
Key Takeaways
- 31 CFR 1020.210(a)(2)(iv) requires training for appropriate personnel and prescribes no course.
- 12 CFR 21.21(d)(4) uses the same wording for national banks under the OCC.
- Financial crime compliance cost US and Canadian institutions $61 billion, with 70% prioritizing cost cuts.
- Sort every requirement into 2 buckets before you buy anything.
- Your own products, procedures and escalation paths are the custom layer.
- Run both sources through 1 platform so the audit export stays whole.
You manage compliance training across 30 branches, and the sourcing decision is already half made for you. AML and fair lending obligations reach every branch and every customer-contact role in the same way, which makes them a poor use of your authoring budget. Your own product disclosures and escalation paths reach nobody else at all.
That split is the whole argument, and it divides your catalog into 2 unequal halves. That line is the hard part, because the rules name the obligation and stop well short of naming the course. Both of the rules below say so in almost identical words.
Where Online Compliance Training Courses Come From
Two rules set the banking obligation and neither one tells you what to teach. The first of those 2 rules is 31 CFR 1020.210(a)(2)(iv), which lists "training for appropriate personnel" as a required element of an anti-money laundering program. The OCC's rule at 12 CFR 21.21(d)(4) says "provide training for appropriate personnel" for national banks.
Both of those rules create the same duty on your bank. Neither specifies a catalog, a curriculum or a delivery method, and the same rule requires the program itself to be written and approved by your board. That gap between the rule's wording and a working training plan is the space you are sourcing into.
What the rule gives you | What it leaves open |
|---|---|
A named obligation to train | The course content |
The personnel it applies to, described by role | Which roles that means at your bank |
A written, board-approved program | The curriculum inside it |
Why Volume Makes This a Sourcing Question
Owning that space means owning content maintenance, which compounds over time. AML typologies move as FinCEN publishes guidance, fair lending expectations move with CFPB activity, and consumer protection material has to reflect the current framework. Each of those moves is a revision your own fundamentals course would have to absorb.
Each new branch multiplies those revisions in only 1 direction. Adding 10 locations adds 10 endpoints to the same catalog where you license the content, and it adds 10 more courses to maintain where you wrote it yourself. Where you license it instead, how a learning library keeps annual bank compliance refreshers on track covers the renewal side of that.
What a Ready-Made Library Covers
A library is the right source wherever the content describes a framework that applies beyond your bank. Those categories are the ones every covered institution needs in roughly the same form:
- Assign AML and BSA fundamentals to every employee in a covered role
- Assign fair lending and ECOA principles to all lending and customer-contact staff
- Assign consumer protection material across branch, phone and digital service roles
- Assign harassment prevention and workplace safety to the whole workforce
- Assign accredited professional development to staff carrying certifications
KC Library carries more than 50,000 training videos across business, compliance, safety, technology and finance, with new courses added to the catalog every week. Much of that catalog is recognized by PMI, SHRM, HRCI and IIBA for recertification credit. That recognition lets 1 subscription answer both the compliance requirement and the continuing education requirement your certified staff carry.
The cost behind that argument is not a small one. In February 2024 LexisNexis Risk Solutions put the cost of financial crime compliance at $61 billion a year for US and Canadian institutions. 70% of them were giving priority to cutting costs over the following 12 months. Cutting that cost starts with licensed content, because licensed content is content your team is not maintaining.
Why the Update Cycle Is the Point
Examiners reviewing a BSA/AML program look at whether training happened, whether it suited the roles of the people trained, and whether it was delivered in a defensible timeframe. A library that maintains its own content against current guidance gives you a vendor update record to point at. That record is dated, which is the property the currency question turns on.
Dating is the part you cannot reconstruct afterwards. Where your team re-authored a course 2 years ago and has not revisited it since, the currency question has no good answer. AML training for bank employees works through what examiners ask for in that conversation.
Cover the regulatory layer without authoring it.
KC Library delivers accredited AML, BSA, fair lending and consumer protection courses to every branch.
What Only Your Bank Can Author

The Content No Vendor Holds
No library carries your customer dispute protocol, your teller-line escalation path for a suspected fraud transaction, or your documentation standard for suspicious activity monitoring. All 3 describe how your bank operates, and a course on AML fundamentals cannot stand in for a course on your own SAR filing procedure. Those are the courses your own team has to write.
Product training is another of those courses, and it belongs in the same category. A new deposit product, a revised loan product or a new digital feature needs training on its terms, its disclosures and its customer communication requirements. No vendor knows any of those 3 things, so custom development is the only source available.
