What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.

Courses

TPRM: Third-Party Risk Management

IntermediateFree8 modules · 20 lessons

About this course

The consumer-side mirror image of ESSCM: how to request, validate, and continuously monitor the software your suppliers ship you, using TPRM's vendor management, SBOM request lifecycle, and risk scoring.

What you'll learn

Why Third-Party Risk Is Different

95% of Breaches, and the Consumer Role

The Vendor and Request Lifecycle

Vendor Management
SBOM Requests: The Status Pipeline

Scoring and Monitoring

Risk Assessment: The 0-100 Scale (Higher = Better)
Continuous Monitoring and Alerts

Designing a Vendor Tiering Model

Why Tiering Comes Before Everything Else
Contracts, SLAs and the Clauses That Matter
Fourth Parties and Concentration Risk

Running an SBOM Request Campaign

Templates, Bulk Requests and Realistic Targets
Validating a Supplier SBOM
VEX and the 'Are We Actually Affected' Conversation

Monitoring, Scoring and Programme Operations

The Vendor Risk Score, and the Direction Trap
Continuous Monitoring and Alert Routing
Programme Metrics and the Board Conversation

Assessment Operations at Scale

Onboarding a New Supplier: The First Thirty Days
Reassessment: Cadence, Triggers and Avoiding the Annual Ritual
Working With Suppliers Who Cannot Meet Your Bar

Incident Response Across the Supplier Boundary

When a Supplier Is Breached: Your Runbook
Coordinated Disclosure and Customer Notification
Post-Incident: Changing the Relationship

01Why Third-Party Risk Is Different1 lessons

95% of Breaches, and the Consumer Role

02The Vendor and Request Lifecycle2 lessons

Vendor Management
SBOM Requests: The Status Pipeline

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.