Training
CPE-eligible training for people who run vendor risk.
Live, practical courses built on real engagements. Public cohorts or private delivery on your own vendor set.
On demand · Third Party Threat Hunting™ (TPTH™)
Short courses you can start today
Video courses you buy on each course page and start watching the same day. The three $99 courses each include a toolkit of working files, a knowledge check, and a certificate of completion. The AI for TPRM course includes a student guide and workshop files. 7-day refund policy: if the course is not what you expected, email greg@thirdpartythreathunting.com within 7 days of purchase, even if you have watched it. A refund ends your access.
Your Core Provider Playbook
$99
Read your core provider contract against the 12 practices in the Sep 11, 2026 Joint Statement, with a review sheet and renewal talking points.
See the courseWhen Your Vendor’s Vendor Fails
$99
Map your fourth parties, find the concentration points, and write an exit plan before an outage forces one.
See the courseTPRM With a Team of One
$99
Run third-party risk with a very small team: inventory, tiering, due diligence, monitoring, contracts and a one-page board report, with six working files.
See the courseSaaS Vendor Risk Playbook
$79
Assess, test and exit your SaaS vendors: tier the vendor, collect the right evidence and leave cleanly, with nine working files. Team packs available.
See the courseAI for TPRM Professionals, TPTH Edition
$199
Manage AI risk across the third-party lifecycle, with a workshop and a chapter on BEACON, our plain-language way to assess a vendor’s AI.
See the courseAll four short courses: the TPTH Toolkit Library, $299
Your Core Provider Playbook, TPRM With a Team of One, When Your Vendor’s Vendor Fails and the SaaS Vendor Risk Playbook on one personal link, $376 bought one by one. Need it for a team? Request a quote for a team bundle.
See the bundleComing soon: Which of your vendors are critical? The course
A short on-demand course on deciding which vendors you could not do without. No date yet. Start with the free eight-step vendor checklist → and see what is coming →.
Free on-demand class
New: a free BEACON class for executives
Nineteen minutes on vendor AI risk, with a real case to work through. Watch the preview, then take the full class free.
Free on-demand training
New: free VAULTS™ training on privileged access review
Thirty-one minutes, with a worked review of a privileged account. Watch the trailer, then get the full training free.
Courses
The catalog
01
AI for TPRM Professionals
Bridges the gap between emerging AI technologies and third-party risk practice — assessing AI vendors, AI-enabled features and the contracts around them. The govern track of the CATRP credential.
See dates →02
Security Agent Mesh Masterclass
Building a four-agent autonomous defense architecture to neutralise zero-day vulnerabilities in real time. The build track of the CATRP credential.
See dates →03
Securing SaaS Training
Cloud and SaaS risk: the exposures specific to cloud-based environments and how to assess them.
See dates →04
BEACON™ Vendor AI Risk Class
The BEACON™ framework, live: the six categories of vendor AI risk, how to run a vendor session in under an hour and how to score it, with a worked exercise on a sample AI vendor. Runs quarterly, online.
See dates →05
Privileged Access Review
One free hour, live: the essentials of privileged access management, then a hands-on review of ten privileged accounts using the VAULTS™ method. Built on Greg and Maria’s book Privileged Access Management. Runs quarterly, online.
Details & dates →06
Third Party Cyber Risk Assessor (TPCRA)
The TPCRA certification, run with the Third Party Risk Association across four evenings. Confirms skill in assessing third parties.
See dates →Credential
CATRP Practitioner — Certified AI Third-Party Risk Professional
Two of the courses above are the two halves of one credential. Complete the Security Agent Mesh Masterclass and AI for TPRM Professionals, pass the ethics attestation and submit a verified application, and you hold CATRP Practitioner.
Enroll before Jan 1, 2027 to complete on these two courses. From that date CATRP adds a third track, the live BEACON™ Vendor AI Risk Class.
$99 at present, reduced from $199. Offer ends Dec 31, 2026.
Schedule
Upcoming courses
Online courses are listed in Eastern time. In-person courses show the local time at the venue. Private delivery can be scheduled on your own dates.
