Third Party Risk Management Toolkit
A vendor risk playbook for teams that tier third parties, run due diligence, set contract obligations and monitor performance. Gerard Blokdyk prepares the playbook for your role and situation after you buy. Access is within 24 hours. The purchase is one time and carries a 30-day refund.
The playbook is typically around 65 files in 13 numbered folders, with a README that maps every file. Excel workbooks are about 60 percent and PDF guides about 40 percent. The playbook is prepared by Gerard Blokdyk for your role and situation after you buy. Access is within 24 hours. The purchase is one time and carries a 30-day refund.
What you get
13 numbered folders and a README that maps every file. It is a playbook, not training, and it does not include a certificate.
Who it is for
A vendor risk playbook for teams that tier third parties, run due diligence, set contract obligations and monitor performance. Gerard Blokdyk prepares the playbook for your role and situation after you buy. Access is within 24 hours. The purchase is one time and carries a 30-day refund.
The 12 areas
Area 1. Program scope and boundaries
- Define third party risk
- Map legal and compliance obligations
- Identify stakeholders and roles
- Set the program boundary
Area 2. Current state assessment
- Score capability across five domains
- Prioritise improvement areas
- Document the baseline
- Report the baseline to leadership
Area 3. Risk governance and policy
- Design the governance committee
- Draft the risk policy
- Set escalation thresholds
- Assign ownership for risk decisions
Area 4. Risk categorisation and tiering
- Classify vendors by data, criticality and location
- Apply the scoring model
- Set minimum requirements by tier
- Update tiers when scope changes
Area 5. Due diligence and onboarding
- Run risk-based due diligence
- Use security and compliance questionnaires
- Verify insurance and certifications
- Record approval decisions and exceptions
Area 6. Contracting and obligations
- Map key risk clauses
- Set audit, data protection and liability terms
- Track renewal and termination dates
- Align terms to the risk tier
Area 7. Ongoing monitoring
- Set monitoring frequency by tier
- Track breaches and sanctions
- Review performance metrics and service levels
- Update the risk profile
Area 8. Incident and issue management
- Define the vendor incident pathway
- Log issues in one register
- Assign remediation with deadlines
- Validate closure
Area 9. Reporting and communication
- Build the risk exposure dashboard
- Summarise findings for the board
- Generate the compliance status report
- Show trends and progress
Area 10. Program optimisation
- Find workflow inefficiencies
- Automate manual steps
- Remove duplicated effort
- Align with enterprise risk management
Area 11. Sustainability and review
- Review program effectiveness annually
- Update policy and templates
- Reassess tiers and monitoring rules
- Apply lessons from incidents and audits
Area 12. Certification and knowledge validation
- Complete the final self-assessment
- Submit evidence of applied work
- Record the completion outcome
- Keep the materials current
How it works
Prepared by Gerard Blokdyk for your role and situation after you buy. Access is within 24 hours. The purchase is one time and carries a 30-day refund.