It's a timely article about being cost-effective with compliance training based on a) relevant risks b) method of training delivery.
Becker says risk can be assessed in 3 ways:
- Likelihood that a given risk will become a reality
- How often this risk will occur
- Impacts on the organization should it do so
The development of a compliance training program is a 3-part process:
- Identify risks to be controlled
- Establish training objectives and address them
- Design and implement learning
You then need to look at each risk and decide which control applies. Do you want to:
- avoid or eliminate the risk
- reduce the likelihood of it occurring, and minimize its impacts should it occur
- transfer the risk by outsourcing the activity or insuring against it
- retain the risk, in which case you budget for the risk being realized
It goes without saying the depth of training implemented will vary according to other factors such as the 'organization’s commitment to good corporate citizenship, its environmental policies and its branding as an employer of choice'.
Finally, while compliance training is important for legal reasons, creating generic compliance training modules can become an additional source of revenue for a company, without much work involved. Think about product certification training, basic health and safety or industry-specific training modules you have developed - could they sell online? It's just one more way to think outside the box during this recession and maybe even emerge the hero who found a way to make the company money, in the toughest of times.
Thanks for the read. One exception to this rule is for SOX compliance training. All publicly traded companies are required by law to become SOX compliant and this is now spilling over to Japan (JSOX).
ReplyDelete