2026 · 2 classes
| Course | Date | Time | Format | |
|---|---|---|---|---|
| Security Agent Mesh Masterclass | Nov 13, 2026 | 1pm–5pm ET | Live online | Book · $249 → |
| Third Party Cyber Risk Assessor Certification (TPCRA) | Nov 16–19, 2026 | 6pm–9pm ET | Live online | Register through TPRA → |
2027 · 19 classes
| Course | Date | Time | Format | |
|---|---|---|---|---|
| BEACON™ Vendor AI Risk Class | Jan 21, 2027 | 12pm–4pm ET | Live online | Book · $249 → |
| AI for TPRM Professionals | Jan 29, 2027 | 1pm–5pm ET | Live online | Book · $249 → |
| AI and Third-Party Risk: Identify and Manage AI Risk in Vendors and Solutions | Feb 2, 2027 | 1pm–5pm PT | In person only · MGM Las Vegas — Right of Boom | Enquire → |
| Security Agent Mesh Masterclass | Feb 12, 2027 | 1pm–5pm ET | Live online | Book · $249 → |
| Securing SaaS Training | Feb 19, 2027 | 1pm–5pm ET | Live online | Enquire → |
| VAULTS Privileged Access Review: Free 1-Hour Class | Feb 24, 2027 | 12pm–1pm ET | Live online | Enquire → |
| BEACON™ Vendor AI Risk Class | Apr 15, 2027 | 12pm–4pm ET | Live online | Book · $249 → |
| Security Agent Mesh Masterclass | Apr 23, 2027 | 1pm–5pm ET | Live online | Book · $249 → |
| AI for TPRM Professionals | May 7, 2027 | 1pm–5pm ET | Live online | Book · $249 → |
| VAULTS Privileged Access Review: Free 1-Hour Class | May 19, 2027 | 12pm–1pm ET | Live online | Enquire → |
| Securing SaaS Training | May 21, 2027 | 1pm–5pm ET | Live online | Enquire → |
| BEACON™ Vendor AI Risk Class | Jul 15, 2027 | 12pm–4pm ET | Live online | Book · $249 → |
| AI for TPRM Professionals | Jul 30, 2027 | 1pm–5pm ET | Live online | Book · $249 → |
| Security Agent Mesh Masterclass | Aug 13, 2027 | 1pm–5pm ET | Live online | Book · $249 → |
| VAULTS Privileged Access Review: Free 1-Hour Class | Aug 18, 2027 | 12pm–1pm ET | Live online | Enquire → |
| Securing SaaS Training | Aug 27, 2027 | 1pm–5pm ET | Live online | Enquire → |
| BEACON™ Vendor AI Risk Class | Oct 21, 2027 | 12pm–4pm ET | Live online | Book · $249 → |
| Security Agent Mesh Masterclass | Oct 22, 2027 | 1pm–5pm ET | Live online | Book · $249 → |
| AI for TPRM Professionals | Nov 5, 2027 | 1pm–5pm ET | Live online | Book · $249 → |
No date that works, or want to start today? Three courses run on demand →
On demand
Start today, finish at your own pace
Written and taught by TPTH, hosted and certified by the Third Party Risk Association. You enroll on TPRA's platform, work through it whenever suits, and TPRA issues the certificate.
Securing SaaS Applications
$159
Cloud and SaaS risk end to end — the Shared Responsibility Model, the AWS, Google Cloud and Azure control sets, questionnaires, physical validation and off-boarding.
Enroll on demandThird Party Cyber Risk Assessor (TPCRA)
Priced and sold by TPRA
The certification Greg co-created with TPRA. Available self-paced as well as across four live evenings, with the examination booked separately. Sold, priced and paid through TPRA. TPTH does not sell, discount or take payment for TPCRA.
Enroll on demandAI for TPRM Professionals
Coming soon$159
The govern track, self-paced. The live version runs two of its four hours as a hands-on vendor AI assessment; the recorded version is the instruction without the workshop.
Being recorded now. Ask to be told when it is live.
Private delivery and certificates
Three things people ask for
Any course, delivered privately
Same CPE credit, run on your policies and your vendor set, with exercises built from your own program. Online or in person (travel not included). One client has now run team training four years running.
| Course | Group rate | |
|---|---|---|
| Security Agent Mesh Masterclass | $3,500 | Book → |
| AI for TPRM Professionals | $2,500 | Book → |
| Securing SaaS Applications | $2,000 | Book → |
Not sure which? Talk it through first →
What “CPE-eligible” means
Every CPE-eligible course issues a certificate stating the title, the date and the contact hours — one CPE per contact hour. Certification bodies that accept self-reported credit, ISC2 and ISACA among them, recognize those hours; you submit the certificate to your own body. TPTH is not a NASBA Registered Sponsor and does not award NASBA CPE, so if you need credit toward a CPA license, check with your state board first. We would rather you know that before you book than after. The two $99 on-demand courses, Your Core Provider Playbook and When Your Vendor’s Vendor Fails, issue a certificate of completion only and carry no CPE credit.
Verify a certificate
Every certificate TPTH issues carries a credential ID in the form TPTH-CATRP-YYYY-NNNN, with the contact hours and CPEs awarded printed on it. Anyone holding a certificate can check it against our register in a few seconds — no account, and nothing is sent to us.
What is printed on a certificate →Exams
Finished a course? Take the exam
AI for TPRM Professionals, the Security Agent Mesh Masterclass and Securing SaaS Applications each end with an exam, taken here on the site. Pass it and we issue your certificate.
Course fact sheets
One page per course — syllabus, prerequisites, contact hours and CPEs, and what you leave with. Written to be forwarded to whoever approves the training budget.