Training & Continuous Capacity Building

Why training is now a legal requirement

Training is no longer optional good practice. EU law increasingly requires it, and supervisors ask for evidence of it:

• NIS2, Article 20: members of management bodies must follow cybersecurity training, and entities are encouraged to offer similar training to staff;

• AI Act, Article 4: providers and deployers must take measures to support the AI literacy of the staff who use AI systems;

• AML rules: obliged entities must train staff on their anti-money laundering obligations;

• GDPR, Article 39: the Data Protection Officer is responsible for awareness-raising and training of staff involved in processing;

• national regimes: for example, Portugal's RGPC requires a training programme as part of the regulatory compliance programme.

CAP 2026: the Compliance & Accountability Plan

CAP is our annual continuous-training cycle: 13 vectors over 52 weeks. It keeps compliance officers, managers and key staff up to date throughout the year, with short, regular modules instead of a single annual session, and produces a continuous record of training for each participant.

Other formats

• bootcamps: intensive programmes to build a new compliance function or prepare for a new regime;

• workshops: focused sessions on one domain or obligation, for teams or management bodies;

• certification: structured learning paths with a final assessment and a certificate of completion;

• mentoring: individual support for compliance officers, DPOs and channel managers;

• in-company programmes: designed around the organisation's own risks, policies and procedures.

Delivered in the Office

Online courses, live sessions and materials are delivered in this Office. Progress, attendance and certificates are recorded, so the organisation can demonstrate who was trained, on what and when.

Prices

Workshops from EUR 150, CAP from EUR 240 per year and certification from EUR 300. See the Training & Capacity data sheet for details.

Training by domain

Data Protection · Cybersecurity (NIS2) · Digital Operational Resilience · Artificial Intelligence · Whistleblower Protection · Anti-Money Laundering · Anti-Corruption · Sustainability · Pay Transparency · Corporate Governance · Third-Party & Supply Chain · Digital Services & Markets