Purpose

Ensure personnel receive AML/CTF/CPF training appropriate to their role and that completion evidence is retained.

Scope

This procedure applies to onboarding training, annual refresher training and role-based training for Operations, Compliance and other AML-impacting staff.

Steps

#ActionDetailsEvidence
1Maintain training populationMaintain population of all employees, directors, senior management and AML-relevant contractors/vendors requiring training. All staff involved in client onboarding, transaction processing, compliance, trading, and IT/security must be trained. Senior management and directors must understand oversight responsibilities. Third-party contractors or vendors with AML-related functions must be trained as applicableIn-scope population and role matrix
2Assign onboarding and refresher trainingAssign AML onboarding training upon hire and annual refresher training to all employeesTraining assignment
3Assign role-specific trainingAssign role-specific training as needed and at least annually where applicable to Compliance, Operations, trading, transaction processing, onboarding and IT/security rolesTraining assignment
4Deliver ad hoc updatesDeliver ad hoc updates to affected personnel after material legal, regulatory, policy, tool, typology, incident or control changeTraining assignment
5Deliver training modulesModules cover both legal/regulatory concepts and internal procedures: AML/CFT/CFP laws and CBCS regulations; ML/TF typologies; CDD, EDD, and Risk Profiling; sanctions screening procedures and red flag indicators; STR/FFR/PNMR reporting obligations; KYT tools, transaction monitoring systems, and alert handling; escalation workflows and documentation standardsTraining content version
6Use mixed delivery methodsDeliver via combination of e-learning, live sessions, and scenario-based workshops. Use approved external e-learning, CBCS guidance, live instruction and scenario-based exercises. Retain the version of delivered materialTraining content version
7Assess comprehensionUse knowledge checks, quizzes, or scenario evaluation to assess comprehension. Log attendance and test results in Bitkaya’s compliance systemAssessment result
8Remediate failuresRequire personnel who do not meet the approved comprehension threshold to repeat training or complete targeted remediation before the gap is closedOverdue remediation record
9Retain training recordsRetain training logs, course materials, and attendance records. Compliance Officer is responsible for designing, updating, and monitoring the training program. Training effectiveness is evaluated through audits, feedback, and incident reviews. Program updated regularly to reflect new regulations, typologies, or internal policy changesAttendance or completion record
10Evaluate effectivenessEvaluate effectiveness through feedback, incident and alert lessons, audits and independent review, and update the programme accordinglyEffectiveness review and improvement record
11Retain and report recordsRetain assignments, attendance, completion, assessment, remediation and content records and report material gaps to managementAttendance or completion record

Training Schedule

Type of TrainingFrequencyAudience
AML Onboarding TrainingUpon hireAll new employees
Annual Refresher TrainingOnce per yearAll employees
Role-Specific TrainingAs needed or annuallyCompliance, Trading, IT
Ad Hoc UpdatesUpon policy/tool changesRelevant departments

Proportionality in Training

Under the proportionality framework, all employees receive AML/CFT onboarding and annual refresher training. Specialized training is delivered only to roles with direct AML/CFT impact (Operations, Compliance). External e-learning and CBCS guidance materials are used in place of developing training materials internally.

Evidence

  • training assignment
  • attendance or completion record
  • assessment result
  • overdue remediation record
  • training content version
  • in-scope population and role matrix
  • effectiveness review and improvement record

Relationships

Assurance

Runtime effectiveness results are maintained in Odoo and assessed through the Hermes workflow tracked in ISS-HERMES-001. This note defines design, ownership, evidence expectations and testing method; it does not contain a manually maintained operation, evidence or overall effectiveness rating.

  • Design status: implemented from approved AML/CTF/CPF Compliance Manual version 2.2

History

  • 2026-07-26: Added audiences, schedules, curriculum, delivery methods, assessment, retake and effectiveness requirements after a full manual rescreen.
  • 2026-07-26: Created from the approved AML/CTF/CPF Compliance Manual version 2.2.