Ready-Made Compliance Training Courses vs. Custom: Which Fits a Public Agency

A county training director opens the year with a list of mandates and 1 question about each of them. Public works, health services and the clerk's office all carry the same federal obligations, and each department also carries procedures nobody outside the building has ever seen. The list looks like 1 problem and it is 2.

Your regulatory compliance training courses come from 2 different places, and the sorting is what the procurement decision turns on. Get it wrong in 1 direction and your team spends the year maintaining an OSHA course somebody else already maintains. Miss it in the other direction and an examiner asks for a procedure course nobody built.

Where the Sourcing Line Falls in a Public Agency

The line that does the sorting runs along authorship. Where an outside body wrote the rule, an outside body can write the course, because the content describes that rule and nothing about your agency. Where your jurisdiction wrote the rule, only your jurisdiction can write the course.

That test is easier to apply than a category list, and it survives reorganization. A department can move, a program can end, and the question of who wrote the underlying requirement stays the same. Apply it once per requirement and the procurement list sorts itself into 2 piles:

• Put every requirement written by an outside body in the license pile.
• Put every requirement written by your own jurisdiction in the build pile.
• Review both piles with the ethics officer before procurement opens.

Content the Law Writes

Most of that list comes from outside the agency. OSHA general industry standards, public employee safety rules in state plan states, EEOC harassment prevention guidance, ethics obligations and security awareness requirements all describe frameworks your agency did not design. A hazard communication course reads the same for a municipal utility and a county roads crew.

That consistency across every department is the sourcing signal. When a course changes only because the regulation changed, somebody who tracks the regulation full time should own the revision. Your team owning it means tracking every one of those frameworks alongside everything else they do.

The scale is why this matters in government more than elsewhere. State and local government employed 19.9 million people in March 2024, spread across school districts, health departments, law enforcement and utilities. Every 1 of those employees is covered by at least 1 mandate that originated outside the agency.

Content the Jurisdiction Writes

Underneath the mandates is a layer only you can produce. Civil service procedure for personnel actions, grievance handling and position classification follows your jurisdiction's own rules. The financial disclosure form, the recusal steps and the whistleblower channel are specific enough that a generic ethics course does not satisfy the officer asking for them.

Program-specific training belongs in that same layer of content. An agency administering federal grants trains staff on its own audit readiness and reporting practice, and a transit authority trains operators on its routes and dispatch procedures. No vendor writes that, because no vendor knows how your agency runs.

What a Ready-Made Library Covers Across Departments

Those 2 layers behave differently once procurement starts moving. A library catalog is already written, so the lead time is the time it takes to assign a course. Internal authoring runs on your team's calendar and competes with everything else in it.

What Only Your Agency Can Author

The custom layer is smaller than most training plans assume, and it is the part that fails an examination when it is missing. Examiners rarely ask whether your OSHA course was good. They ask whether the employee who handled the grant knew your agency's reporting steps.

Keeping that layer small is the point of sorting carefully. Every hour your team spends on a course somebody else maintains is an hour the procedure course does not get. Licensing the first layer is what funds the second.

The Civil Service Layer

Civil service content is the clearest case, because it changes when your rules change and never when a federal standard does. Position classification, grievance steps and performance documentation follow a code written for your jurisdiction. New employees also need the structure of the agency they just joined, which no general course on public employment supplies.

Build that internal layer deliberately and keep it short. Most agencies need 4 or 5 internal courses, and each 1 should answer a question an examiner can ask. Order the build so the riskiest gap closes first:

• Write the procedure course for the program with the most external reporting.
• Record the jurisdiction's disclosure and recusal steps as their own course.
• Give new employees 1 orientation course covering your structure and supervisor chain.

Keeping 1 Completion Record for the Audit

Both layers end up in front of the same examiner, which is the reason delivery matters as much as sourcing. An inspector general review asks who received which training, when they completed it, and whether the content covered the applicable requirement. 2 separate completion exports turn that into a reconciliation exercise before anybody answers the question.

Delivering Both Sources Through the LMS You Have

Most agencies already run that export out of a learning management system held under a statewide or county contract. A library that ships SCORM and xAPI packages pushes its courses into that system, so assignments and completions stay in the record you have maintained for years. Nothing gets replaced, and the audit export keeps coming from 1 place.

Custom courses join the same record when they are built to the same packaging standard. Your examiner then sees 1 history per employee covering both sources. That single history is what makes a training program defensible on the day somebody asks.

What KC Library Changes for an Agency Training Team

KC Library holds more than 50,000 training videos across business, compliance, safety, technology and finance, and the catalog is refreshed monthly by a team whose job is tracking those frameworks. Its courses are delivered through KC LMS, so a training director assigns a harassment prevention course and an internally built procedure course from the same console. Both courses appear in the same timestamped completion record.

What changes for your team is where the hours go. Agencies serving government and public sector workforces stop owning the OSHA revision cycle and start owning the civil service content that nobody else can write. The mandated stack keeps updating on somebody else's calendar.

Sort the stack once, by who wrote the rule, and the rest of the plan follows from it. License the layer the law writes. Author the layer your jurisdiction writes, and deliver both through the system your auditors already read.

Frequently Asked Questions

1. Which compliance courses must public agency employees complete?

The mandated stack usually covers OSHA general industry and public employee safety, harassment prevention under EEOC guidance and state law, ethics under the applicable jurisdiction code, and security awareness where federal or state rules apply. Health agencies add HIPAA training. Which mandates apply depends on the agency type, the jurisdiction and the work performed.

2. Can a ready-made library satisfy an ethics training requirement?

A library covers the foundational part, which is conflict of interest, gift and gratuity rules and public service conduct. The disclosure form, the recusal steps and the reporting channel belong to your jurisdiction's own code, so those need an internally authored course. Most agencies run both and treat them as 1 ethics program.

3. How does library content reach the LMS an agency already runs?

Libraries that publish SCORM and xAPI packages deliver courses into any compatible system under contract. The agency assigns and tracks completion in the platform it already uses, so no migration is needed. Completion records, timestamps and assessment data stay in the established system of record.

4. How do we decide whether a requirement is library or custom?

Ask who wrote the rule the course describes. Where an outside body wrote it, the content is the same for every comparable employer, so a library can carry it. Where your jurisdiction wrote it, the content describes your own procedure and only your staff can author it.

5. What happens to this plan when the training budget is cut?

A subscription protects the breadth of mandated coverage at a cost well below authoring the same courses in-house. The pressure then falls on the custom layer, where deployments can be sequenced across the fiscal year without losing coverage on a mandate. Keeping internal capacity on jurisdiction-specific content is what makes that sequencing possible.

References

1. U.S. Census Bureau. Annual Survey of Public Employment and Payroll Summary Report: 2024. March 2025. census.gov
2. Occupational Safety and Health Administration. Training Requirements and Resources. osha.gov
3. U.S. Equal Employment Opportunity Commission. Promising Practices for Preventing Harassment. eeoc.gov
4. U.S. Office of Personnel Management. Training and Development Policy. opm.gov
5. U.S. Department of Health and Human Services, Office for Civil Rights. HIPAA Training. hhs.gov