Skip to content
CityLearning
Guide

Keeping compliance training current when the rules keep moving

The regulatory perimeter shifts every year. Here's how to keep mandatory training accurate without rebuilding it from scratch each time.

By Margaret Hassett

Keep compliance training current by treating content currency as a control: assign every module an owner and a review cycle, pair an annual refresh with event-driven triggers such as a regulatory change or an internal incident, and re-assign updated modules so staff are trained on the current rules.

Compliance training has a failure mode that is easy to miss: it goes out of date. A module written for last year’s rules still plays, still records completions and still looks like a control, right up until a supervisor asks whether it reflects the current Handbook. Too often, it does not.

Regulatory change is constant. Consumer Duty, operational resilience, the ongoing evolution of the financial-crime regime and regular Handbook updates all mean that ‘we trained everyone’ is only reassuring if the training was current. Here’s how to keep it that way.

Why must compliance training content stay current?

Out-of-date compliance training is a control that has failed without anyone noticing: it still records completions but no longer reflects the rules. For the FCA, training that doesn’t cover current obligations isn’t evidence of compliance. Content currency must be owned, reviewed on a schedule, and updated when defined triggers occur, like any other control.

In practice that means knowing, for every module:

  • The date it was last reviewed against the rules.
  • Who owns that review.
  • What triggers an out-of-cycle update.

If you can’t answer those three questions for your current modules, that’s the first gap to close.

How do you know when compliance training needs updating?

An annual review is the baseline, but rules don’t change on a timetable. Pair the calendar with event-driven triggers: a new FCA rule or enforcement signal, an internal incident or complaint trend, or a staff role change. When any trigger occurs, ask: does any module need to change, and who needs to re-take it?

Three triggers to watch for:

  • A rule change: new or amended FCA requirements, a Dear CEO letter, a finalised consultation.
  • An enforcement signal: published decisions and fines often reveal where regulators expect firms to do better.
  • An internal event: a complaint trend, audit finding or incident that exposes a knowledge gap.

When a trigger occurs, the question is simple: does any module need to change, and who needs to re-take it?

What should happen when compliance training content changes?

A substantive update (new obligations, changed thresholds, revised FCA guidance) should trigger a fresh assignment to affected learners with a new completion record. Replacing the file without a new assignment loses the evidence that staff were trained on the current rules, not the superseded ones.

Distinguish between:

  • Minor corrections (a typo, a broken link): no re-assignment needed.
  • Substantive changes (new obligations, changed thresholds, revised guidance): re-assign and re-record.

Recording which is which protects you later, when you need to show exactly when staff were trained on a specific requirement.

How do you keep compliance training manageable to update?

Compliance training drifts out of date most often because updating it is too painful. Modular content is the fix: discrete, maintainable topics instead of monolithic annual packages. When rules change in one area, revise that module only, a single topic on a single screen. A low update cost is what stops your content falling behind the rules.

Working with a provider that updates content as the rules change helps here too. If your courses are refreshed and re-published centrally each year, keeping them current becomes a matter of verification instead of production.

How should firms report on compliance training currency?

A compliance lead, auditor or FCA supervisor should be able to see, without a project, when each module was last reviewed, which learners have completed the current version, and who still needs to complete an updated module. Currency you cannot evidence doesn’t protect you.

Surface, in your reporting:

  • When each module was last reviewed and updated.
  • Which learners have completed the current version.
  • Who still needs to take an updated module after a rule change.

Currency that lives in someone’s head, or in a folder of dated files, is currency you can’t prove. Build it into your reporting, and you can answer ‘is your training up to date?’ in seconds.

Common questions about keeping compliance training current

How do you keep compliance training up to date? Treat content currency as a control: assign an owner and a review cycle to every module. Pair an annual refresh with event-driven triggers: a regulatory change, an enforcement signal, or an internal incident. When content changes substantively, re-assign the updated module so staff are trained on the current rules.

How often should compliance training be reviewed? At minimum, annually. In practice the rules change on their own schedule, so firms should also review training whenever there is a significant regulatory change, an FCA enforcement decision, a Dear CEO letter, an internal incident or a role change. Treat annual review as a minimum, and revisit more often when events demand it.

What triggers a compliance training update? Training should be updated when: a new or amended FCA rule comes into force; an FCA Dear CEO letter or enforcement decision signals raised expectations; an internal incident reveals a knowledge gap; or a role group’s obligations change materially. Distinguish minor corrections (no re-assignment needed) from substantive changes (re-assign and create a new completion record).

How do you avoid compliance training going out of date? Build a training inventory that records, for every module, the date it was last reviewed, who owns the review, and what triggers an out-of-cycle update. Use a provider that centrally refreshes content as regulations change, so that keeping content current is largely a matter of verification.


CityLearning’s compliance courses are reviewed and updated annually, and whenever the rules change, and delivered through a platform that shows completion against the current version. Request a demo to see how we keep your training current.

Keep your firm ahead of regulatory change

Book a short demo to see how CityLearning keeps your training current and your evidence audit-ready.