Flagship course
Fintech Vendor Audit Studio
A six-module studio for reviewers who need to audit third-party integrations across payments, KYC, and core banking connectors—without pretending every control is binary.
Who this is for
Internal audit, vendor risk, and platform security partners who already know the basics of SOC reports and want a sharper method for API-heavy fintech stacks.
You will practice scoping a payment orchestration partner, sampling authentication and retry controls, and writing findings that survive challenge from engineering leads.
Curriculum
Modules
Inventory the mesh
Build a partner map with data classes, fallback routes, and decision owners.
Vendor Scope Canvas
Define in-scope interfaces, sampling windows, and what “done” looks like for a review.
Evidence that APIs leave behind
Pull from logs, contract tests, and incident tickets instead of brochureware.
Control claims vs production behavior
Test encryption, key rotation promises, and webhook integrity under partial failure.
Finding language that moves work
Write severity, business impact, and remediation options engineering can schedule.
Closeout and monitoring hooks
Hand off residual risk, dashboards, and re-test triggers after go-live changes.
Learning outcomes
- Produce a scoped integration audit plan tied to a real fintech partner type.
- Select evidence sources that reflect runtime behavior, not marketing claims.
- Facilitate a findings walkthrough with risk and engineering stakeholders.
- Document residual risk and monitoring signals after remediation starts.
Instructor · Haeun Cho
Former payments risk lead based in Seoul. Haeun designs Studio scenarios from audits of card processors, open-banking aggregators, and KYC vendors.
Informational pricing
₩1,890,000
Includes live sessions, office hours, and reusable templates. No checkout on this site—enrollment is arranged through contact.
Compare program tiersLearner notes
“Module four’s webhook integrity drill exposed a gap we had papered over with a vendor attestation. The write-up format saved us in the steering committee.”
Sora Kim · Platform security
“Dense reading weeks. I skimmed less after week three once the canvas forced fewer open questions.”
Anonymous client in consumer lending
FAQ
Do I need a coding background?
You should be comfortable reading API docs and log excerpts. We do not teach programming from scratch.
Is this a certification?
No. You receive a Websynchub completion letter and portfolio artifacts, not a licensed credential.
What is a real limitation of the Studio?
We do not provide access to your production systems. Labs use synthetic fintech stacks; applying the method inside your environment still requires local access and stakeholder time.
Can teams from outside Korea join?
Yes. Live sessions rotate between early Seoul evening and a secondary slot for APAC/EU overlap. Materials remain in English.