Advanced Third Party Technology Risk Management untuk Memperkuat Digital Resilience Perbankan
Advanced Third Party Technology Risk Management untuk Memperkuat Digital Resilience Perbankan
Deskripsi
Advanced Third Party Technology Risk Management merupakan pendekatan strategis untuk mengendalikan risiko yang muncul dari penggunaan teknologi, cloud services, IT outsourcing, fintech partnership, managed services, dan berbagai third-party technology providers dalam operasional perbankan. Ketergantungan bank terhadap pihak ketiga semakin meningkat seiring akselerasi digital transformation, penggunaan cloud, API, data services, cybersecurity solutions, dan technology ecosystem. Kondisi tersebut dapat menciptakan concentration risk, cybersecurity risk, data privacy risk, service disruption, compliance risk, serta operational resilience risk apabila tidak dikelola dengan governance yang memadai. Bank perlu memastikan bahwa setiap third party memiliki capability, security standard, service reliability, dan control environment yang sesuai dengan risk appetite serta regulatory expectations. Oleh karena itu, third party technology risk management perlu diterapkan secara end-to-end mulai dari vendor selection hingga termination.
Pelatihan ini dirancang untuk memberikan pemahaman advanced dan aplikatif mengenai pengelolaan third party technology risk guna memperkuat digital resilience perbankan. Peserta akan mempelajari third-party risk assessment, technology due diligence, vendor criticality, cybersecurity assessment, data protection, cloud risk, contract governance, SLA management, serta ongoing monitoring terhadap technology providers. Pembahasan juga mencakup concentration risk, incident management, business continuity, disaster recovery, exit strategy, dan regulatory compliance yang berkaitan dengan penggunaan pihak ketiga. Peserta akan memahami bagaimana membangun governance model yang melibatkan business, IT, procurement, risk, compliance, dan internal audit sehingga risiko pihak ketiga dapat dikendalikan secara konsisten. Dengan pendekatan tersebut, bank diharapkan mampu meningkatkan visibility terhadap third-party risk, mempercepat respons terhadap technology disruption, dan membangun digital ecosystem yang lebih secure, resilient, dan sustainable.
Tujuan
Setelah mengikuti pelatihan ini, peserta diharapkan dapat:
- Memahami advanced framework Third Party Technology Risk Management dalam mendukung digital resilience perbankan.
- Mampu mengidentifikasi dan menilai technology risk berdasarkan criticality dan dependency terhadap third party.
- Mampu melakukan technology due diligence dan cybersecurity assessment terhadap technology provider.
- Mampu memperkuat governance, contract management, SLA, dan ongoing monitoring third party.
- Mampu membangun incident response, business continuity, disaster recovery, dan exit strategy.
- Mampu menyusun third party technology risk roadmap yang terintegrasi dengan operational resilience.
Materi
Materi 1. Advanced Third Party Technology Risk Framework
Sub Materi:
- Third party technology risk dan digital resilience framework
- Technology dependency dan critical service identification
- Vendor criticality dan risk classification
- Third party risk appetite dan risk tolerance
- Governance roles dan accountability
- Third party risk lifecycle management
Materi 2. Technology Due Diligence dan Risk Assessment
Sub Materi:
- Technology vendor due diligence dan capability assessment
- IT architecture dan technology dependency review
- Cybersecurity dan information security assessment
- Data protection dan privacy risk assessment
- Financial, operational, dan compliance risk
- Third party risk scoring dan assessment methodology
Materi 3. Contract, SLA dan Technology Service Governance
Sub Materi:
- Technology contract dan risk-based contractual requirements
- Service Level Agreement dan performance metrics
- Security requirements dan data protection clauses
- Audit rights, reporting, dan compliance obligations
- Service performance monitoring dan vendor accountability
- Contract amendment, renewal, dan termination governance
Materi 4. Cybersecurity, Cloud dan Data Risk Management
Sub Materi:
- Third party cybersecurity risk dan control framework
- Cloud service risk dan shared responsibility
- API, system integration, dan connectivity risk
- Data access, data protection, dan information security
- Cyber incident dan third party breach management
- Security monitoring dan vulnerability management
Materi 5. Operational Resilience dan Third Party Incident Management
Sub Materi:
- Critical third party service dan operational resilience
- Business continuity dan disaster recovery requirements
- Third party incident response dan escalation
- Service disruption dan crisis management
- Concentration risk dan systemic dependency
- Recovery capability dan resilience testing
Materi 6. Continuous Monitoring dan Third Party Risk Improvement
Sub Materi:
- Ongoing third party risk monitoring dan reassessment
- Vendor performance dan risk indicators
- Third party risk dashboard dan management reporting
- Audit, assurance, dan control effectiveness
- Exit strategy dan alternative service provider
- Third party risk maturity dan improvement roadmap
Peserta
Divisi Risk Management
Divisi IT Risk Management
Divisi Vendor Management
Divisi Information Technology (IT)
Divisi Information Security
Divisi Business Continuity Management (BCM)
Divisi Compliance
Metode
• Pre Test
• Presentasi Materi
• Diskusi
• Studi Kasus
• Post Test
Fasilitas
• Training Amenities
• Peralatan Pelatihan (Tas, Hand Out, Block Note, Pulpen, Watermark)
• Sertifikat
• Souvenir
• 2x Coffee Break, 1x Lunch