Skip to content
KnowledgeCity

By KnowledgeCity

Ready-Made Compliance Training Courses vs. Custom: Which Fits a Bank's Training Plan

9 min read

A bank compliance training director and an L&D manager mapping training requirements against a branch network

Key Takeaways

  • 31 CFR 1020.210(a)(2)(iv) requires training for appropriate personnel and prescribes no course.
  • 12 CFR 21.21(d)(4) uses the same wording for national banks under the OCC.
  • Financial crime compliance cost US and Canadian institutions $61 billion, with 70% prioritizing cost cuts.
  • Sort every requirement into 2 buckets before you buy anything.
  • Your own products, procedures and escalation paths are the custom layer.
  • Run both sources through 1 platform so the audit export stays whole.

You manage compliance training across 30 branches, and the sourcing decision is already half made for you. AML and fair lending obligations reach every branch and every customer-contact role in the same way, which makes them a poor use of your authoring budget. Your own product disclosures and escalation paths reach nobody else at all.

That split is the whole argument, and it divides your catalog into 2 unequal halves. That line is the hard part, because the rules name the obligation and stop well short of naming the course. Both of the rules below say so in almost identical words.

Where Online Compliance Training Courses Come From

Two rules set the banking obligation and neither one tells you what to teach. The first of those 2 rules is 31 CFR 1020.210(a)(2)(iv), which lists "training for appropriate personnel" as a required element of an anti-money laundering program. The OCC's rule at 12 CFR 21.21(d)(4) says "provide training for appropriate personnel" for national banks.

Both of those rules create the same duty on your bank. Neither specifies a catalog, a curriculum or a delivery method, and the same rule requires the program itself to be written and approved by your board. That gap between the rule's wording and a working training plan is the space you are sourcing into.

What the rule gives you

What it leaves open

A named obligation to train

The course content

The personnel it applies to, described by role

Which roles that means at your bank

A written, board-approved program

The curriculum inside it

Why Volume Makes This a Sourcing Question

Owning that space means owning content maintenance, which compounds over time. AML typologies move as FinCEN publishes guidance, fair lending expectations move with CFPB activity, and consumer protection material has to reflect the current framework. Each of those moves is a revision your own fundamentals course would have to absorb.

Each new branch multiplies those revisions in only 1 direction. Adding 10 locations adds 10 endpoints to the same catalog where you license the content, and it adds 10 more courses to maintain where you wrote it yourself. Where you license it instead, how a learning library keeps annual bank compliance refreshers on track covers the renewal side of that.

What a Ready-Made Library Covers

A library is the right source wherever the content describes a framework that applies beyond your bank. Those categories are the ones every covered institution needs in roughly the same form:

  • Assign AML and BSA fundamentals to every employee in a covered role
  • Assign fair lending and ECOA principles to all lending and customer-contact staff
  • Assign consumer protection material across branch, phone and digital service roles
  • Assign harassment prevention and workplace safety to the whole workforce
  • Assign accredited professional development to staff carrying certifications

KC Library carries more than 50,000 training videos across business, compliance, safety, technology and finance, with new courses added to the catalog every week. Much of that catalog is recognized by PMI, SHRM, HRCI and IIBA for recertification credit. That recognition lets 1 subscription answer both the compliance requirement and the continuing education requirement your certified staff carry.

The cost behind that argument is not a small one. In February 2024 LexisNexis Risk Solutions put the cost of financial crime compliance at $61 billion a year for US and Canadian institutions. 70% of them were giving priority to cutting costs over the following 12 months. Cutting that cost starts with licensed content, because licensed content is content your team is not maintaining.

Why the Update Cycle Is the Point

Examiners reviewing a BSA/AML program look at whether training happened, whether it suited the roles of the people trained, and whether it was delivered in a defensible timeframe. A library that maintains its own content against current guidance gives you a vendor update record to point at. That record is dated, which is the property the currency question turns on.

Dating is the part you cannot reconstruct afterwards. Where your team re-authored a course 2 years ago and has not revisited it since, the currency question has no good answer. AML training for bank employees works through what examiners ask for in that conversation.

Cover the regulatory layer without authoring it.

KC Library delivers accredited AML, BSA, fair lending and consumer protection courses to every branch.

Explore KC Library

What Only Your Bank Can Author

Where Each Bank Course Comes From License it AML fundamentals, fair lending, privacy, security awareness Build it Your SAR procedure, products and escalation paths What the rule says 31 CFR 1020.210(a)(2)(iv) prescribes no course Sort every requirement before you buy anything

The Content No Vendor Holds

No library carries your customer dispute protocol, your teller-line escalation path for a suspected fraud transaction, or your documentation standard for suspicious activity monitoring. All 3 describe how your bank operates, and a course on AML fundamentals cannot stand in for a course on your own SAR filing procedure. Those are the courses your own team has to write.

Product training is another of those courses, and it belongs in the same category. A new deposit product, a revised loan product or a new digital feature needs training on its terms, its disclosures and its customer communication requirements. No vendor knows any of those 3 things, so custom development is the only source available.

