Module 5’s memo outline is taped above my monitor. Our CRO finally stopped asking for a longer appendix.
Daniel R. · Fintech risk, Seoul
Flagship course
Fintech Vendor Audit Lab
A six-week practice studio for people who run vendor due diligence audits for fintech and need artifacts, not slogans.
Who it is for
Third-party risk analysts, compliance operations leads, and procurement partners who already touch vendor reviews and want a tighter method. You should be comfortable reading control language; we do not teach accounting from zero.
Learning outcomes
- Scope a fintech vendor by product surface and data flows
- Build an evidence calendar with owners and refresh dates
- Classify findings with a shared severity floor
- Draft a residual-risk memo a board reader can finish
- Negotiate questionnaire cuts without losing legal must-haves
Informational pricing
₩1,650,000 per seat for the live cohort. No payment is collected on this site. Enrollment follows an intake call and invoice. See pricing and refunds.
Instructor
Yuna Park
Former vendor assurance lead for a Korea-licensed payments group. Facilitates the Audit Lab and Desk Continuity office hours.
Modules
-
Inventory with intent
Map vendors to products and data classes. Retire “everything critical” lists.
-
Attestations in context
Read SOC 2 and related packs beside local expectations. Know what a report does not prove.
-
Evidence calendars
Assign owners, refresh dates, and storage locations. Practice a mid-cohort dry run.
-
Finding language
Separate vendor gaps from monitoring gaps. Write severity without theatrics.
-
Residual-risk memos
Produce a leadership-facing memo that names uncertainty and next checks.
-
Desk handover
Package your artifacts for colleagues who were not in the room.
FAQ
Do I need a live vendor to participate?
Yes — or a carefully anonymized case your facilitator approves. Purely hypothetical vendors produce weaker critique.
Is this legal or regulatory advice?
No. It is educational practice for diligence craft. Your counsel and regulators remain the authority for your entity.
What is a real limitation of this lab?
We do not cover payment processing of enrollment fees on-site, and we do not deep-dive every Korea-specific statute line-by-line. Module 2 focuses on reading attestations in context; if your desk needs a full legal mapping of a new product license, you will still need counsel. Cohort size is capped, so waitlists happen in peak quarters.
Can my whole team join?
Yes. Three or more seats from one entity may qualify for a group arrangement — ask via contact.
Learner notes
Solid on calendars and findings. I wanted more time on Type I reports — we get those more often than the samples assumed. Still kept the seat for the taxonomy alone.
Anonymous client in remittance operations
Ready for the next cohort?
Tell us about your desk and the vendor you would bring. We reply within two business days.