Third Party and Vendor Risk Management untuk Memperkuat Operational Resilience Perbankan
Third Party and Vendor Risk Management untuk Memperkuat Operational Resilience Perbankan
Deskripsi
Third Party and Vendor Risk Management merupakan bagian penting dari penguatan operational resilience perbankan karena semakin banyak aktivitas bank yang bergantung pada pihak ketiga, vendor, outsourcing provider, technology provider, cloud service, security provider, hingga strategic business partner. Ketergantungan tersebut memberikan manfaat dalam bentuk efisiensi, scalability, akses terhadap teknologi, dan peningkatan kualitas layanan, namun pada saat yang sama dapat menciptakan berbagai exposure seperti operational risk, cyber risk, data protection risk, compliance risk, concentration risk, financial risk, serta reputational risk. Gangguan pada satu critical third party dapat berdampak terhadap layanan nasabah, proses pembayaran, teknologi informasi, keamanan data, maupun business continuity bank. Oleh karena itu, pengelolaan third party dan vendor tidak cukup hanya berorientasi pada procurement dan contract management, tetapi perlu menjadi bagian dari integrated risk management dan operational resilience framework perbankan.
Pelatihan ini dirancang untuk memberikan pemahaman komprehensif dan praktis mengenai bagaimana membangun Third Party and Vendor Risk Management yang efektif sejak tahap vendor selection, due diligence, risk assessment, contracting, onboarding, monitoring, hingga exit management. Selama 2 hari, peserta akan mempelajari third party risk governance, vendor segmentation, criticality assessment, due diligence, contract risk, SLA dan KPI, cybersecurity serta data protection risk, business continuity, concentration risk, incident management, hingga continuous monitoring dan performance improvement. Pembahasan diarahkan agar peserta mampu mengidentifikasi vendor yang bersifat critical, menentukan risk-based control, memperkuat governance dan accountability, serta memastikan third party mampu memenuhi service requirements dan resilience expectations bank. Dengan pendekatan tersebut, pengelolaan vendor diharapkan tidak hanya meningkatkan cost efficiency dan service quality, tetapi juga memperkuat kemampuan bank dalam mencegah, merespons, dan memulihkan gangguan operasional.
Tujuan
Setelah mengikuti pelatihan ini, peserta diharapkan dapat:
- Memahami konsep, prinsip, dan framework Third Party and Vendor Risk Management dalam industri perbankan.
- Mampu mengidentifikasi dan mengklasifikasikan risiko berdasarkan criticality, dependency, dan business impact dari third party.
- Mampu melakukan vendor due diligence, risk assessment, dan menentukan risk-based control secara efektif.
- Mampu memperkuat contract management, SLA, KPI, compliance, dan governance terhadap vendor.
- Mampu mengelola cyber risk, data protection, operational disruption, concentration risk, dan business continuity yang berasal dari third party.
- Mampu membangun monitoring, incident management, remediation, dan continuous improvement untuk meningkatkan operational resilience perbankan
Materi
Materi 1. Third Party and Vendor Risk Management Framework
- Sub Materi:
- Strategic role third party management dalam perbankan
- Third party risk governance dan operating model
- Jenis dan karakteristik third party risk
- Risk ownership, accountability, dan three lines of defense
- Third party risk appetite dan risk taxonomy
- Integrasi vendor risk dengan enterprise risk management
Materi 2. Vendor Criticality, Due Diligence dan Risk Assessment
Sub Materi:
- Vendor inventory dan third party risk profiling
- Criticality assessment dan business service dependency
- Vendor segmentation berdasarkan risk exposure
- Financial, operational, legal, compliance, dan reputational due diligence
- Technology, cybersecurity, dan data protection assessment
- Risk scoring, risk rating, dan control requirements
Materi 3. Vendor Selection, Contract Management dan Service Governance
Sub Materi:
- Risk-based vendor selection dan evaluation criteria
- Contractual risk dan key contractual protections
- Service Level Agreement dan performance requirements
- KPI, service quality, dan vendor accountability
- Right to audit, reporting, escalation, dan compliance clauses
- Contract amendment, renewal, termination, dan exit provisions
Materi 4. Cybersecurity, Data Protection dan Technology Third Party Risk
Sub Materi:
- Third party cybersecurity risk dan threat exposure
- Data access, data protection, dan information security controls
- Cloud, technology provider, dan digital service dependency
- Cyber incident notification dan third party response
- Access control, vulnerability management, dan security assurance
- Technology resilience dan protection terhadap service disruption
Materi 5. Operational Resilience, Business Continuity dan Third Party Incident Management
Sub Materi:
- Critical business services dan third party dependency mapping
- Business impact analysis dan operational resilience assessment
- Vendor business continuity dan disaster recovery capability
- Concentration risk dan single point of failure
- Incident response, escalation, dan crisis coordination
- Recovery planning, testing, dan resilience assurance
Materi 6. Continuous Vendor Monitoring, Performance dan Risk Improvement
Sub Materi:
- Continuous third party risk monitoring
- Vendor performance dashboard dan risk indicators
- Early warning indicators dan emerging vendor risk
- Issue management, remediation, dan corrective action
- Periodic vendor review, reassessment, dan audit
- Exit strategy, lessons learned, dan continuous improvement
Peserta
- Divisi Risk Management
- Divisi Vendor Management
- Divisi Procurement
- Divisi Operational Risk
- Divisi Operations
- Divisi Business Continuity Management (BCM)
- Divisi Compliance
Metode
• Pre Test
• Presentasi Materi
• Diskusi
• Studi Kasus
• Post Test
Fasilitas
• Training Amenities
• Peralatan Pelatihan (Tas, Hand Out, Block Note, Pulpen, Watermark)
• Sertifikat
• Souvenir
• 2x Coffee Break, 1x Lunch