Skip to content
Quest Training

Third-Party Technology & Cloud Risk Management Training Course

Shows how to assess, manage and monitor risks from technology vendors and cloud services, keeping security, resilience and compliance intact across outsourcing.

TRM · Technology Risk ManagementAll Levels#2608ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Sectors:Risk, Compliance & GovernanceCategories:Technology Risk Management

Course Overview

This advanced practical course provides a structured framework for identifying, assessing, managing, and monitoring risks arising from third-party technology providers and cloud services. It focuses on the increasing dependency of organizations on external technology ecosystems and the need to maintain effective governance, security, resilience, compliance, and business continuity across outsourced and cloud-based services. The course examines the complete third-party risk lifecycle, from due diligence and risk classification through contract management, control assessment, ongoing monitoring, incident management, and exit planning. Participants will evaluate technology suppliers, cloud service providers, managed service providers, software vendors, and other critical technology dependencies. Particular attention is given to cloud-specific risks, including shared responsibility, data security, access management, configuration, availability, concentration risk, data residency, subcontractors, service portability, and cloud exit strategies. The program also addresses contractual controls, service-level agreements, audit rights, regulatory requirements, security assurance, and third-party resilience. Practical exercises enable participants to conduct vendor and cloud risk assessments, develop due diligence frameworks, evaluate control evidence, establish risk ratings, define contractual requirements, develop monitoring indicators, and create remediation and exit plans for critical technology services.

Learning Objectives

  • Analyze the principles and lifecycle of third-party technology risk management.
  • Identify risks associated with technology suppliers, cloud providers, and outsourced services.
  • Develop risk-based third-party classification and assessment methodologies.
  • Conduct technology vendor and cloud service provider due diligence.
  • Evaluate security, privacy, availability, resilience, and compliance risks.
  • Assess cloud shared responsibility models and provider control environments.
  • Evaluate third-party contracts, service-level agreements, and technology risk clauses.
  • Assess concentration, subcontractor, dependency, and service continuity risks.
  • Establish ongoing monitoring, control assurance, and risk reporting mechanisms.
  • Develop incident management, escalation, remediation, and breach response processes.
  • Design practical exit, transition, and service portability strategies.
  • Establish an integrated third-party and cloud risk management framework with continuous improvement.

Who Should Attend

This course is designed for IT risk managers, technology governance professionals, cybersecurity specialists, information security managers, vendor risk professionals, procurement specialists, internal auditors, compliance professionals, and third-party risk management teams. It is also suitable for CIOs, CTOs, IT managers, cloud architects, technology control owners, business continuity professionals, legal and contract specialists, risk managers, and senior decision makers responsible for outsourced or cloud-based technology services. The program is particularly relevant to banks, financial institutions, government entities, telecommunications companies, energy and oil & gas organizations, healthcare institutions, and large corporations with significant third-party and cloud dependencies.

Learning Outcomes

  • Identify and classify third-party technology and cloud risks.
  • Develop risk-based vendor and cloud service assessment frameworks.
  • Evaluate technology providers using structured due diligence processes.
  • Assess cloud security, privacy, availability, resilience, and compliance risks.
  • Analyze shared responsibility between organizations and cloud providers.
  • Evaluate supplier controls, assurance reports, certifications, and supporting evidence.
  • Identify contractual gaps and define appropriate technology risk requirements.
  • Assess concentration, subcontracting, dependency, and service continuity risks.
  • Establish key risk indicators and ongoing third-party monitoring mechanisms.
  • Manage technology incidents, control deficiencies, remediation, and escalation.
  • Develop effective cloud and technology service exit and transition plans.
  • Build an integrated third-party and cloud risk management program.

Course Outline

Day 1

Third-Party Technology Risk Fundamentals & Governance

  • Third-party technology risk principles
  • Technology outsourcing and external dependency
  • Third-party risk lifecycle
  • Vendor and service classification
  • Critical and material technology services
  • Risk appetite and tolerance
  • Third-party risk ownership and accountability
  • Governance structures and responsibilities
  • Risk identification and scenario development
  • Third-party risk registers
  • Practical Application: Develop a third-party technology risk profile and classification model
Day 2

Vendor Due Diligence, Risk Assessment & Control Assurance

  • Third-party due diligence principles
  • Supplier risk assessment methodologies
  • Security and cybersecurity assessment
  • Data protection and privacy risks
  • Business continuity and operational resilience
  • Financial and operational stability
  • Control frameworks and assurance evidence
  • Independent assessments and audit reports
  • Risk scoring and residual risk
  • Remediation and risk acceptance
  • Practical Application: Conduct a risk-based assessment of a critical technology supplier
Day 3

Cloud Risk Management & Shared Responsibility

  • Cloud service models and deployment environments
  • Infrastructure, platform, and software services
  • Cloud governance and risk ownership
  • Shared responsibility models
  • Cloud access and identity management
  • Data protection and encryption
  • Cloud configuration and security controls
  • Availability and resilience
  • Data residency and regulatory considerations
  • Cloud concentration and dependency risks
  • Practical Application: Perform a cloud risk assessment for a critical business service
Day 4

