Training and Communication
What the domain tests
A compliance program fails if staff do not know what is expected. Candidates must understand risk-based training needs analysis, audience segmentation, content design, delivery methods, completion tracking, and effectiveness measurement. Communication covers the code of conduct, policies, escalation channels, and the tone set by leaders.
Concepts to master
The difference between awareness, training, and certification; role-based curricula for high-risk functions; onboarding versus annual refresher training; attestation and acknowledgment; training records and retention; multilingual and accessibility considerations; and measuring effectiveness through assessments, phishing simulation results, hotline usage, and quality testing rather than completion rates alone.
Traps
Questions often reward measuring effectiveness over measuring attendance. A 100 percent completion rate proves delivery, not understanding. Another trap is assigning the same generic module to all staff regardless of role risk. Watch for answers that respond to a misconduct trend with a one-time email rather than targeted training. Also note that training does not substitute for controls.
Worked example
A firm sees a rise in gifts and entertainment violations in the sales team. The correct response is targeted scenario-based training for sales, reinforced by manager messaging, clearer pre-approval procedures, and monitoring of the approval log, then measuring whether violation rates fall. Rule of thumb: completion shows reach, assessment scores show knowledge, and behavior metrics show effect.
Exam focus
Expect questions on risk-based curricula, attestation, and effectiveness metrics.