CTTP
Certified Third-Party Trust Practitioner
18 TPR/GRC/CYB ALCs; exam plus graded SOC report review and CUEC register
Required courses
- CYB-201Software Supply Chain: SBOMs, VEX and Component Monitoring in Practice3.00 ALCs
- TPR-240Continuous Vendor Monitoring: Breach Intelligence, Attestation Expiry and Recertification3.00 ALCs
- TPR-220Vendor Due Diligence Questionnaires: SIG, CAIQ, Custom and Scoring3.00 ALCs
- TPR-215Handling CUECs: Turning Complementary User Entity Controls Into Your Own Obligations2.00 ALCs
- TPR-210Reading a SOC 2 Report: Opinion, Scope, Exceptions, CUECs and Subservice Organisations3.00 ALCs
- TPR-201Building a Third-Party Risk Program: From Zero and At Scale4.00 ALCs
Assessment
Scenario-based examination. Items are written in one of the two realities and ask what the practitioner should do, not what the framework says. Artefact portfolio reviewed for the core certification.