Training and Education
What is tested
Training transfers standards into behavior. Know risk-based and role-based curricula, onboarding versus periodic refreshers, formats (e-learning, live, scenario, manager-led), adult-learning principles, documented completion, and above all effectiveness measurement. High-risk roles - sales, procurement, third-party management, finance - warrant deeper, more frequent, scenario-heavy content than the general population.
Concepts to name
Training needs analysis tied to the risk assessment, curriculum by audience, translation and localization, accessibility, manager reinforcement as tone at the middle, board and executive education, training as a condition of employment, and consequences for non-completion. Distinguish training (knowledge and skill transfer) from communication (awareness and messaging).
Traps
Completion rate as the sole success measure is the most common distractor. One module for everyone signals a program that is not risk-based. Training at hire only, with no refresher, fails a multi-year employee. Training cannot cure a culture that rewards the misconduct being trained against - say so in scenario questions. A posted policy is communication, not training.
Rule of thumb
Design backwards from the decision. Name the moment an employee must act correctly (approving an agent invoice, accepting a gift), build the module around that moment, and test with a scenario rather than a policy recitation.
Worked example
After two gift-and-hospitality violations in the sales team, the fix is not a company-wide e-learning relaunch. It is a short scenario lab for sales and their approvers, a job aid embedded at the approval screen, manager talking points, and a re-audit of gift logs in 90 days.