Employee-facing compliance
Reach the people whose work creates the risk
Financial services organisations need to solve two related but distinct problems: awareness and evidence.
The awareness problem is making sure relevant employees receive clear, proportionate information about the laws, policies, procedures and conduct expectations that affect their work. Depending on the requirement, this may involve online compliance training, a policy or RMCP, a short awareness asset, an assessment, an acknowledgement or an attestation.
The evidence problem is keeping a usable record of who was included, what they received, which course, policy or document version applied, what they completed, acknowledged, attended, attested to or passed, who remains outstanding, and what report can be produced later.
Both matter. Useful awareness without a reliable record can be difficult to demonstrate. A clean record behind weak or irrelevant awareness only shows that an activity took place.
Core awareness areas
Financial services compliance courses
1
FICA and AML/CFT awareness
CPD-accredited FICA training for general employees and accountable institutions, from concise awareness through to detailed training on risk-based compliance, the RMCP, customer due diligence, recordkeeping, reporting and employees’ responsibilities. Your approved RMCP can also be incorporated into the FICA for Accountable Institutions course.
2
POPIA staff awareness
CPD-accredited POPIA training for general staff and specialist teams, including a concise one-hour course, detailed general awareness and role-specific training for IT. Choose the level of depth that fits each employee group and the personal information they handle.
3
TCF - Treating Customers Fairly
CPD-accredited TCF training for employees whose work affects customer outcomes. The course connects the six TCF outcomes to everyday decisions, customer interactions, records and evidence, while supporting preparation for COFI’s conduct expectations.
4
Wider financial services risks
Extend the programme with CPD-accredited courses in areas such as the National Credit Act, anti-bribery and corruption, cybersecurity and governance, alongside focused awareness on fraud, conflicts of interest, whistleblowing and responsible AI. Select only the topics relevant to the institution’s risks, employee roles and reporting needs.
how we help
Compliance Online helps South African financial services organisations provide employees with FICA, POPIA, TCF and related compliance awareness, with the reporting and records needed to show what was done.
Regulatory landscape
The financial services obligations employees may need to understand
South African financial services organisations operate within a layered regulatory environment. The exact obligations depend on the institution’s licence, activities, products and employee roles, but employee awareness commonly sits across the following areas.
- The Financial Sector Conduct Authority (FSCA) regulates the conduct of financial institutions.
- The Financial Intelligence Centre (FIC) oversees South Africa’s anti-money laundering and counter-terrorist financing framework under the Financial Intelligence Centre Act (FICA).
- The Information Regulator oversees the Protection of Personal Information Act (POPIA) and the Promotion of Access to Information Act (PAIA).
- The National Credit Regulator oversees the National Credit Act
- Banks, insurers, retirement funds and other financial institutions may also be subject to the Prudential Authority, the South African Reserve Bank and legislation specific to their activities.
awareness routes
Choose the right route
We can help you identify the relevant compliance areas, employee groups, course and policy requirements, delivery route and reporting needs.
Managed e-learning
Compliance Online manages enrolment, reminders, learner support, tracking and reporting through ELLO.
Courses on your LMS
License Compliance Online’s SCORM content for delivery through your own learning management system.
Policies and acknowledgements
Use Policy Passport to distribute approved RMCPs, policies and other employee-facing documents and maintain acknowledgement or attestation records.
The detail
Got questions? Start here
What compliance training do financial services employees need?
The right training depends on the institution’s activities, employee roles and risk profile. Common requirements include FICA and anti-money laundering, POPIA, Treating Customers Fairly, customer conduct, fraud, bribery and corruption, conflicts of interest, whistleblowing, cybersecurity and responsible AI use. Not every employee needs the same depth of training. General staff may need broad awareness, while onboarding, advice, complaints, IT and management teams may need more detailed or role-specific content.
Does the training use realistic South African financial-services scenarios?
Yes. Our financial services content is developed for the South African regulatory and workplace context. The TCF course uses practical scenarios to show where customer outcomes are shaped through everyday decisions, interactions, records and escalations. Other courses use practical examples relevant to their subject matter, and approved internal procedures or reporting routes can be incorporated where this would make the awareness more useful.
Can our approved RMCP, policies and internal TCF or COFI frameworks be incorporated into the awareness programme?
Yes, where this is agreed as part of the scope. Compliance Online’s FICA for Accountable Institutions course is specifically designed to allow the organisation’s approved RMCP to be incorporated. Other approved policies, procedures and internal conduct frameworks can be reflected in configured training, shorter awareness material or policy acknowledgements. The institution remains responsible for approving the documents and confirming their legal and regulatory adequacy.
Can employee policies, RMCPs and procedures be distributed and acknowledged alongside training?
Yes. Policy Passport can be used to distribute final, approved policies, RMCPs, procedures and guidance documents to the relevant employee groups. It can keep version-specific records and capture acknowledgements, attestations, questions and outstanding-user information where these are required. This can sit alongside structured training, allowing the organisation to keep separate but connected records for course completion and policy acknowledgement.
Can we roll out awareness consistently across multiple branches, business units or franchise networks?
Yes. The rollout can be structured around the organisation’s employee data, branches, business units, roles or other agreed groupings. ELLO can be used where Compliance Online is managing enrolment, reminders, learner support, completion tracking and reporting. Policy Passport can use groups to control which employees receive particular policies or files. The quality of the rollout and reporting depends on accurate employee data and a clear assignment structure.
What reporting can you provide across training, assessments, policy acknowledgements and outstanding employees?
The available reporting depends on the delivery route. ELLO reporting may include enrolments, completion status, assessment results, certificates, reminders and outstanding employees. Policy Passport may report on assigned users, document versions, acknowledgements, attestations, questions and outstanding actions. Reports can also be split by business unit, location or group where the required data and reporting structure have been agreed. Where courses are supplied through SCORM for use on the client’s own LMS, the client manages the completion and reporting record.
Is your FICA, TCF and COFI-related training updated as regulations and regulatory guidance change?
Compliance Online reviews its generic content when legal, regulatory or guidance changes materially affect what employees need to know. Updates are incorporated once the change is sufficiently clear and relevant to employee-facing awareness. Client-specific RMCPs, policies and procedures remain the institution’s responsibility, so the client must provide the latest approved versions where these have been incorporated into the programme.
Fill in your details below to find out more.