Financial Regulation and Compliance Training Course

Duration 10 days 20 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Compliance Officers, Risk Managers and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-BI-122

Before you join: Participants should understand core banking or insurance products, business processes and basic risk terminology.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Banks, insurers and financial-services firms operate under overlapping prudential, conduct, financial-crime, consumer-protection and data-protection requirements. Compliance failures can produce enforcement action, remediation costs, customer harm, capital impacts and personal accountability for senior managers. The practical challenge is translating regulatory obligations into controlled business processes, evidence, monitoring and timely escalation without treating compliance as a stand-alone legal function.

This course examines the regulatory architecture affecting banking and insurance operations and the methods used to manage compliance risk. Participants work with Basel III, FATF Recommendations, COSO and ISO 37301 while addressing governance, regulatory change, customer due diligence, sanctions, market conduct, complaints, prudential reporting, outsourcing and supervisory engagement. They learn to interpret obligations, map them to risks and controls, test control design and operating effectiveness, investigate incidents, prepare regulatory submissions and report meaningful management information.

Teaching combines focused instructor briefings with cases drawn from retail banking, corporate banking, payments, insurance underwriting and claims operations. Participants analyse regulatory scenarios, assess customer files, build risk-control matrices, review sample incidents and prepare responses for senior management and supervisors. Throughout the course, each participant develops a practical compliance framework for a selected business unit or regulated product. They leave with a structured compliance programme pack, including an obligations register, risk assessment, monitoring plan, control matrix, incident workflow and board-reporting format.

The course suits professionals who already work with regulated financial products, operational risk, internal controls, audit, legal, compliance or business management. It is particularly relevant where responsibilities span several jurisdictions or where teams need clearer ownership of regulatory duties and evidence standards.

What you will be able to do

  • Interpret banking and insurance regulatory obligations using a structured obligations register
  • Assess compliance risks using inherent-risk, control-effectiveness and residual-risk scoring
  • Design a risk-based compliance programme aligned with ISO 37301 principles
  • Build customer due diligence and sanctions-screening control workflows
  • Test compliance controls through sampling, walkthroughs and evidence-based findings
  • Investigate regulatory incidents and prepare escalation, remediation and disclosure records
  • Produce board-level compliance reporting using key risk indicators and breach data
  • Present a complete compliance framework for a regulated financial-services business

Benefits of attending

For you

  • Apply a repeatable method for converting regulations into owned business controls
  • Strengthen credibility when challenging control gaps and escalating compliance concerns
  • Prepare clearer evidence for regulatory reviews, internal audit and management committees
  • Conduct more disciplined customer due diligence, sanctions and conduct-risk assessments
  • Build a portfolio-ready compliance programme pack for a business unit or product

For your organisation

  • Improves traceability from regulatory obligations to policies, controls and accountable owners
  • Reduces avoidable remediation through earlier identification of control and conduct failures
  • Produces more consistent financial-crime controls across customer onboarding and transaction monitoring
  • Strengthens board oversight through usable compliance indicators, breach reporting and action tracking
  • Supports more credible responses to supervisory reviews, audits and regulatory examinations

Course modules

20 modules over 10 days

Participants can explain the regulatory architecture and allocate compliance accountability across a financial-services firm.

  • Financial stability, market integrity and consumer protection regulatory policy objectives
  • Central banks, prudential authorities and conduct regulators compared by mandate
  • Three lines model applied to compliance ownership and independent assurance
  • Board, senior management and controlled-function accountability structures
  • Regulatory perimeter analysis for banking, insurance, payments and investment activities
  • Licensing conditions, permissions and approved-person requirements mapped to operations

Participants can convert regulatory requirements into a maintained and owned obligations register.

  • Obligations register fields: source, requirement, owner, control and evidence
  • Distinguishing binding rules, supervisory guidance, industry codes and internal policy
  • Legal entity, product and jurisdiction scoping for regulatory requirements
  • Traceability links between obligations, policies, procedures and control evidence
  • RACI matrices assigning first-line, compliance, risk and audit responsibilities
  • Version control and review dates for regulatory obligation records

Participants can perform a risk-based assessment and prioritise compliance treatment actions.

  • Inherent-risk scoring using product, customer, channel and jurisdiction factors
  • Control-effectiveness ratings supported by design and operating evidence
  • Residual-risk calculation and documented risk acceptance thresholds
  • Risk appetite statements translated into measurable compliance limits
  • Heat maps, risk registers and action plans for management review
  • Scenario analysis for regulatory change, misconduct and financial-crime exposures

Participants can design the core components of an ISO 37301-aligned compliance management system.

  • ISO 37301 compliance management system principles and governance requirements
  • Policy hierarchy from board policy to frontline operating procedure
  • Annual compliance plan built from risk assessment results
  • Competence, training and attestation records for regulated roles
  • Speak-up channels, non-retaliation safeguards and confidential case handling
  • Document retention schedules aligned with legal and regulatory obligations

Participants can identify principal prudential requirements and their operational compliance implications for banks.

