Executive Summary: A Learning Management System (LMS) can automate course delivery, employee enrolments, reminders, assessments and reporting. But bringing compliance training in-house involves much more than operating the platform. Organisations need to determine appropriate awareness requirements, develop or source reliable content, design effective learning experiences, maintain employee data, resolve delivery failures and preserve accurate training records. AI can accelerate content development and administration, while SCORM allows organisations to license specialist training for their own LMS. This guide examines the less obvious responsibilities, technical dependencies and operating costs to consider before deciding how much of the compliance training programme to manage internally.
—
The hidden operational footprint of bringing compliance training in-house
So, you’ve bought a Learning Management System (LMS) and decided to bring your compliance training in-house. Or perhaps you’re still shopping around, comparing platforms and working out whether managing everything internally will save your organisation money.
Go for it. A capable LMS can be an excellent investment. It can enrol employees, deliver courses, automate reminders, track assessments and produce reports. Some platforms include sophisticated authoring tools, and AI has made the prospect of developing your own training content considerably more attractive.
On paper, it looks as though you’ve solved most of the problem.
But before you congratulate yourself, it’s worth taking a closer look at the responsibilities your team is about to inherit. A Learning Management System can automate a considerable amount of administration, but it doesn’t automatically determine what employees need to learn, whether the content is accurate, whether the training is well designed or whether the right employees have completed it.
Those activities involve different people, different systems and, quite often, departments that don’t usually work particularly closely together.
None of this means bringing compliance training in-house is a bad decision. For organisations with the right internal expertise, it may be the most sensible approach. The important thing is to understand the entire operating requirement before calculating the savings.
Regulatory scoping: An LMS can’t decide what your employees need to know
Suppose your Compliance or Risk team has identified the need for awareness training on POPIA, competition law and anti-bribery and corruption. Your LMS is ready to go, so the next step appears to be producing three courses.
Except the legislation isn’t a training specification.
Take competition law. Most employees don’t need to understand every provision of the Competition Act. They may, however, need to recognise when an interaction with a competitor could become problematic, understand what information should not be exchanged and know when to stop and seek guidance.
Someone in sales or procurement may encounter these situations regularly. Other employees may need only a basic understanding of the risk and an appropriate escalation route.
Similarly, your organisation might need broad POPIA awareness across the workforce, while employees with specialist data-processing responsibilities require more detailed training.
Deciding which employees need which level of awareness requires an understanding of your organisation’s applicable requirements, operating environment and employee responsibilities.
Those decisions belong with the organisation’s relevant Compliance, Risk, Legal and business owners. They should not be determined by the number of courses available in a catalogue or how easily an LMS can assign them.
Before creating the first module, establish what employees need to recognise, understand, or do; who needs that capability; and what evidence the organisation expects the intervention to produce.
Otherwise, it’s entirely possible to build an impressive training catalogue without being particularly clear about the problem the training is supposed to solve.
Instructional design: Legally accurate content can still be poor training
Suppose your AI-assisted course has been thoroughly researched and approved by a subject-matter expert.
That doesn’t automatically make it useful employee training.
You can take a perfectly accurate explanation of the law, put it into an online course, add ten multiple-choice questions and call it compliance awareness. Your LMS will deliver it quite happily. Whether employees understand it, remember the important points or recognise when those points become relevant is another matter.
This is where instructional design and communication matter.
Someone needs to translate legal requirements into language ordinary employees can understand. In South Africa, that frequently means designing for people working in their second or third language.
The examples also need to make sense in the environments employees actually work in. A generic scenario about a corporate dinner in London may not be particularly useful to a warehouse supervisor dealing with a supplier offering a personal favour.
The course should give employees a reasonable opportunity to recognise the relevant situations and understand the expected next step. This may involve knowing when to stop, ask, check, obtain approval, escalate or report something.
There’s also the question of proportion.
A 90-minute course isn’t necessarily better than a 30-minute one. Twenty assessment questions aren’t automatically better than five. More animation doesn’t automatically produce better learning, and a course doesn’t become more useful simply because every possible legal qualification has been included.
