October 6, 2026
A 100% completion rate can still hide a workforce that isn't ready for the moments that matter. Here's how regulated organisations move from proof of attendance to proof of capability.
Every year, thousands of employees in regulated organisations click through the same modules on anti-money laundering, data protection, health and safety and conduct. The dashboard turns green, the audit file fills up, and everyone moves on. Then something goes wrong on a Tuesday afternoon: a suspicious transaction is waved through, a patient record is shared with the wrong person, or a safety step is skipped under time pressure. The training was completed. The capability was not there.
That distance between what the records say and what people do is the compliance gap. Closing it is now one of the most practical challenges facing learning and development (L&D), risk and operations leaders in finance, healthcare, utilities, manufacturing and the public sector.
Why training completion is a weak proxy for competence
Training completion data answers one question: did a person reach the end of a course? It says very little about whether they understood it, remember it, or can apply it when the situation is messy and the clock is running.
The research on memory explains part of the problem. A 2015 replication of Hermann Ebbinghaus's forgetting curve, published in PLOS ONE, confirmed that recall drops sharply within the first hours and days after learning, closely matching Ebbinghaus's original 1880s results. For knowledge retention, timing matters as much as content. An annual e-learning module, completed in one sitting and never revisited, is almost designed to be forgotten.
The second problem is evidence. The CIPD's Learning at Work survey found that only 50% of L&D professionals agreed they had a process for assessing learning impact, and only 7% strongly agreed they had a process for supporting learning transfer. In other words, most organisations are measuring activity, not ability.
The Kirkpatrick Model is useful here. Completion and quiz scores sit at Levels 1 and 2 (reaction and learning). Regulators, customers and boards care about Levels 3 and 4: whether people perform the critical behaviours on the job, and whether that produces the outcomes the organisation needs.
Regulators are asking a different question
Across sectors, the regulatory language has moved from "was training delivered?" towards "is this person competent?"
In financial services, the FCA's Senior Managers and Certification Regime (SM&CR) requires firms to assess whether certified staff are fit and proper on appointment and on an ongoing basis, with an assessment at least annually. The FCA's guidance on the Conduct Rules states that staff should receive compliance training "relevant to their role to understand what the Conduct Rules mean for them". The Consumer Duty, in force since July 2023, goes further by asking firms to evidence good customer outcomes rather than good intentions.
In health and social care, Regulation 18 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, which the CQC enforces, requires providers to deploy "suitably qualified, competent, skilled and experienced persons" and to give staff appropriate training, supervision and appraisal.
In high-hazard industries, the Health and Safety Executive defines competence as "the training, skills, experience and knowledge that a person needs to perform a task safely". Training is one ingredient of workforce capability, not the whole recipe.
And for organisations operating in Europe, Article 4 of the EU AI Act has, since February 2025, required providers and deployers of AI systems to take measures to support the AI literacy of their staff. That is a new compliance obligation which, once again, is about understanding and judgement rather than attendance.
The common thread: a certificate is evidence that learning was offered. It is not evidence of capability.
Five ways to turn completion into real-world capability
1. Define the critical behaviours first
Start with the moments that matter. For a contact centre team, that might be spotting signs of vulnerability under the Consumer Duty. For a field engineer, it might be isolating equipment correctly before maintenance. Write these down as observable behaviours, then design training backwards from them. If you cannot describe what good looks like on the job, no course can produce it.
2. Replace one-off modules with spaced, retrieval-based learning
Two of the most reliable findings in learning science are the spacing effect and the testing effect. A large meta-analysis of distributed practice, the principle behind spaced repetition, found that spreading study over time produces better long-term retention than cramming, and research by Roediger and Karpicke showed that practising recall strengthens memory more than rereading. In practice, this means short, regular refreshers and scenario questions across the year, rather than a single annual push before the audit deadline.
3. Give people safe-to-fail practice
Knowing a policy and applying it under pressure are different skills. Simulated conversations, branching scenarios and immersive environments let people rehearse difficult situations, such as challenging a senior colleague or handling a distressed customer, without real-world consequences. AI-powered coaching makes this practical at scale: employees can rehearse, receive feedback and try again as many times as they need, and the organisation captures evidence of how they performed, not just whether they logged in.
4. Put knowledge where the work happens
Many everyday compliance slips happen when people cannot find the right answer quickly, or are pressured into acting before they check. Verizon's Data Breach Investigations Report consistently identifies the human element, including social engineering, phishing and stolen credentials, among the most frequent causes of breaches. When procedures, policies and guidance are available in the flow of work, through a searchable knowledge platform or an AI assistant grounded in approved content, people are far less likely to guess.
5. Measure behaviour and outcomes, not just completion
Build a line of sight from learning activity to operational data. Useful measures include scenario performance over time, time to competence for new starters, error and rework rates, near misses, complaint themes, and audit findings. Learning analytics that connect these sources let compliance and L&D teams spot where capability is weak before a regulator or customer does. Involving line managers in observation and sign-off closes the loop, turning competence assessment into an ongoing conversation rather than a yearly form.
What good looks like
A capability-led compliance programme tends to share a few traits:
- Role-specific content tied to the real risks each team faces, rather than one generic module for everyone.
- Continuous reinforcement through short practice moments spread across the year.
- Realistic rehearsal of high-stakes situations in a safe environment.
- Accessible knowledge at the point of need, so people check rather than guess.
- Evidence of performance that would stand up to scrutiny from the FCA, CQC, HSE or an internal audit committee.
None of this means abandoning completion tracking. Regulators still expect to see that mandatory training took place. The shift is in treating completion as the starting line rather than the finish line.
Closing the gap
The compliance gap is not a content problem. Most regulated organisations already have the policies and the modules. The gap sits between knowing and doing, and it widens every week that learning goes unpractised and unmeasured.
Organisations that close it do three things well: they design around real-world behaviours, they give people regular opportunities to practise and recall, and they gather evidence of capability that goes beyond a completion certificate. The result is a workforce that is easier to defend in an audit and, more importantly, safer and more confident in the moments that count.
FabricAcademy works with complex, regulated organisations to layer AI coaching, immersive practice, knowledge access and analytics onto the systems they already use, turning mandatory training into measurable performance. If your completion rates look healthy but you are not sure the capability is there, book a strategy session to explore where your compliance gap sits and how to close it.