  • Basel III capital structure: CET1, AT1, Tier 2
  • Risk-weighted assets and capital adequacy ratio reporting mechanics
  • Liquidity Coverage Ratio and Net Stable Funding Ratio controls
  • Internal Capital Adequacy Assessment Process governance and documentation
  • Stress testing assumptions, scenario selection and management challenge
  • Large exposure limits, concentration risk and connected-counterparty controls

Participants can apply prudential and conduct controls to insurance product, underwriting and claims processes.

  • Solvency capital, technical provisions and actuarial governance fundamentals
  • Own Risk and Solvency Assessment reporting and challenge process
  • Product governance controls from design through post-sale review
  • Underwriting authority limits, referrals and exception approval records
  • Claims-handling standards, fair treatment and settlement evidence
  • Reinsurance counterparty oversight and risk-transfer documentation requirements

Participants can build risk-based customer due diligence workflows and identify escalation triggers.

  • FATF Recommendations applied to customer identification and verification
  • Beneficial ownership identification using ownership and control tests
  • Customer risk ratings based on geography, activity and delivery channel
  • Enhanced due diligence triggers for politically exposed persons
  • Source-of-wealth and source-of-funds evidence assessment techniques
  • Periodic review schedules driven by customer risk classification

Participants can assess sanctions exposures and establish defensible screening and escalation controls.

  • Sanctions lists, sectoral restrictions and ownership rules distinguished
  • Screening configuration: names, aliases, transliteration and matching thresholds
  • False-positive disposition records and documented analyst decision rationale
  • Payment screening controls for originators, beneficiaries and intermediary banks
  • Trade-finance red flags involving goods, vessels and routing
  • Sanctions escalation, account restrictions and regulatory reporting decisions

Participants can evaluate transaction-monitoring alerts and prepare defensible suspicious-activity escalation records.

  • Transaction-monitoring scenarios aligned with documented money-laundering risk assessments
  • Alert triage using customer profile, transaction pattern and corroborating evidence
  • Typologies for structuring, mule accounts, trade laundering and fraud
  • Case investigation chronology, evidence logs and quality-assurance review
  • Suspicious activity report narratives using clear facts and rationale
  • Confidentiality controls, tipping-off restrictions and information-access boundaries

Participants can assess fraud and corruption risks and specify preventive and detective controls.

  • Fraud risk assessment covering internal, customer and third-party threats
  • Segregation-of-duties matrices for payments, claims and account maintenance
  • Red-flag monitoring for employee misconduct and collusive activity
  • Gifts, hospitality and conflicts-of-interest declaration controls
  • Third-party due diligence for agents, brokers and service providers
  • Investigation protocols preserving evidence, confidentiality and procedural fairness

Participants can assess conduct risks across product design, sales, advice and customer servicing.

  • Conduct-risk taxonomy covering sales, disclosures, advice and complaints
  • Target-market assessment and product suitability control documentation
  • Customer communications tested for clarity, fairness and balanced disclosure
  • Sales incentives reviewed for foreseeable mis-selling risk
  • Vulnerable-customer identification and reasonable-adjustment service procedures
  • Fair-value assessments comparing price, benefits, exclusions and outcomes

Participants can design complaint-handling controls that identify root causes and deliver timely redress.

  • Complaint classification separating service failure, conduct issue and systemic harm
  • Case-handling timelines, acknowledgements and final-response quality requirements
  • Root-cause analysis using five whys and cause-and-effect diagrams
  • Redress calculations for fees, interest, claims and foregone benefits
  • Complaint trend reporting by product, channel, cause and customer segment
  • Closed-loop remediation linking findings to policy and process changes

Participants can identify data-governance controls required for regulated customer and compliance information.

  • Personal-data inventory covering collection, processing, sharing and retention
  • Lawful-basis assessment and purpose-limitation controls for customer data
  • Access-control matrices for sensitive compliance investigation records
  • Data-quality controls supporting regulatory reports and risk decisions
  • Records retention, legal holds and defensible disposal procedures
  • Third-party data-processing clauses, audits and breach notification responsibilities

Participants can assess outsourced-service compliance risks and establish accountable third-party oversight.

  • Outsourcing materiality assessment based on service criticality and substitutability
  • Due diligence covering capability, financial standing, controls and jurisdiction
  • Contract clauses for audit rights, data protection and regulatory access
  • Service-level indicators, breach thresholds and provider performance reporting
  • Exit plans, transition testing and concentration-risk mitigation measures
  • Operational-resilience impact tolerances for important business services

Participants can manage regulatory change from horizon scanning through implementation assurance.

  • Horizon-scanning sources: regulators, consultations, enforcement actions and industry bodies
  • Regulatory change impact assessment across products, processes and systems
  • Change inventory with owners, milestones, dependencies and evidence requirements
  • Policy-gap analysis comparing new obligations against current controls
  • Implementation testing before effective dates and regulatory deadlines
  • Post-implementation review validating adoption, training and control performance

Participants can plan and perform proportionate monitoring and control testing activities.