Most employees aren’t completing mandatory compliance training because they have a burning personal interest in the subject. The learning experience needs to respect their time and attention while preserving the legal meaning of what matters.
Sometimes the requirement justifies a substantial course. Sometimes a focused intervention or assessment-first refresher is enough.
Someone needs the expertise to know the difference, even when the LMS and AI authoring tools make it easy to create considerably more content.
Employee data reconciliation: When your first training campaign becomes an HR and IT project
You’ve got the LMS, the content and the approved training population. Now you need to enrol everybody.
HR or IT sends through the employee information. The spreadsheet contains duplicates, missing employee numbers, incorrect email addresses and a few people who left the organisation six months ago. Someone has two profiles, someone else has three, and an entire department appears to be missing.
Your LMS can probably import that spreadsheet in seconds. Unfortunately, importing bad data quickly doesn’t make it good data.
At Compliance Online, we regularly encounter employee data problems. In our experience, the larger the organisation, the more likely we are to see discrepancies, particularly when HR and IT maintain separate employee records.
HR might have an employee assigned to a new department while IT’s identity directory still reflects the previous one. Leavers may remain active in one system. Job titles, employee identifiers and reporting lines may differ across platforms.
These are natural consequences of departments maintaining different information for different purposes, but they become a practical problem when automated training assignments depend on the data agreeing.
Someone needs to reconcile that information against the population approved for training, investigate duplicates, correct errors and identify employees who are genuinely missing.
Modern LMS platforms may integrate with HR and identity systems, allowing employees to be automatically created, updated, grouped and enrolled. AI can assist with identifying duplicates and suspicious records.
But neither eliminates the need to establish which source is authoritative for particular fields or what happens when systems disagree.
This becomes especially important if your training programme depends on role-based assignments, new-starter automation or recurring campaigns. Incorrect data can result in employees being omitted, assigned inappropriate training or appearing under multiple records.
For large organisations, the accuracy of employee information may be as important to the reliability of the programme as the LMS itself.
Learner support and exception management: The work behind completion rates
Once the employees are enrolled, your invitations go out. A capable LMS can automate notifications, reminders, progress tracking and completion reports.
But some invitations don’t arrive. Others go to incorrect addresses. Employees forget passwords, encounter access restrictions or lose connectivity halfway through a course. A few insist they’ve completed their training despite the system recording otherwise.
Your outstanding-user list may now contain several different kinds of problems:
- Genuine non-participation: Employees who received the training and have not completed it.
- Delivery failures: Incorrect email addresses, blocked notifications or inaccessible accounts.
- Employee data problems: Leavers, duplicate profiles, incorrect assignments or missing records.
- Technical completion problems: Employees who participated but whose progress or results weren’t recorded as expected.
- Access constraints: Employees without the devices, connectivity or opportunity needed to complete the assigned intervention.
Automated reminders help with genuine non-participation. They’re less useful when the problem is an invalid email address or a learner who cannot access the course.
Someone needs to investigate the exceptions, coordinate corrections with HR or IT, support learners and determine when management follow-up is appropriate.
These are relatively ordinary problems in a training campaign involving several thousand employees, but they can absorb considerable administrative time if the responsibilities and processes aren’t agreed beforehand.
SCORM integration: Why a course launching successfully isn’t the whole test
If you plan to license externally developed compliance courses for your own LMS, you’ll probably encounter SCORM.
SCORM, or Sharable Content Object Reference Model, is a widely used technical specification for packaging e-learning content and communicating certain learner information between a course and a compatible LMS.
It allows organisations to use externally supplied courses without necessarily moving learners to another platform.
But compatibility needs to be tested in the actual environment.
A SCORM package may upload and launch successfully while still presenting problems with progress, bookmarking, assessment attempts or completion reporting.
There are also differences between SCORM versions. For example, SCORM 1.2 uses a combined lesson-status field, while SCORM 2004 separates completion status from success status. These distinctions can affect how an LMS interprets a learner who has completed the course but failed the assessment.
