This course contains the use of artificial intelligence.

Nearly every organisation that has had a compliance failure had a policy covering it. The policy was not the problem.

Where compliance actually fails

It fails in the gap between the document and the decision. The policy was written for an auditor, so it is precise and unreadable, and the manager making a call on a Thursday evening does not consult it — they do what seems reasonable. The mandatory training was completed by everyone and changed nobody, because completion was the metric. Nobody owns the control, so when it fails there are three people who each assumed it was one of the others. And the code of conduct describes values rather than decisions, so it cannot be applied to the specific awkward situation in front of you.

What this course covers

Forty-one lessons from the environment down to the audit. The context first: legal systems and how business is regulated, labour legislation, international institutions and trade, what multinational structure changes about obligations, technology, and ethics and social responsibility as an operating matter rather than a poster. Then the risk and control framework: the heat map, the fraud triangle, cognitive bias and conflict of interest, ISO 31000, escalation, leadership-team dynamics, risk culture, the three lines of defence with the usual confusion in the second, the high-reliability organisation, and a code of conduct written so it can be applied. Then obligations across borders: multi-jurisdiction structures, mobility and assignments, unions, European works councils, the International Labour Organization and the OECD, global pay and tax equalisation, and — the core of it — employee data under GDPR and equivalent regimes, the compliance audit, and a plan for running an internal investigation. Then the most regulated area of workplace conduct: the legal requirements, prejudice and discrimination named plainly, and how to design mandatory training that changes behaviour and can be evidenced. Then documented procedures: what to document, BPMN, templates, implementation and a documentation project. Finally the audit itself: three audit levels starting with compliance, express scoring, a weighted checklist, four collection methods, gap analysis, RACI and a roadmap.

What this course does not cover

This is workplace and organisational compliance. It does not cover anti-money-laundering, sanctions screening, financial crime, third-party or supplier due diligence, or sector-specific regulatory reporting. It is also not legal advice and does not qualify you to give any — the obligations described vary by jurisdiction and change, and a lawyer remains a lawyer. If you came looking for financial-sector compliance, this is the wrong course and it is better that you know now.

Who is teaching this

I am Mike Pritula. I built the people system at Preply as it became a unicorn, and I have worked at Wargaming, iDeals and Alfa-Bank. More than 1.6 million students have enrolled in my courses across 185 countries, and over 150,000 specialists have gone through my programmes. I hold PHRi and SHRM-CP certifications and represent HRCI in more than ten countries.

What is included

• Lifetime access to all 41 lessons

• Active instructor support in the Q&A section

• A Udemy Certificate of Completion

• Working material: the heat map, the fraud triangle, ISO 31000, the three lines of defence, the data protection checklist, the investigation plan, BPMN templates, the audit checklist and roadmap

• A full audit demonstration on a real 200-person company

Where to start

Take one policy your organisation has and find the last decision that should have been governed by it. Then ask whether anyone opened the document. That gap is what this course is about. Enrol now and start today.