Sanctions Compliance Training Checklist

Sanctions compliance training is how a written policy reaches the people who actually run transactions — and documented attendance is the proof that it did. Training is one of OFAC’s five essential compliance components, and it is the one most easily reduced to a box-checking exercise. The goal is not to have run a session; it is to make sure the employees who can create sanctions exposure know how to spot and escalate it, and to keep records that show who was trained and when.

This checklist covers who to train, what the training must cover, and how to document it.

Why training is a named requirement

In its 2019 Framework for OFAC Compliance Commitments, the Treasury’s Office of Foreign Assets Control lists training as essential precisely because controls only work if people apply them. A flawless screening procedure fails if the salesperson onboarding a new customer does not know to run it, or does not recognize a red flag when the system returns one. Training closes that gap, and in an enforcement review OFAC weighs whether a company’s personnel were equipped to do their part.

The training program should track the written policy and be owned by the designated compliance officer.

Who needs to be trained

Train by exposure, not by headcount. Tailor depth to the role:

• Front-line and sales staff who onboard customers or quote deals — they trigger screening and see red flags first.
• Operations, logistics, and shipping — they control destinations and routing.
• Finance and accounts — they handle payments that can touch blocked parties.
• Procurement and supply chain — they bring in suppliers and intermediaries.
• Senior management — they set the tone and approve escalations.

Support functions with indirect exposure get a lighter, awareness-level session; high-risk roles get deeper, scenario-based training.

What the training must cover

Effective sanctions training is concrete and tied to your business, not a recitation of geopolitics. Core content includes:

• The basics of U.S. sanctions and which programs touch your trade lanes.
• Your screening procedure — when to screen, against the Specially Designated Nationals (SDN) List and other relevant lists, and how to handle a hit.
• The 50 Percent Rule — why an unlisted entity can still be blocked through its ownership.
• Red flags — the patterns that signal possible evasion, drawn from your own transactions.
• Escalation — exactly who to tell and how, with no fear of penalty for raising a concern.
• Consequences — that civil sanctions liability is generally strict, so honest mistakes still carry risk.

Refresh the content whenever the policy or the sanctions landscape changes, and use short knowledge checks to confirm the material landed.

Documenting attendance so it holds up

Attendance records are evidence. If a question arises later, “we train our staff” is far weaker than a dated roster showing exactly who completed what. Capture, at minimum:

Keep these records as part of your compliance file. OFAC’s recordkeeping requirement now runs ten years for covered records — extended from five years effective March 12, 2025, to match the longer statute of limitations for sanctions violations (31 CFR 501.601) — so retain training rosters on that same footing rather than discarding them at year-end.

Where training fits

Training is one spoke of the program. It draws from the policies and procedures, supports exam and audit readiness, and underpins the incident response plan — because a trained workforce both prevents incidents and responds to them better. For broader operating context, see the practice area page for international trade law.

Frequently asked questions

How often should sanctions training happen? At onboarding for relevant roles, then on a regular cadence — commonly annual — with extra sessions when the policy or the sanctions environment changes materially. The right frequency follows your risk; higher-exposure teams should be trained more often.

Does everyone in the company need the same training? No. Match depth to exposure. Sales, operations, finance, and procurement staff who can create sanctions risk need substantive, role-specific training; lower-exposure support staff need awareness-level coverage so they know when to raise a hand.

Why keep attendance records for so long? Because they are the proof the program worked, and because OFAC’s recordkeeping window is now ten years. A complete training history demonstrates good faith if a compliance question ever surfaces.

Building sanctions training that actually holds up? Reidel Law Firm’s flat-fee import/export compliance memo identifies the real risks your training needs to cover — in plain English, with direct attorney access. Get an import/export compliance memo →