Key Takeaways
- Training is a required part of a bank's anti-money-laundering program. Federal rules require every bank's BSA/AML program to include "training for appropriate personnel" (31 CFR 1020.210), and the FFIEC expects that training to be role-appropriate and documented.
- Completion is not capability. A finished course proves attendance, not that a compliance officer can apply the rule when a real decision comes up. Regulators judge whether the program works in practice.
- The cost of a program that does not work is severe. In October 2024, TD Bank paid a record $1.3 billion penalty to FinCEN and pleaded guilty in a separate $1.8 billion resolution with the Justice Department, part of more than $3 billion in total penalties across federal regulators.
- Skills assessments turn "trained" into "proven capable." Testing staff before and after training finds the gaps, targets the fix, and produces evidence of capability. No law requires the test; it is a way to show the required training worked.
Every bank knows it has to train its compliance staff. BSA/AML training is not optional. It is among the components that every bank's anti-money-laundering program must include. So the training gets assigned, the courses get completed, and the completion records go into the file. Then comes the harder question. Can the staff apply what they learned?
Those are separate things, and the gap between them is where compliance risk lives. A completion certificate shows attendance. It does not show that a new analyst can recognize a suspicious wire, or that a lending officer understands what triggers a report. Proving capability, not just participation, is the real job.
Why Banks Must Train and Document Compliance Staff
The training requirement is written into federal rules. Every bank has to maintain a written anti-money-laundering program, and "training for appropriate personnel" is among the components that program must include (31 CFR 1020.210). It sits alongside internal controls, independent testing, a designated compliance officer, and ongoing customer due diligence.
The bank regulators expect that training to be real. The FFIEC BSA/AML Examination Manual tells examiners to look for training that is tailored to specific roles, covers the regulatory requirements and the bank's own policies, and is documented with attendance records. A certificate on file is not the standard. What matters is whether the right people received training suited to what their role involves.
Why a Training Completion Record Isn't Proof of Capability
A completion record answers a narrow question. It shows that a person opened a course and reached the end. It does not show whether they can apply the rule the next morning, when a transaction looks off and a decision has to be made in minutes. That gap stays invisible until something goes wrong, and in banking, going wrong is expensive.
In October 2024, TD Bank paid more than $3 billion to resolve federal findings that it had failed to maintain an adequate anti-money-laundering program, including a record $1.3 billion penalty from FinCEN. FinCEN found that the bank "willfully failed to implement and maintain an AML program that met the minimum requirements" of the law. Cases at that scale are rarely about a single missing course. They are about a program that looked complete on paper and did not hold up in practice. When an examiner or a court asks whether staff understood their obligations, "everyone completed the training" is a weak answer if no one measured what they learned.
How Skills Assessments Prove Compliance Capability
A skills assessment measures the part a completion record leaves out. It checks whether the person can apply the rule to a real transaction, not just sit through a slide about it. Test staff before training to find the real gaps, assign training that targets those gaps, then test again to confirm the gap closed. What comes out is a record of capability, not just a log of attendance.
None of this is a legal mandate. No federal rule tells a bank to give its compliance staff a test, and the FFIEC manual treats testing as an option rather than a requirement. The legal requirement is adequate, appropriate, documented training. A skills assessment is simply the most direct way to show that the training worked and that the people in compliance roles can meet their obligations. For an examiner, that evidence is stronger than a stack of certificates. For the bank, it turns training from a box to check into a measure of readiness.
How KnowledgeCity's KC Skills Supports Banks
At KnowledgeCity, our KC Skills solution is built for this. It measures competency through assessments rather than attendance logs. You map the skills a compliance role requires, generate assessments from those skills, and see where each person stands on a skills matrix. Gaps route automatically to the right training, and a follow-up assessment confirms whether the gap closed.
KC Skills sits in our Grow suite, part of the wider KnowledgeCity platform, so the assessment, the assigned training, and the record all live together. When a bank needs to show that its compliance staff are trained and capable, the evidence is already there. KC Skills measures and documents capability. The decision about who is ready for a compliance role stays with the bank.
Show examiners your compliance staff are capable, not just trained
Assess the skills a compliance role needs, close the gaps with targeted training, and keep the evidence together.
Compliance Skills Assessment FAQs
1. Does the law require banks to test compliance staff?
No. Federal rules require every bank's BSA/AML program to include training for appropriate personnel (31 CFR 1020.210), and the FFIEC expects that training to be role-appropriate and documented. There is no federal rule that requires a competency test or a skills assessment. Assessment is a best-practice way to show the required training worked, not a legal requirement on its own.
2. What does the BSA/AML training requirement cover?
Training is among the required components of a bank's anti-money-laundering program, alongside internal controls, independent testing, a designated compliance officer, and ongoing customer due diligence (31 CFR 1020.210). The FFIEC BSA/AML Examination Manual expects the training to be tailored to specific roles, to cover the regulatory requirements and the bank's own policies, and to be documented with attendance records.
3. Why isn't a training completion record enough?
A completion record shows that someone finished a course. It does not show whether they can apply the rule to a real transaction. Regulators judge whether a bank's compliance program works in practice, and enforcement cases often involve programs that looked complete on paper. In October 2024, TD Bank paid more than $3 billion after regulators found its AML program did not meet the minimum requirements, including a record $1.3 billion FinCEN penalty. Measuring capability, not just completion, is what closes that gap.
4. How does a skills assessment prove capability?
A skills assessment tests what a person can do before and after training. It identifies specific gaps, assigns training to close them, and reassesses to confirm the gap is gone. The result is documented evidence that staff in compliance roles can apply the requirements, which is far more useful to an examiner than an attendance log.
References
- U.S. Code of Federal Regulations. 31 CFR 1020.210 – Anti-Money Laundering Program Requirements for Banks.
- Federal Financial Institutions Examination Council. BSA/AML Examination Manual – BSA/AML Training.
- Financial Crimes Enforcement Network (FinCEN). FinCEN Assesses Record $1.3 Billion Penalty Against TD Bank (October 10, 2024).
- U.S. Department of Justice. TD Bank Pleads Guilty to Bank Secrecy Act and Money Laundering Conspiracy Violations in $1.8B Resolution (October 10, 2024).
- KnowledgeCity. KC Skills (Grow Suite).