38.3 Board Education, Training Administration and Effectiveness
Key Takeaways
Training effectiveness should be tested through operational performance and observed errors.
Board education should address the institution’s products, changes and material compliance findings.
Assignment and overdue-course escalation schedules are institutional policy choices unless a particular authority specifies them.
4. Marketing, Digital Strategy & Product Teams
- UDAAP Compliance: Reviewing all marketing campaigns, promotional scripts, digital ads, and web portals; ensuring promotional claims are substantiated; eliminating contradictory fine print or hidden fees.
- Truth in Lending (Reg Z) & Truth in Savings (Reg DD) Advertising: Trigger terms requiring full statutory disclosures (for example, a closed-end credit advertisement stating a payment amount or down payment can trigger additional disclosures; an advertised interest rate must be stated as an APR under the applicable rule. An APY deposit advertisement triggers specified disclosures such as minimum balances, relevant time periods and the effect of fees, with additional time-account provisions).
- TCPA & TSR: Obtaining prior express written consent for autodialed or pre-recorded marketing calls and SMS texts; maintaining internal and National Do-Not-Call registries.
- CAN-SPAM Act: Functional 30-day opt-out mechanism; honoring opt-outs within 10 business days; valid physical postal address.
- Fair Housing Advertising: Prominent display of the Equal Housing Lender/Lender logo; ensuring advertising media reach diverse geographic and demographic populations without selective exclusion.
Tier 3: Board of Directors and Senior Executive Training
Board members and executive leaders do not require detailed operational instruction on how to fill out a Loan Estimate or file a CTR. Instead, Tier 3 training concentrates on fiduciary oversight and compliance governance:
- Fiduciary Duty of Care: The Board's non-delegable duty to maintain an effective CMS and oversee management's compliance risk profile;
- Interagency Consumer Compliance Rating System: Understanding how examiners evaluate Board and Management Oversight, the Compliance Program, and Violations of Law;
- Institution-Affiliated Party (IAP) Liability: Personal regulatory liability under Section 8 of the Federal Deposit Insurance Act (12 U.S.C. § 1818);
- Penalty authorities: Distinguish Section 1818 administrative civil money penalties from FIRREA Section 1833a civil penalties for specified predicate offenses. Apply the correct elements and current inflation adjustment; these are different legal frameworks.
- Macro-Compliance Horizon Risks: Emerging regulatory enforcement priorities, peer consent decrees, and adequate compliance budget allocation.
Program Administration, Tracking & Effectiveness Testing
A compliant training program requires structured administrative oversight, rigorous tracking, and post-training validation.
Training Plan and Oversight
The Chief Compliance Officer or training officer can prepare an annual training plan for the institution’s chosen approval process. Board oversight addresses resources and effectiveness; CMS guidance does not prescribe annual board approval of every training plan. The plan outlines the full course catalog, targeted employee groups, delivery methods (e-learning, live seminars, case-study workshops), completion schedules, and budgetary resources.
Comprehension Testing and Remediation Protocols
The following mastery-test process is an illustrative policy choice; neither these passing scores nor this attempt schedule is a universal federal requirement:
- Passing Standard: Depository institutions establish a minimum passing score of 80% or 85%.
- Remediation Process: If an employee fails the initial assessment, the Learning Management System (LMS) presents detailed explanations of missed questions. If an employee fails a second attempt, the system automatically alerts their manager. A third failure triggers a planned suspension of testing and requires one-on-one remedial coaching by a compliance officer before a final re-test is administered.
Tracking and Delinquency Escalation Protocols
For illustration, a bank could adopt the following escalation schedule. Select proportionate restrictions that preserve necessary customer service and operational controls; these dates and sanctions are not prescribed by a universal federal training rule:
- Day 0: Course assigned with a standard 30-calendar-day completion window;
- Day 15: Automated system reminder delivered to employee;
- Day 25: Warning notice delivered to employee and copied to direct department manager;
- Day 31 (Overdue): Formal notification sent to the Division Head and Chief Compliance Officer; employee is prohibited from originating loans, approving transactions, or overriding system blocks;
- Day 45 (Delinquent): prompt suspension of core banking and LOS system login credentials until all training and testing requirements are satisfied; documented negative notation placed in the employee's annual HR performance file.
Measuring True Training Effectiveness: Moving Beyond "Butts in Seats"
A common compliance deficiency is the "Butts-in-Seats" Fallacy—assuming that because an LMS records a 99% course completion rate, the training program is effective. Supervisory examiners frequently discover that institutions with flawless completion records still suffer from systemic operational violations.
To prove training effectiveness to supervisory examiners, compliance officers should implement a closed-loop validation cycle:
- Pre- and Post-Training QC Error Rate Comparison: Measure transactional error rates in first-line operations 60 days before and 60 days after a training initiative (e.g., tracking whether TRID fee tolerance cure costs or Reg CC hold notice errors declined post-training);
- Monitoring and Testing Correlation: Verify that second-line compliance monitoring reviews and third-line internal audits show measurable reductions in findings related to recently trained topics;
- Root-Cause Curriculum Updates: When compliance monitoring or customer complaints reveal recurring operational breakdowns, the compliance department promptly feeds these findings back into the curriculum, updating role-based modules to address the identified knowledge gaps.