Contracts, Monitoring, Incidents & Third-Party Resilience

  • Technology contracts and risk requirements
  • Service-level agreements
  • Security and privacy clauses
  • Audit and assurance rights
  • Incident notification and response requirements
  • Subcontractor and fourth-party risks
  • Ongoing vendor monitoring
  • Key risk indicators and performance indicators
  • Control deficiencies and remediation tracking
  • Third-party incidents and escalation
  • Practical Application: Review a technology service agreement and identify critical risk and control requirements
Day 5

Exit Strategy, Resilience & Integrated Risk Management

  • Third-party resilience management
  • Critical service dependency mapping
  • Exit and transition planning
  • Cloud portability and data migration
  • Vendor replacement and contingency planning
  • Contract termination and transition risks
  • Business continuity integration
  • Third-party risk reporting and governance
  • Technology risk maturity assessment
  • Continuous monitoring and program improvement
  • Final Workshop: Develop an integrated Third-Party Technology & Cloud Risk Management Program covering due diligence, risk assessment, contractual controls, cloud governance, monitoring, incident response, resilience, remediation, and exit planning

Upcoming Dates

Selected date

Madrid · 18 – 22 Jan 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
BakuScheduled
2 – 6 Nov 2026€4,800—
SelectDownload Brochure
BarcelonaScheduled
9 – 13 Nov 2026€5,400—
SelectDownload Brochure
CairoScheduled
16 – 20 Nov 2026€3,300—
SelectDownload Brochure
CasablancaScheduled
23 – 27 Nov 2026€4,300€3,870until 2 Nov
SelectDownload Brochure
DammamScheduled
30 Nov – 4 Dec 2026€4,200€3,780until 9 Nov
SelectDownload Brochure
DohaScheduled
7 – 11 Dec 2026€4,400€3,960until 16 Nov
SelectDownload Brochure
DubaiScheduled
13 – 17 Dec 2026€4,400€3,960until 23 Nov
SelectDownload Brochure
GenevaScheduled
14 – 18 Dec 2026€6,300€5,670until 23 Nov
SelectDownload Brochure
IstanbulScheduled
21 – 25 Dec 2026€4,700€4,230until 30 Nov
SelectDownload Brochure
Kuala LumpurScheduled
28 Dec 2026 – 1 Jan 2027€4,400€3,960until 7 Dec
SelectDownload Brochure
LisbonScheduled
4 – 8 Jan 2027€5,400€4,860until 14 Dec
SelectDownload Brochure
LondonScheduled
11 – 15 Jan 2027€5,600€5,040until 21 Dec
SelectDownload Brochure
MadinahScheduled
18 – 22 Jan 2027€4,200€3,780until 28 Dec
SelectDownload Brochure
MadridScheduled
18 – 22 Jan 2027€5,400€4,860until 28 Dec
✓ SelectedDownload Brochure
MakkahScheduled
25 – 29 Jan 2027€4,200€3,780until 4 Jan
SelectDownload Brochure
ManamaScheduled
1 – 5 Feb 2027€4,700€4,230until 11 Jan
SelectDownload Brochure
MarbellaScheduled
8 – 12 Feb 2027€5,400€4,860until 18 Jan
SelectDownload Brochure
MilanScheduled
15 – 19 Feb 2027€6,000€5,400until 25 Jan
SelectDownload Brochure
MunichScheduled
22 – 26 Feb 2027€5,400€4,860until 1 Feb
SelectDownload Brochure
MuscatScheduled
1 – 5 Mar 2027€5,300€4,770until 8 Feb
SelectDownload Brochure
OnlineScheduled
7 – 11 Mar 2027€1,700€1,530until 15 Feb
SelectDownload Brochure
ParisScheduled
8 – 12 Mar 2027€5,700€5,130until 15 Feb
SelectDownload Brochure
RiyadhScheduled
15 – 19 Mar 2027€4,200€3,780until 22 Feb
SelectDownload Brochure
RomeScheduled
22 – 26 Mar 2027€5,800€5,220until 1 Mar
SelectDownload Brochure
SalalahScheduled
29 Mar – 2 Apr 2027€5,300€4,770until 8 Mar
SelectDownload Brochure
SingaporeScheduled
5 – 9 Apr 2027€6,700€6,030until 15 Mar
SelectDownload Brochure
TrabzonScheduled
12 – 16 Apr 2027€4,700€4,230until 22 Mar
SelectDownload Brochure
ViennaScheduled
19 – 23 Apr 2027€5,700€5,130until 29 Mar
SelectDownload Brochure
AmmanScheduled
25 – 29 Apr 2027€3,100€2,790until 5 Apr
SelectDownload Brochure
AmsterdamScheduled
26 – 30 Apr 2027€5,400€4,860until 5 Apr
SelectDownload Brochure

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.

Download BrochureContact Our Team