Financial Services Law and Compliance Training Course

Duration 5 days 10 modules · 33 contact hours
Level Intermediate Certificate on completion
Who attends Compliance Managers, Legal Counsel and others
Fee from USD 1,100 KSh 95,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-L-057

Before you join: Participants should have practical exposure to a bank, investment firm, insurer, asset manager, payment provider or financial-services support function.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Financial institutions operate under overlapping legal duties covering authorisation, customer treatment, capital and governance, market conduct, financial crime, data use and securities activity. A product launch, cross-border mandate, trade, client onboarding failure or suspicious transaction can create regulatory exposure, contractual liability, enforcement risk and reputational damage. Managers and control staff need to identify the applicable rules, escalate issues early and record defensible decisions.

This course examines the legal and regulatory framework governing banks, investment firms, asset managers, insurers and payment service providers. Participants assess regulated activities, permissions and exemptions; interpret core securities and market-abuse duties; apply AML and sanctions controls; and connect legal requirements to governance, compliance monitoring and incident response. The programme also addresses client classification, disclosure, conflicts, suitability, outsourcing, data protection and supervisory engagement.

Instruction combines focused legal briefings with financial-services cases involving a cross-border securities offering, suspicious client activity, a conduct breach, a third-party technology provider and a regulatory inspection. Participants work through rule interpretation, risk assessment, escalation and documentation decisions. They leave with a practical compliance implementation pack containing a regulatory obligations map, control assessment, incident-response checklist and personal application plan.

The course is suited to professionals who work with regulated products, clients, transactions, controls or third parties and need stronger working knowledge of financial services law. It is especially relevant where legal, compliance, risk, operations and business teams must make timely decisions together without treating regulation as a separate specialist concern.

What you will be able to do

  • Map regulated activities, permissions, exemptions and cross-border service restrictions
  • Interpret financial-services rules using legal-source hierarchy and documented assumptions
  • Assess securities offering, disclosure and client-protection obligations
  • Apply market-abuse controls to inside information, surveillance and personal dealing
  • Conduct AML, sanctions and customer due-diligence risk assessments
  • Design compliance monitoring controls using risk-based assurance methods
  • Manage regulatory incidents through escalation, investigation and remediation records
  • Prepare a regulatory obligations map and action plan for a business area

Benefits of attending

For you

  • Make better-supported decisions when products, clients or transactions raise regulatory questions
  • Recognise when a securities, conduct or financial-crime issue requires escalation
  • Contribute credibly to discussions with lawyers, regulators, auditors and senior management
  • Build evidence trails that explain regulatory interpretation and control decisions
  • Apply a structured method to compliance issues in current work responsibilities

For your organisation

  • Fewer avoidable breaches caused by unclear ownership of regulatory obligations
  • Stronger evidence for supervisory reviews, internal audit and board oversight
  • More consistent handling of client protection, market conduct and financial-crime risks
  • Earlier escalation of legal issues during product, transaction and outsourcing decisions
  • Clearer remediation planning after control failures, complaints or regulatory incidents

Course modules

10 modules over 5 days

Participants can identify applicable regulatory sources, regulated activities and jurisdictional boundaries.

  • Legal-source hierarchy: statutes, rules, guidance, contracts and supervisory expectations
  • Map regulated activities against permissions, exemptions and territorial scope
  • Distinguish prudential, conduct, market-integrity and financial-crime rulebooks
  • Apply legal-entity, branch and cross-border service analysis
  • Interpret rulebook definitions using purpose, text and regulatory guidance
  • Document legal advice assumptions, limitations, evidence and decision ownership

Participants can connect governance arrangements with accountable regulatory decision-making.

  • Board oversight duties for compliance, risk appetite and regulatory reporting
  • Three Lines Model responsibilities for business, compliance and internal audit
  • Senior manager accountability mapped through prescribed responsibilities and delegation
  • Design conduct-risk indicators for culture, incentives and customer outcomes
  • Minutes, attestations and decision logs supporting supervisory scrutiny
  • Escalation thresholds for breaches, conflicts and material control failures

Participants can assess legal duties arising from securities services and client relationships.

  • Classify investment services, financial instruments and professional client categories
  • Suitability and appropriateness assessments supported by documented client information
  • Disclosure requirements for risks, costs, charges and product characteristics
  • Manage inducements, commissions and conflicts within client-service arrangements
  • Best-execution factors documented through policy, monitoring and periodic review
  • Assess securities offering restrictions, prospectus triggers and private-placement exemptions

Participants can apply market-integrity requirements to trading, information handling and surveillance.

  • Define inside information using precision, price sensitivity and public availability
  • Establish insider lists, wall-crossing records and restricted-list controls
  • Identify insider dealing, unlawful disclosure and market-manipulation indicators
  • Trade surveillance scenarios covering spoofing, layering and unusual transaction patterns
  • Personal-account dealing controls, pre-clearance and post-trade reporting
  • Escalate suspicious orders and transactions through documented assessment procedures

Participants can conduct risk-based financial-crime assessments and escalate suspicious activity.

