Skip to main content

    Free Interactive Games to Learn Third-Party Risk Management (TPRM)

    Learn the complete TPRM lifecycle — vendor identification to offboarding — by playing 5 free interactive games. No lectures. No PDFs. Just decisions.

    Phase 1: Vendor Identification
    Phase 2: Risk Assessment
    Phase 3: Due Diligence
    Phase 4: Ongoing Monitoring
    Phase 5: Vendor Offboarding

    5 Games

    Covering the Full TPRM Lifecycle

    100 Points

    Score 80+ to Earn Your Certificate

    Free Forever

    No Account Required to Play

    How These TPRM Games Work

    TPRM Learning Games teaches Third-Party Risk Management through five interactive games, each covering one phase of the TPRM lifecycle.

    Third-Party Risk Management (TPRM) is how organizations identify, assess, monitor, and mitigate risks from external vendors, suppliers, and service providers. A complete TPRM program covers five phases — from initial vendor identification through final offboarding — and is required by regulations including GDPR, DORA, NIST, and FFIEC.

    Instead of reading static documentation, you learn each TPRM phase by making real decisions:

    • In Game 1, you identify which relationships qualify as third parties and how to tier them by risk level.
    • In Game 2, you sort real vendor risk scenarios into the correct risk domains.
    • In Game 3, you match due diligence documents to the risks they mitigate.
    • In Game 4, you build a complete ongoing monitoring framework from scratch.
    • In Game 5, you manage a live vendor offboarding crisis across 30 days.

    Each game is worth 20 points. Players who score 80 or more earn a TPRM Learning Achievement Certificate from LearnTPRM.com.

    The 5 TPRM Lifecycle Games

    Phase 1

    Vendor Identification Quiz

    Identify third parties, fourth parties, and risk tiers in a timed 8-question quiz.

    20 points

    Phase 2

    Risk Assessment Sort

    Sort 15 real-world vendor risks into the correct TPRM risk domains.

    20 points

    Phase 3

    Due Diligence Match-Up

    Match 8 due diligence documents to the vendor risks they mitigate.

    20 points

    Phase 4

    Monitoring Framework Builder

    Place 9 monitoring controls correctly to build a TPRM monitoring program.

    20 points

    Phase 5

    Vendor Offboarding Simulator

    Make 6 real decisions across 30 simulated days of a vendor exit crisis.

    20 points

    Frequently Asked Questions About TPRM

    Ready to test your TPRM knowledge?

    Safe Security - founding sponsor of LearnTPRM.comFounding Sponsor
    For CISOs, TPRM leads and vendor risk program owners

    Autonomous TPRM. 90% less manual effort.

    The real version of what you just played

    The games compress the third-party lifecycle into minutes. In production, that speed comes from agents rather than a timer, and that is exactly what our founding sponsor built.

    This is for you if you own a third-party risk program - roughly 100+ vendors, quarterly reassessments, DORA / NIS2 / OCC pressure and no new headcount coming. The link opens Safe Security's platform page, not a gated form.

    Trusted by 10% of the Fortune 500.

    Zero-touch due diligenceContinuous monitoring across 5 dimensionsAI-powered risk scoring workflows
    • Instant inherent risk from a database of 60M+ enterprises.
    • Autonomous remediation follow-up until closure is independently verified.
    • Always-current vendor posture instead of a once-a-year snapshot.
    Evaluate SAFE for my organization

    For security and risk leaders assessing a TPRM platform. Opens safe.security in a new tab.

    25+

    AI agents

    90%

    Less manual effort

    None

    Additional headcount

    200+

    Organizations globally

    End to end

    Intake to offboarding