What to test before deploying SCORM compliance training
| Test area |
What to verify |
Possible consequence if overlooked |
| Course launch |
The course opens reliably in the intended browsers, devices and LMS environment. |
Learners cannot access the training or encounter display problems. |
| Progress and resumption |
Progress is saved, and the learner can resume as intended. |
Employees repeat completed material or lose progress. |
| Assessment and retry |
Pass marks, failed attempts and repeat attempts behave as intended. |
Incorrect results or inconsistent learner experiences. |
| Completion and success status |
The LMS interprets course completion, pass/fail status and available scores correctly. |
Employees who finished the course appear incomplete or incorrectly passed. |
| Content updates |
Updated packages can be deployed without unintended changes to historical records. |
Previous results become difficult to distinguish from a new course version. |
These tests should be completed with a small group before a large rollout. You’ll also want to establish who supports platform access, who investigates course-package problems and who resolves discrepancies in the LMS record.
SCORM helps content travel between compatible systems. It doesn’t automatically transfer responsibility for the rollout or the resulting evidence to the content provider.
Training reporting: The problem with a dashboard showing 100% completion
Eventually, the LMS dashboard announces 100% completion. Which sounds excellent, provided you’re clear about the denominator.
If the original employee data was inaccurate, the report can be technically correct while presenting an incomplete picture of who was supposed to be trained.
An entire department may have been omitted from the approved training list. Leavers might remain included in outstanding reports. Duplicate profiles may distort enrolment counts, and technical completion failures may be mistaken for employee non-participation.
A dependable compliance training record should allow the organisation to establish the following, where relevant to the intervention:
- Who was approved and included in the training population.
- Which course and version each employee was assigned.
- When the training was assigned and completed.
- What assessment result was recorded, where applicable.
- Who remained outstanding and what follow-up occurred.
- Whether relevant exceptions and discrepancies were resolved.
Those records help the organisation reconstruct the awareness intervention that took place. They may support management reviews, customer requests, internal reporting or audits.
But there’s an important evidential boundary.
A completion record establishes that a defined training completion event occurred. An assessment result records performance on that assessment. Neither, by itself, proves future behaviour, effective organisational controls or overall compliance with the underlying legal requirement.
Good reporting should make the intervention visible and accountable without claiming that a completed course has solved the wider compliance problem.
Build, buy or outsource: Choosing the right compliance training operating model
Owning an LMS, developing training content and managing a training rollout are three separate decisions.
An organisation can manage all three internally, or divide the work according to its available expertise and capacity.
Comparison of compliance training operating models
| Delivery model |
Content responsibility |
Operational responsibility |
Most relevant consideration |
| Internally developed training on your LMS |
Your team researches, designs, reviews and maintains the content. |
Your team manages delivery, support, enrolments and reporting. |
Requires both awareness-design expertise and ongoing LMS capacity. |
| Specialist SCORM content on your LMS |
Provider supplies and maintains the licensed content within the agreed scope. |
Client ordinarily manages enrolments, support, tracking and evidence in its own LMS. |
Reduces content development but retains rollout administration. |
| Managed e-learning service |
Provider supplies agreed training content and adaptations. |
Provider carries defined enrolment, communication, support and reporting work. |
Useful when the client doesn’t want to manage the routine rollout internally. |
| Facilitated group awareness |
Focused material designed for group delivery. |
Facilitators organise sessions and maintain appropriate attendance or attestation evidence. |
May be more practical for deskless teams; the evidence differs from individual LMS assessment records. |
In all four models, the organisation remains responsible for determining its compliance awareness requirements and the employees who should receive the intervention.
The delivery arrangement determines who supplies the content, who manages the operational work and where the resulting records are maintained.
If you’re evaluating costs, it’s worth comparing more than the LMS licence fee. Include course development, regulatory maintenance, content review, administration, data reconciliation, learner support, reporting and technical maintenance.