Where Custom Earns Its Cost
Those sources separate on 1 question. Where the content is specific to your product mix, your customer risk profile, your internal procedures or your service standards, no library can supply it. Everything else describes a framework that applies to every bank in the same way.
That first kind has a clear example in role-specific AML typology training. Fundamentals explain the regulatory framework to everybody; typologies tied to your own higher-risk business lines and transaction patterns explain what your frontline staff will meet on a Tuesday. The same library-or-custom question in an industrial setting works through the identical test outside banking.
The Sourcing Decision, Requirement by Requirement
Sort every requirement before you write a curriculum, because the sort decides the budget:
Training category | Source | Why |
|---|---|---|
AML fundamentals and BSA principles | Library | Obligation named, content unprescribed |
Fair lending and ECOA principles | Library | Framework content, maintained against guidance |
Consumer protection and UDAP | Library | Applies to all customer-contact roles alike |
Harassment prevention | Library | Consistent across branches and roles |
Professional development for certified staff | Library | Accredited for recertification credit |
Product knowledge and disclosure training | Custom | Your product terms and your disclosures |
Branch operating and escalation protocols | Custom | Your service model and documentation standard |
Role-specific AML typologies | Custom | Your product mix and your risk profile |
That sort puts 6 of the 8 rows in library work and leaves 2 with you. That ratio is what frees your training team for the content nobody else can write. Check your own list against the same 8 categories before the next renewal.
Running Both Through 1 System
Audit readiness is the 1 practical reason to keep them together. A bank under examination that produces 1 completion record from a library platform and another from a custom course tool has given examiners a reconciliation exercise to do first. Reconciliation is where an organized program starts to look disorganized.
KC LMS delivers licensed catalog content and your own authored courses through the same platform, under 1 role-based assignment structure and 1 timestamped audit record. Assigning AML fundamentals from the catalog and your own SAR procedure course happens in the same console, and both appear in the same export. One console and 1 export is the whole design goal.
That export matters most when somebody external asks for it. How banking workforce platforms answer examiners during on-site reviews describes what it has to contain. An examiner handles the export, which is why its contents matter.
What the Platform Puts in the Record
Your examination answer has 3 parts, covering who was trained, on what, and when. The platform holds the assignment, the completion date and the recertification schedule against each named employee, so the first and third parts come out of 1 report. The second part depends on where the course came from.
The licensed catalog answers the second part for the framework layer, with compliance content mapped to the regulations institutions are held to and refreshed weekly. KC Studio covers the layer that is yours, so your SAR procedure and your product disclosures end up in the same catalog as the AML fundamentals course. Both halves then carry the same completion record.
Sort your requirements once, source each one from the place equipped to supply it, and the architecture survives both portfolio growth and the next examination. Your training team then spends its hours on the 2 rows in that table nobody else can fill. That is the version worth defending when an examiner asks.
Frequently Asked Questions
1. What compliance training are banks legally required to provide?
31 CFR 1020.210(a)(2)(iv) requires training for appropriate personnel as an element of the anti-money laundering program, and 12 CFR 21.21(d)(4) says the same for national banks under the OCC. Both rules name the obligation and leave the course content open. The program itself has to be written and approved by your board.
2. Can a ready-made library satisfy the AML training requirement?
It satisfies the fundamentals layer, covering the regulatory framework, reporting obligations and role-appropriate awareness for every covered employee. Typology training tied to your own product mix and customer risk profile is a separate job that no vendor can author for you. Most banks need both parts.
3. How does a library stay current with regulatory change?
The vendor maintains the content, so AML, BSA, fair lending and consumer protection material reflects current guidance without your team revising or republishing anything. KC Library adds new courses every week across its 5 categories. The update record is also what you point an examiner at when the currency question comes up.
4. Should a bank use a library, custom courses, or both?
Most multi-branch banks use both, and the split follows the content. A library covers the categories that apply the same way at every institution, and custom development covers your products, procedures and escalation paths. Running the 2 through 1 platform keeps completion records unified and the audit export consolidated.
References
- Legal Information Institute, Cornell Law School. "31 CFR 1020.210, Anti-Money Laundering Program Requirements for Banks." law.cornell.edu
- Legal Information Institute, Cornell Law School. "12 CFR 21.21, Procedures for Monitoring Bank Secrecy Act Compliance." law.cornell.edu
- LexisNexis Risk Solutions. "True Cost of Financial Crime Compliance Study, United States and Canada, February 2024." risk.lexisnexis.com
- Federal Deposit Insurance Corporation. "Consumer Compliance Examination Manual, Fair Lending Laws and Regulations." fdic.gov
- Office of the Comptroller of the Currency. "Bank Secrecy Act Compliance." occ.gov
- KnowledgeCity. "KC Library." knowledgecity.com