Where Custom Earns Its Cost

Those sources separate on 1 question. Where the content is specific to your product mix, your customer risk profile, your internal procedures or your service standards, no library can supply it. Everything else describes a framework that applies to every bank in the same way.

That first kind has a clear example in role-specific AML typology training. Fundamentals explain the regulatory framework to everybody; typologies tied to your own higher-risk business lines and transaction patterns explain what your frontline staff will meet on a Tuesday. The same library-or-custom question in an industrial setting works through the identical test outside banking.

The Sourcing Decision, Requirement by Requirement

Sort every requirement before you write a curriculum, because the sort decides the budget:

Training category

Source

Why

AML fundamentals and BSA principles

Library

Obligation named, content unprescribed

Fair lending and ECOA principles

Library

Framework content, maintained against guidance

Consumer protection and UDAP

Library

Applies to all customer-contact roles alike

Harassment prevention

Library

Consistent across branches and roles

Professional development for certified staff

Library

Accredited for recertification credit

Product knowledge and disclosure training

Custom

Your product terms and your disclosures

Branch operating and escalation protocols

Custom

Your service model and documentation standard

Role-specific AML typologies

Custom

Your product mix and your risk profile

That sort puts 6 of the 8 rows in library work and leaves 2 with you. That ratio is what frees your training team for the content nobody else can write. Check your own list against the same 8 categories before the next renewal.

Running Both Through 1 System

Audit readiness is the 1 practical reason to keep them together. A bank under examination that produces 1 completion record from a library platform and another from a custom course tool has given examiners a reconciliation exercise to do first. Reconciliation is where an organized program starts to look disorganized.

KC LMS delivers licensed catalog content and your own authored courses through the same platform, under 1 role-based assignment structure and 1 timestamped audit record. Assigning AML fundamentals from the catalog and your own SAR procedure course happens in the same console, and both appear in the same export. One console and 1 export is the whole design goal.

That export matters most when somebody external asks for it. How banking workforce platforms answer examiners during on-site reviews describes what it has to contain. An examiner handles the export, which is why its contents matter.

What the Platform Puts in the Record

Your examination answer has 3 parts, covering who was trained, on what, and when. The platform holds the assignment, the completion date and the recertification schedule against each named employee, so the first and third parts come out of 1 report. The second part depends on where the course came from.

The licensed catalog answers the second part for the framework layer, with compliance content mapped to the regulations institutions are held to and refreshed weekly. KC Studio covers the layer that is yours, so your SAR procedure and your product disclosures end up in the same catalog as the AML fundamentals course. Both halves then carry the same completion record.

Sort your requirements once, source each one from the place equipped to supply it, and the architecture survives both portfolio growth and the next examination. Your training team then spends its hours on the 2 rows in that table nobody else can fill. That is the version worth defending when an examiner asks.

Frequently Asked Questions

1. What compliance training are banks legally required to provide?

31 CFR 1020.210(a)(2)(iv) requires training for appropriate personnel as an element of the anti-money laundering program, and 12 CFR 21.21(d)(4) says the same for national banks under the OCC. Both rules name the obligation and leave the course content open. The program itself has to be written and approved by your board.

2. Can a ready-made library satisfy the AML training requirement?

It satisfies the fundamentals layer, covering the regulatory framework, reporting obligations and role-appropriate awareness for every covered employee. Typology training tied to your own product mix and customer risk profile is a separate job that no vendor can author for you. Most banks need both parts.

3. How does a library stay current with regulatory change?

The vendor maintains the content, so AML, BSA, fair lending and consumer protection material reflects current guidance without your team revising or republishing anything. KC Library adds new courses every week across its 5 categories. The update record is also what you point an examiner at when the currency question comes up.

4. Should a bank use a library, custom courses, or both?

Most multi-branch banks use both, and the split follows the content. A library covers the categories that apply the same way at every institution, and custom development covers your products, procedures and escalation paths. Running the 2 through 1 platform keeps completion records unified and the audit export consolidated.

References

  1. Legal Information Institute, Cornell Law School. "31 CFR 1020.210, Anti-Money Laundering Program Requirements for Banks." law.cornell.edu
  2. Legal Information Institute, Cornell Law School. "12 CFR 21.21, Procedures for Monitoring Bank Secrecy Act Compliance." law.cornell.edu
  3. LexisNexis Risk Solutions. "True Cost of Financial Crime Compliance Study, United States and Canada, February 2024." risk.lexisnexis.com
  4. Federal Deposit Insurance Corporation. "Consumer Compliance Examination Manual, Fair Lending Laws and Regulations." fdic.gov
  5. Office of the Comptroller of the Currency. "Bank Secrecy Act Compliance." occ.gov
  6. KnowledgeCity. "KC Library." knowledgecity.com

Everything your workforce needs, on one platform.

A quick walkthrough tailored to your team — learning, compliance, skills, and performance in one place.