  • FATF risk-based approach applied to customers, products and delivery channels
  • Customer due diligence: identification, verification, beneficial ownership and purpose
  • Enhanced due diligence triggers for politically exposed persons and high-risk jurisdictions
  • Screen sanctions parties, ownership structures and payment-message information
  • Transaction monitoring alerts assessed through behavioural and expected-activity profiles
  • Suspicious activity reporting decisions, confidentiality and record-retention requirements

Participants can assess data-use and confidentiality issues in regulated financial services.

  • Lawful bases for processing client, employee and transaction data
  • Data minimisation, retention schedules and records of processing activities
  • Assess cross-border transfers using contractual safeguards and transfer-impact assessments
  • Confidentiality duties in client mandates, trading desks and corporate finance
  • Information barriers separating public-side and private-side business activities
  • Breach-response decisions covering containment, notification and evidential preservation

Participants can assess regulatory obligations arising from outsourced and technology-enabled services.

  • Identify material outsourcing arrangements and critical or important functions
  • Due diligence criteria for financial stability, security and operational capability
  • Contract clauses covering audit rights, access, resilience and subcontracting
  • Cloud-service risk assessment using data location and exit-planning criteria
  • Monitor third-party performance through service levels, incidents and control evidence
  • Maintain outsourcing registers, contingency plans and supervisory notification records

Participants can build a risk-based compliance monitoring approach with clear evidence requirements.

  • Create regulatory obligations inventories linked to policies, controls and owners
  • Score inherent and residual compliance risk using defined assessment criteria
  • Develop monitoring plans based on impact, likelihood and control maturity
  • Test control design, operating effectiveness and evidence quality
  • Root-cause analysis using five whys and contributing-factor categorisation
  • Report findings through action trackers, issue ratings and management information

Participants can manage regulatory incidents and prepare defensible responses to supervisory scrutiny.

  • Triage allegations, complaints and control failures using materiality criteria
  • Preserve documents, communications and electronic records under legal hold
  • Plan internal investigations with scope, interview protocol and evidence log
  • Apply privilege considerations when engaging internal and external legal counsel
  • Prepare regulator notifications that are accurate, timely and appropriately scoped
  • Track remediation commitments through owners, milestones, validation and closure

Participants can translate legal requirements into practical decisions, controls and implementation priorities.

  • Review product approval files for legal, conduct and disclosure requirements
  • Challenge business proposals using obligations maps and documented risk rationale
  • Align policies, procedures, training and monitoring with regulatory requirements
  • Prioritise remediation using risk severity, customer impact and regulatory urgency
  • Communicate legal risk to executives through concise decision-focused reporting
  • Produce an individual application plan for immediate workplace implementation

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Regulatory obligations mapping template
  2. Securities and client-protection checklist
  3. Market-abuse escalation decision tree
  4. AML and sanctions risk-assessment model
  5. Compliance monitoring plan template
  6. Regulatory incident-response checklist

Who should attend

  • Compliance Managers — responsible for translating regulatory duties into operating controls
  • Legal Counsel — advising business teams on regulated activities and transaction risks
  • Risk Managers — assessing conduct, financial-crime and regulatory exposure
  • Investment Banking and Markets Staff — handling securities, disclosures and market-sensitive information
  • Operations Managers — managing onboarding, reporting, outsourcing and control evidence
  • Internal Auditors — testing whether regulatory controls are designed and operating effectively

Skills and tools covered

Regulatory obligations mappingSecurities law analysisMarket conduct controlsAML risk assessmentCompliance monitoringRegulatory incident response

Tools and standards

FATF Recommendations, IOSCO Objectives and Principles of Securities Regulation, MiFID II, Three Lines Model

How the course runs

Training methodology

The course uses short instructor briefings to establish legal principles, followed by sector-based case work and facilitated group analysis. Participants assess fact patterns involving securities activity, client onboarding, suspicious transactions, conflicts, outsourcing and supervisory enquiries. Simulations focus on issue spotting, escalation decisions, regulator-facing documentation and management reporting. Group exercises use model policies, control matrices and incident records rather than abstract legal questions. Each participant completes application planning against a current business area or control responsibility.

Requirements and prerequisites

Participants should have practical exposure to a bank, investment firm, insurer, asset manager, payment provider or financial-services support function. They should understand basic financial products, client relationships or operational controls and be comfortable reading policy documents and regulatory extracts. Prior work in legal, compliance, risk, audit, operations, front office or product management is suitable. A law degree, compliance qualification, prior securities-law study or detailed knowledge of one jurisdiction's rulebook is not required. The course explains legal concepts without assuming participants are lawyers.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants need practical familiarity with a financial-services business, product, client process or control function. Legal qualifications and prior formal compliance training are not required.

Bring examples of non-confidential regulatory, control or process issues from your role. Participants may also bring a redacted policy, monitoring plan or obligations list for application planning.

It is designed for legal, compliance, risk, audit, operations, product and front-office professionals in regulated financial institutions. It is particularly useful for staff whose decisions affect customers, transactions, reporting or third parties.

This course covers AML and monitoring within the wider legal framework for financial institutions. It also addresses securities law, market conduct, client protection, governance, outsourcing, data and regulatory enforcement.

Participants can use the templates to map obligations, assess control gaps, structure escalations and document decisions. The final module converts course content into a role-specific implementation plan.

Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The five days cover ten modules in teaching order, using briefings, cases, group work, simulations and application planning.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.