Comparison: Role-Based Training Matrix Across Bank Departments
| Department / Role | Covered Regulations | Core Curriculum Focus Areas | Applicable Law or Program Context |
|---|---|---|---|
| Tellers & Frontline | Reg CC, Reg E, BSA/AML, Part 212 | • Exception hold notices & check schedules; 10-day provisional credit intake; CTR $10k aggregation & structuring; Elder financial exploitation red flags | 12 CFR § 21.21 (BSA Pillar); 12 CFR § 1005.11 (Reg E); 12 CFR § 229.13 (Reg CC) |
| Mortgage Loan Originators | TRID, Reg B, HMDA, Flood, Reg Z | • 3-day Loan Estimate delivery & tolerances; Prohibited bases & spousal signatures; Demographic data collection rules; ATR/QM points & fees calculations | 12 CFR § 1026.36(f) (MLO Rule); 12 CFR § 1002.9 (Reg B); 42 U.S.C. § 4012a (FDPA) |
| Loan Servicing Staff | Reg X, SCRA, FDCPA, Escrow | • 36-day live contact & loss mitigation; 45-day force-placed insurance notices; SCRA 6% interest cap & foreclosure ban; FDCPA coverage and Regulation F call-frequency presumptions | 12 CFR § 1024.39 (Reg X); 50 U.S.C. § 3937 (SCRA); 12 CFR Part 1006 (Reg F) |
| Marketing & Product Teams | UDAAP, Reg Z, Reg DD, TCPA, FHA | • Clear & conspicuous disclosures; Reg Z / Reg DD advertising trigger terms; TCPA prior express written consent; Equal Housing Lender logo display | 12 U.S.C. § 5536 (UDAAP); 12 CFR § 1026.24 (Reg Z); 47 U.S.C. § 227 (TCPA) |
| Board of Directors & Executives | Fiduciary Duty, CC Ratings, FIRREA | • CMS oversight & risk appetite approval; Interagency CC Rating System criteria; Section 8 FDI Act personal liability; Section 1818 penalty standards and distinct FIRREA predicate offenses | 12 U.S.C. § 1818 (FDI Act); 12 U.S.C. § 1833a (FIRREA); OCC / FRB Safety Guidelines |
A regional bank's board of directors receives an annual compliance report indicating a 99.5% completion rate across all assigned online compliance training courses. However, subsequent second-line compliance monitoring reviews and an OCC supervisory examination uncover systemic TRID fee tolerance violations and widespread failure to provide Reg CC exception hold notices. What fundamental compliance management deficiency does this scenario illustrate?
The bank should have eliminated role-based training and required all employees to complete exclusively Tier 3 Board governance modules.
The bank fell victim to the 'butts-in-seats' fallacy by equating course completion metrics with actual training effectiveness, failing to validate comprehension through operational QC monitoring and error rate testing.
The bank's Chief Compliance Officer failed to impose criminal sanctions against employees who scored below 100% on LMS post-tests.
The OCC examiners improperly evaluated training completion metrics rather than reviewing the bank's written policies.
An employee in the loan servicing department fails to complete planned annual training on the Servicemembers Civil Relief Act (SCRA) within the bank's standard 30-day assignment window. Under a sound institutional compliance training policy, how should the compliance department administer the delinquency? Assume the bank’s policy prescribes the reminder and restriction schedule in the correct response.
Execute an escalating protocol—notifying the manager at 25 days, escalating to the department head at 31 days with restrictions on handling military accounts, and suspending core system access if uncompleted after 45 days.
Grant an automatic permanent exemption because SCRA rules only apply to active combat zones and do not require bank-wide administrative tracking.
promptly terminate the employee's employment on Day 31 without administrative recourse.
Waive the training requirement if the loan servicer has not received a formal SCRA interest rate reduction request in the prior 6 months.
Provide compliance support between courses
An internal question should begin with the product, customer, activity and relevant dates. For example, when a processor asks whether a corrected Closing Disclosure needs a new waiting period, identify the changed term, compare it with the three triggering categories and confirm the applicable APR tolerance. Research the current regulation and official interpretation, preserving the cited provision and assumptions. Do not answer from a remembered general rule about every changed fee.
Communicate a usable answer to the requesting business unit: the applicable requirement, facts still needed, permitted action, deadline and documentation. Escalate novel legal interpretations to the authorized specialist or counsel. Retain the response so similar questions receive consistent treatment, and incorporate recurring misunderstandings into procedures, job aids and role-based training. An answer based on a proposed rule should clearly identify its status rather than direct immediate compliance as if it were final.
Sections you finish are checked off in the contents.