeddahScheduled
6 – 10 Dec 2026€4,200€3,780until 16 Nov
ParisScheduled
7 – 11 Dec 2026€5,700€5,130until 16 Nov
RiyadhScheduled
14 – 18 Dec 2026€4,200€3,780until 23 Nov
KigaliScheduled
21 – 25 Dec 2026€5,100€4,590until 30 Nov
RomeScheduled
21 – 25 Dec 2026€5,800€5,220until 30 Nov
SingaporeScheduled
28 Dec 2026 – 1 Jan 2027€6,700€6,030until 7 Dec
ViennaScheduled
4 – 8 Jan 2027€5,700€5,130until 14 Dec
Kuala LumpurScheduled
11 – 15 Jan 2027€4,400€3,960until 21 Dec
ZurichScheduled
11 – 15 Jan 2027€5,000€4,500until 21 Dec
AmmanScheduled
17 – 21 Jan 2027€3,100€2,790until 28 Dec
LisbonScheduled
25 – 29 Jan 2027€5,400€4,860until 4 Jan
BangkokScheduled
25 – 29 Jan 2027€6,100€5,490until 4 Jan
AmsterdamScheduled
25 – 29 Jan 2027€5,400€4,860until 4 Jan
BarcelonaScheduled
1 – 5 Feb 2027€5,400€4,860until 11 Jan
BerlinScheduled
8 – 12 Feb 2027€5,800€5,220until 18 Jan
LondonScheduled
15 – 19 Feb 2027€5,600€5,040until 25 Jan
CairoScheduled
15 – 19 Feb 2027€3,300€2,970until 25 Jan
CasablancaScheduled
22 – 26 Feb 2027€4,300€3,870until 1 Feb
MadinahScheduled
1 – 5 Mar 2027€4,200€3,780until 8 Feb
DammamScheduled
1 – 5 Mar 2027€4,200€3,780until 8 Feb
DohaScheduled
8 – 12 Mar 2027€4,400€3,960until 15 Feb
DubaiScheduled
14 – 18 Mar 2027€4,400€3,960until 22 Feb
FrankfurtScheduled
15 – 19 Mar 2027€5,800€5,220until 22 Feb

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.