  • Risk-based monitoring plan linked to compliance risk assessment results
  • Control design testing through walkthroughs, documentation and owner interviews
  • Operating-effectiveness testing using samples, populations and clear criteria
  • Sampling methods: random, judgmental, targeted and stratified selection
  • Findings rated by impact, likelihood, root cause and recurrence
  • Quality assurance reviews improving testing consistency and challenge

Participants can manage regulatory breaches from detection through closure and lessons learned.

  • Breach criteria distinguishing incidents, near misses and reportable events
  • Initial triage assessing customer harm, financial impact and regulatory deadlines
  • Investigation plans defining scope, evidence sources and decision authorities
  • Root-cause analysis separating human, process, system and governance failures
  • Remediation plans with accountable owners, milestones and validation tests
  • Regulator notifications balancing timeliness, accuracy and ongoing investigation constraints

Participants can prepare reliable regulatory reports and manage supervisory requests professionally.

  • Regulatory-reporting calendar covering prudential, conduct and financial-crime returns
  • Data lineage from source systems through calculations to submissions
  • Management attestations, reconciliations and sign-off evidence for returns
  • Supervisory information requests scoped, assigned and tracked to closure
  • Meeting preparation using issue summaries, evidence packs and accountable owners
  • Remediation commitments documented with realistic dates and progress reporting

Participants can produce decision-useful compliance reporting for executive and board oversight.

  • Key risk indicators for financial crime, conduct and regulatory change
  • Thresholds, trends and tolerances presented with clear management actions
  • Board reports distinguishing assurance, incidents, emerging risks and decisions
  • Risk appetite breaches escalated through defined governance committees
  • Dashboard design avoiding misleading aggregation and unsupported assurance claims
  • Minutes and action logs documenting challenge, decisions and follow-through

Participants can build, review and present a complete compliance programme for a regulated financial-services business.

  • Define business scope, regulatory perimeter and accountable senior management
  • Construct obligations register for selected banking or insurance activities
  • Assess inherent risks, existing controls and residual-risk priorities
  • Design financial-crime, conduct and third-party control workflows
  • Prepare monitoring plan, breach process and regulatory-change governance
  • Present board dashboard, remediation priorities and supervisory evidence pack

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Regulatory obligations register template
  2. Compliance risk assessment model
  3. Risk-control matrix template
  4. Financial-crime control workflow
  5. Compliance monitoring and testing plan
  6. Board compliance reporting dashboard

Who should attend

  • Compliance Officers — need practical methods for building and evidencing compliance programmes
  • Risk Managers — need to connect regulatory obligations with enterprise risk assessments
  • Internal Auditors — need to assess compliance-control design and operating effectiveness
  • Banking Operations Managers — need accountable controls within customer and transaction processes
  • Insurance Underwriting Managers — need conduct and governance controls for product decisions
  • Legal and Regulatory Affairs Staff — need structured approaches for implementing regulatory change

Skills and tools covered

Regulatory obligations mappingCompliance risk assessmentFinancial crime controlsControl testingRegulatory reportingBoard compliance reporting

Tools and standards

Basel III, FATF Recommendations, COSO Internal Control Framework, ISO 37301

How the course runs

Training methodology

The course uses short instructor briefings to establish regulatory concepts, followed by cases from banking, payments and insurance. Participants work in groups to interpret rules, map obligations, assess risks, identify control failures and decide escalation routes. Simulations include a supervisory request, suspicious-activity review, conduct incident and board compliance committee discussion. Individual application planning connects each method to participants' own products, processes and accountability structures. Trainer feedback focuses on evidence quality, control ownership, proportionality and defensible decision records.

Requirements and prerequisites

Participants should understand core banking or insurance products, business processes and basic risk terminology. Experience in compliance, operations, risk, audit, legal, finance, customer service or product management is useful. Participants should be comfortable reading internal policies, process maps and management reports. The course does not require prior legal training, detailed knowledge of a specific jurisdiction, programming skills or quantitative modelling expertise. Participants may bring examples of their organisation's policies, risk registers or control issues where internal confidentiality rules permit.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants need familiarity with banking or insurance products and basic risk or control concepts. Prior compliance or legal qualifications are not required, and the course explains the practical purpose of key regulatory requirements.

Participants should bring a laptop for working with templates and case materials. They may also bring non-confidential examples of policies, risk registers, control issues or regulatory reports relevant to their role.

The course is designed for compliance, risk, audit, legal, operations, product and insurance professionals with responsibilities in regulated financial services. It is most suitable for people who need to translate requirements into operational controls and evidence.

Anti-money-laundering is a significant part of the programme, but it is not the only subject. This course also covers prudential obligations, conduct, complaints, data, outsourcing, regulatory reporting, governance and supervisory engagement.

Participants build an obligations register, risk assessment, control matrix and monitoring plan that can be adapted to a business unit or product. The methods support policy reviews, audit responses, regulatory-change projects and management reporting.

Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first part establishes regulatory, risk and control foundations; later sessions focus on financial crime, conduct, testing, reporting and the final compliance programme capstone.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.