02 — Capability · BC-140.20
Compliance Program & Training
Turn obligations into policies, procedures and training people actually complete, with attestations that show they did, so compliance is a practice rather than a document.
- Compliance Policies
- Compliance Training
- Attestation
In scope
- Compliance policies and procedures
- Role-based compliance training
- Periodic attestation and certification campaigns
Out of scope
- The enterprise policy hierarchy itself (see BC-120)
- General learning platforms and curricula (see BC-330)
Decomposes into · 4
- BC-140.20.10Compliance Policy DevelopmentWrite the policies and procedures that translate each obligation into what people in a role must and must not do.
- BC-140.20.20Compliance TrainingDeliver and track training targeted at the roles that carry each obligation, repeated as rules and roles change.
- BC-140.20.30Attestation & CertificationRun the campaigns in which people confirm they have read, understood and complied with the policies that bind them.
- BC-140.20.40Compliance CommunicationKeep compliance expectations visible through guidance, reminders and leadership messaging between training cycles.