Only 9% of organisations personalise compliance training, finds VinciWorks

58.9% rated their training as only moderately effective, not effective, or were unsure.

Sanctions compliance training was also lacking, as 34.3% did not offer any training on sanctions compliance. 

16.7% were unsure whether any training was provided. 

Only 21.6% gave dedicated training to all relevant teams. 

Over half of organisations lacked a clear defence if a sanctions breach occurred, even if it was accidental.

Henderson-Mayo added: “With strict liability rules in place, businesses must be able to show they have done everything they can to train staff and protect the business. 

“If you’re not training the right people in the right areas, you risk even an accidental breach.”

L&D teams were advised to focus on aligning training with actual risks by department, role and function, integrating compliance into onboarding and development, and using data to improve behavioural outcomes.

Henderson-Mayo said: “Too many firms are spending their training budget on content no one remembers and dashboards no one trusts. 

“Training must be flexible, dynamic and relevant if it’s going to change behaviour.”

Ruth Mittelmann Cohen, head of legal and compliance at VinciWorks, said: “Regulators expect evidence that your training reduces risk and supports a strong compliance culture. 

“That means programmes must be tailored, updated and relevant to staff across the organisation. Paper policies and completion rates are not enough.”