Standards: Compliance Training

Align corporate training to regulatory compliance requirements and industry standards.

When to Use

• Creating compliance training programs
• Regulatory requirement verification
• Industry certification training
• Audit preparation
• Legal compliance documentation

Major Regulatory Areas

Workplace Safety

OSHA (Occupational Safety and Health Administration):

• General Industry (29 CFR 1910)
• Construction (29 CFR 1926)
• Maritime (29 CFR 1915-1918)

Required Training Topics:

• Hazard Communication (HazCom/GHS)
• Personal Protective Equipment (PPE)
• Lockout/Tagout (LOTO)
• Confined Spaces
• Fall Protection
• Electrical Safety
• Bloodborne Pathogens
• Emergency Action Plans

Documentation Requirements:

• Training records (name, date, trainer, topic)
• Certificates of completion
• Competency verification

Healthcare Compliance

HIPAA (Health Insurance Portability and Accountability Act):

• Privacy Rule training
• Security Rule requirements
• Breach notification
• Annual training required

OSHA Healthcare Standards:

• Bloodborne Pathogens Standard
• TB exposure control
• Workplace violence prevention

FDA Regulations (pharmaceutical/medical device):

• GMP (Good Manufacturing Practices)
• GCP (Good Clinical Practices)
• 21 CFR Part 11 (electronic records)

Financial Services

SOX (Sarbanes-Oxley Act):

• Internal controls
• Financial reporting
• Auditor independence

FINRA Regulations:

• Securities training requirements
• Continuing education (Regulatory Element, Firm Element)
• AML (Anti-Money Laundering)

Dodd-Frank Act:

• Whistleblower protection
• Risk management

Data Privacy

GDPR (General Data Protection Regulation):

• Data protection principles
• Individual rights
• Data breach procedures
• DPO responsibilities

CCPA/CPRA (California Privacy):

• Consumer rights
• Data handling procedures
• Privacy notices

HIPAA (covered above)

PCI-DSS (Payment Card Industry):

• Data security training
• Secure handling procedures

Environmental

EPA Regulations:

• Hazardous waste management
• Air quality compliance
• Water discharge
• Spill prevention

ISO 14001 (Environmental Management):

• Environmental aspects training
• EMS awareness

Quality Management

ISO 9001 (Quality Management):

• Quality awareness training
• Process documentation
• Corrective actions

AS9100 (Aerospace):

• Configuration management
• First article inspection

Food Safety

FDA Food Safety:

• HACCP (Hazard Analysis Critical Control Points)
• Food defense
• Allergen management
• FSMA (Food Safety Modernization Act)

Information Security

ISO 27001:

• Information security awareness
• Access control
• Incident response

NIST Cybersecurity Framework:

• Identify, Protect, Detect, Respond, Recover

Industry-Specific:

• NERC CIP (power grid)
• CMMC (defense contractors)

Compliance Mapping Process

1. Identify Applicable Regulations

By Industry:

• Manufacturing: OSHA, EPA, ISO
• Healthcare: HIPAA, OSHA Bloodborne Pathogens, FDA
• Finance: SOX, FINRA, AML
• Technology: ISO 27001, GDPR, SOC 2

2. Extract Training Requirements

Regulatory Text Analysis:

• Identify "shall," "must," "required"
• Extract frequency requirements (annual, biennial, ongoing)
• Note documentation requirements
• Identify competency validation needs

3. Map Training to Requirements

Coverage Matrix:

• Regulation citation
• Training requirement
• Course module
• Assessment method
• Frequency
• Record keeping

4. Validate Sufficiency

Ensure:

• All requirements covered
• Appropriate depth
• Competency demonstration
• Documentation adequate for audit

CLI Interface

# OSHA compliance check
/standards.compliance-training --training "safety-program/" --regulation "OSHA-1910" --industry "manufacturing"

# Healthcare compliance
/standards.compliance-training --program "hospital-orientation/" --regulations "HIPAA,OSHA-Bloodborne" --validate

# Financial services
/standards.compliance-training --content "finra-training/" --regulations "FINRA-CE,AML,SOX" --gap-analysis

# Multi-regulation audit
/standards.compliance-training --full-audit --company-training "/" --industry "healthcare" --regulations "all-applicable"

# Generate compliance documentation
/standards.compliance-training --training "programs/" --regulation "OSHA" --generate-audit-report

Output

• Compliance requirements checklist
• Training coverage map
• Gap analysis with recommendations
• Audit-ready documentation
• Training record templates
• Compliance certificate templates

Composition

Input from: /learning.training-needs, /curriculum.develop-content Works with: /standards.coverage-validator, /standards.compliance-documentation Output to: Compliance-verified training programs

Exit Codes

• 0: Compliance validated
• 1: Critical requirements not met
• 2: Documentation insufficient
• 3: Regulation not supported