SECURITY PROCUREMENT · PRACTITIONER PROGRAMME
Efficient Security Vendor Selection
Turn competing security proposals into an evidence-based buying decision. Build requirements, run a proof of value, compare lifecycle costs and defend your recommendation.

After this course, learners will…
What learners can do
- Define the problem and mandatory requirements before comparing security vendors.
- Use a weighted comparison workbook, practical trials and comparable costs to test competing offers.
- Produce an evidence-backed recommendation with acceptance conditions, unresolved risks and an exit plan.
Benefits for your company
- Procurement and security teams can compare offers against agreed needs instead of persuasive demonstrations.
- Decision-makers gain a transparent record of trade-offs, operating costs and conditions for accepting the service.
FROM REQUIREMENT TO HANDOVER
Eight modules. One complete selection project.
8 lessons0.8 hExercises take additional time.
Explore the outline. Open a section to see the lessons and topics inside.
8 lessons shown
01Frame the buying decision
6 slides
Define the service problem, accountable roles and alternatives to buying.
Topics you will explore
- Define the outcome
- Organise the decision
- Compare real alternatives
02Write testable requirements
6 slides
Separate mandatory gates from preferences and specify observable acceptance evidence.
Topics you will explore
- Convert needs into tests
- Separate gates and preferences
- Control scope and changes
03Score evidence, not promises
6 slides
Apply a weighted scorecard, evidence anchors and a sensitivity check.
Topics you will explore
- Anchor the ratings
- Calculate the weighted result
- Challenge a fragile winner
04Investigate the supplier
6 slides
Challenge assurance scope, privileged access, dependencies and unresolved risks.
Topics you will explore
- Scope the assurance
- Trace access and dependencies
- Close risk with evidence
05Run a controlled proof of value
6 slides
Test representative workflows, negative cases, failure handling and operator effort.
Topics you will explore
- Pre-register the experiment
- Measure assisted and unassisted work
- Test the uncomfortable cases
06Compare the full economic commitment
6 slides
Calculate three-year costs, growth exposure and switching costs on a comparable basis.
Topics you will explore
- Normalise the cost boundary
- Calculate and stress the model
- Separate price from value
07Negotiate delivery and exit
6 slides
Turn material promises into acceptance, service, change and exit arrangements.
Topics you will explore
- Make acceptance explicit
- Allocate ongoing responsibilities
- Prove the exit route
08Defend the decision and measure value
6 slides
Produce a conditional recommendation, implementation gates and a 90-day review.
Topics you will explore
- Write the selection memo
- Release through delivery gates
- Measure value after purchase
No lessons match your search. Try another topic or clear the search.
Final assessment: 16 scenarios · 80% pass mark
Allow additional time for the final assessment and review. Study time depends on the depth of your written work.
BUY WITH EVIDENCE
A buying decision you can defend.
Security managers, procurement teams, IT service owners and technical evaluators selecting security products or managed services.
Follow Northstar, a fictional 600-person company replacing its monitoring service. Compare three competing proposals, challenge a polished demonstration, calculate weighted scores and test how usage changes the economics. Every module produces one part of your final recommendation.
No procurement qualification is required. Familiarity with company IT services helps. All supplier names, prices and performance results in the case are fictional. The method applies to products and managed services; it does not rank real vendors.
LEARN BY MAKING THE DECISION
Cases, calculations and a practical recommendation.
Practise before you are assessed
Each module includes a case, three teaching steps, a coached decision with consequences, and a written application. English narration follows each slide. Revise practice decisions before passing the separate module check.
Leave with a usable work product
Build a requirements register, pilot protocol, cost comparison and final memo. Your capstone explains the recommendation, rejected alternatives, residual risks, approval conditions and a 30/60/90-day value review.
Vendor comparison workbook
Compare up to eight vendors against 50 editable criteria. Set your weights and scores to calculate normalized totals and rankings automatically. Ten mandatory pass/fail requirements keep ineligible vendors out of the ranking. Includes the fictional Northstar worked example.
Download vendor comparison workbook (Excel)
Download the practice workbook (TXT) ↓
The workbook contains the fictional case data and eight reusable templates. Use fictional or sanitised information. Submit your module responses in the academy to retain them with your learning record.
Course text, workbook and assessments follow your selected language. Audio availability varies by language. Use the slide text and transcript where audio is unavailable. Complete all coached decisions, module checks and written applications, save your professional role, and pass the final assessment to receive a named certificate. Written work is retained for review, not independently graded. The certificate records course completion; it is not a procurement qualification, supplier accreditation or legal advice.
Reference guidance
- NIST SP 800-161 Rev. 1 (updated 2024): Cybersecurity Supply Chain Risk Management
- NIST SP 1326 (July 2026): Due Diligence Assessment Quick-Start Guide
Based on the Academy’s vendor-selection outline and requirements-workbook structure, with newly authored cases and evaluation exercises.
AI
Practical AI use, with human judgement.
This course includes role-specific ways to use approved AI assistance, relevant AI threats and failure cases, and checks for evidence, data handling and human approval. Optional prompts use fictional information; an AI account is not required.
AI examples are practical learning activities. They do not add statutory training requirements or replace your organisation’s policies, qualified advice or accountable decisions.
