Third-Party Information Security Risk Assessments

Third parties play a critical role in government operations, but every vendor relationship can carry information security risks. This course helps participants understand why third-party risk assessments matter, what to look for when working with vendors, and how good governance, controls and risk awareness can help protect government information.

Is this course right for you?

This course is designed for staff who liaise with, coordinate, administer, onboard, manage or procure third-party vendors of any size.

It may be right for you if you:

• Liaise with third-party vendors
• Coordinate or administer vendor arrangements
• Have, or aspire to have, a role in onboarding, managing or procuring third-party vendors
• Work with government information and need a stronger understanding of information security risk
• Want to build basic awareness of information security when dealing with vendors
• Need to understand how third parties can affect government information security

What you’ll explore

This session covers key considerations, risks and practical steps involved in assessing information security risk with third parties.

• Security risk assessment considerations and baseline principles
• Agency knowledge of third parties, including:
  • Why third-party risk assessments are important in government
  • What role third parties play in government and how this links to information security
  • When information security needs to be considered throughout the supply chain
• Information on security risk assessments for third parties, including:
  • Types of information security risks
  • Consequences and impacts, with examples
  • Establishing good governance and information controls with vendors
  • Resources, including references, tools and agency delegates
• Practical exercise of an information security risk assessment

Benefits to You and Your Organisation

• Uplift staff capability
• Increase protection of government information when dealing with third parties
• Reduce government exposure to information security risk
• Build awareness of controls
• Develop a stronger risk mindset when liaising with vendors and handling government information

Should Attend

This course is suitable for all staff who liaise with, coordinate or administer third-party vendors, whether small or large.

It is also suited to staff who have, or aspire to have, a role in onboarding, managing or procuring third-party vendors, as well as staff seeking basic awareness and understanding of the importance of information security when dealing with vendors.

Group Bookings

**For groups of five or more, IPAA SA can tailor the training to suit your organisation. Group bookings may also be eligible for a preferential rate. Complete the form, and our team will be in touch to discuss options. **