Those are the responsibilities the organisation needs to resource, whether internally or through an agreed service.
Before bringing compliance training in-house, check that your team is ready
I’d want clear answers to these questions before committing to a particular model:
- Regulatory requirements: Who determines what employees need to recognise or do, and approves the intended training population?
- Content expertise: Who creates or sources the courses, verifies legal accuracy, and maintains the content as requirements change?
- Learning design: Who decides whether the material is understandable, relevant and proportionate for the intended audience?
- AI governance: Who reviews AI-generated content and approves the use of regulatory, business and employee information in AI tools?
- Employee data: Who reconciles HR and IT information, manages exceptions and keeps enrolments accurate?
- Technical delivery: Who tests SCORM packages, supports learners and resolves access or tracking failures?
- Evidence: Who verifies the completion records and ensures the organisation can reconstruct what happened?
- Capacity: Do the people responsible have the time and expertise to maintain the process beyond the first rollout?
You may already have these capabilities in-house. If so, an internally managed LMS could be a very effective arrangement.
If not, you don’t necessarily need to abandon the idea. You may simply need to decide what to develop internally and what to source elsewhere.
Where Compliance Online fits
At Compliance Online, we support organisations through different compliance awareness delivery models.
Some clients license our maintained compliance courses through SCORM for use in their own LMS. We supply the agreed content and updates, while the client’s team handles deployment, learner administration, support, completion records, and reporting. Client-specific information and procedures still need to be provided and kept current by the client.
Other organisations use our ELLO managed e-learning service. Under that arrangement, Compliance Online handles agreed operational work, including employee enrolments, data administration, reminders, learner support, completion tracking and reporting.
For frontline and deskless teams, ELLO Sessions offers short, facilitated awareness delivered through group sessions.
These are different ways of allocating the work. They don’t transfer responsibility for the organisation’s legal interpretation, compliance risk assessment, internal controls or decisions about which employees require awareness.
The LMS licence isn’t the whole budget
Bringing compliance training in-house can be a very sensible decision, particularly for organisations with capable Compliance, Legal, Learning and Development, HR and IT teams.
A good LMS can remove a considerable amount of administration, make learning easier to deliver and provide useful records of what employees completed. AI can reduce the work involved in content development and repetitive tasks even further.
But a reliable compliance awareness programme still depends on knowing what employees need to recognise, translating those requirements into useful learning, reaching the intended people and maintaining records that accurately describe what happened.
Those responsibilities don’t automatically disappear when the technology arrives.
The LMS licence is easy to put into a budget. The work around it has a habit of disappearing into several people’s job descriptions.
Frequently asked questions about LMS compliance training
Does buying an LMS mean we can manage compliance training ourselves?
Yes, if the organisation has the expertise, content, data and operational capacity required. An LMS can automate enrolment, delivery, assessments, reminders and reporting, but it doesn’t automatically determine training requirements, maintain regulatory content or resolve every employee data and support issue.
Can AI produce legally accurate compliance courses?
AI can help research, draft, structure, simplify and review compliance training, including scenarios and assessments. Accuracy still needs to be verified against authoritative sources and the organisation’s approved requirements. A convincing explanation is not necessarily complete or appropriate for the intended audience.
What is SCORM compliance training?
SCORM compliance training consists of e-learning content packaged to operate through a compatible Learning Management System. SCORM supports communication of defined information, such as completion and assessment status, between the course and the LMS.
How do we ensure our LMS completion reports are accurate?
A 100% completion rate is only valuable if the baseline data is correct. To ensure accuracy, LMS enrolment lists must be rigorously reconciled against active HR payroll data before training begins, ensuring departed employees are removed and new hires are accounted for.
What is the difference between an LMS and managed compliance training?
An LMS is the technology used to deliver and track learning. A managed compliance training service includes agreed operational activities, such as enrolments, learner communication, reminders, support, tracking and reporting. Using a managed service changes who performs those tasks, but the organisation remains responsible for its applicable requirements and training population.