INTERNATIONAL TRADE LAW
Sanctions Training Program Checklist
Sanctions training is the program that makes sure the employees who actually touch transactions can recognize a sanctions risk and know what to do about it. It is one of the five components OFAC expects in a compliance program, because controls only work if the people running them understand why and how. This checklist covers who to train, what to cover, how often, and how to document it so the training counts.
Training is the fifth component of OFAC’s Framework for OFAC Compliance Commitments, and it ties the rest of the sanctions compliance checklist together. A perfect screening procedure fails if the person running it cannot tell a real hit from a false positive.
Who Needs Training
Train everyone whose work can create or catch a sanctions issue — not just the compliance team. Tailor the depth to the role.
- Sales and business development, who meet customers first and hear the early facts about end use and destination.
- Operations, logistics, and shipping, who handle destinations, consignees, and routing.
- Finance and accounts payable, who process payments, wires, and letters of credit.
- Legal and compliance, who need the deepest coverage and current regulatory developments.
- Senior management and the board, who need enough to exercise oversight and set the tone.
Role-based training works better than one generic course for everyone. A shipping clerk and a CFO need different things from the same program.
What to Cover
Effective training is concrete and tied to the employee’s actual job. Cover the essentials, then the role-specific risks.
| Topic | Why it matters |
|---|---|
| What sanctions are and who OFAC is | Baseline literacy — most violations start with someone not recognizing the issue |
| Strict liability | Employees grasp the stakes when they learn intent is not required to be penalized |
| The company’s screening and escalation procedures | Training has to map to your real process, not a textbook |
| Red flags for the role | Hidden ownership, unusual routing, reluctance to name an end user, payment from a third country |
| How and when to escalate | A clear, blame-free path to raise a concern is what surfaces problems early |
| Recordkeeping duties | Employees learn what to document and that records are now kept 10 years |
Use real examples and recent enforcement cases — they make the abstract concrete and stick far better than statutory recitations.
The Checklist
Build and document the program against these items.
- Identify the audiences and the right depth of training for each role.
- Set a baseline curriculum plus role-specific modules.
- Train at onboarding, before employees touch transactions.
- Refresh on a set cadence — at least annually — and after major regulatory changes.
- Deliver targeted updates when a new sanctions program or rule directly affects a team.
- Test understanding with a short assessment, not just an attendance sign-in.
- Record attendance, dates, and content for every session.
- Escalate completion gaps so no one in a sensitive role slips through.
- Review and update materials as regulations and your risk profile change.
Make It Stick
Annual click-through training rarely changes behavior. Pair the scheduled course with short, timely reminders when something relevant happens — a new designation affecting a key market, an enforcement action in your industry, a near-miss caught internally. Give every employee a single, well-known way to raise a concern without fear of blame; most sanctions problems are caught by a person who noticed something odd and felt safe speaking up. Training and a working escalation and reporting process reinforce each other.
Document It — and Keep the Record 10 Years
Training only helps your compliance posture if you can prove it happened. Keep attendance records, the materials used, assessment results, and dates. As of March 12, 2025, OFAC’s recordkeeping period under 31 CFR 501.601 is 10 years, so retain training records on that timeline. The sanctions record keeping checklist covers retention across the whole program.
Frequently Asked Questions
How often should we run sanctions training? At onboarding and at least annually after that, with targeted updates whenever a regulatory change or new sanctions program affects a particular team.
Does everyone need the same training? No. A baseline course for all staff plus role-specific modules works best — sales, operations, finance, and compliance each face different risks and need different depth.
Is sanctions training legally required? No statute prescribes specific training, but OFAC’s enforcement framework treats it as an expected component of an effective program, and training records are routinely requested in enforcement matters.
How do we prove training was effective, not just delivered? Use a short assessment to confirm understanding, track completion, and keep the records. Attendance alone shows people sat through it; an assessment shows they learned it.
Training is straightforward to schedule but easy to get wrong — generic, untested, or undocumented training does little when an examiner comes calling. Reidel Law Firm prepares flat-fee Import/Export Compliance Memos that help you target training to your real risks and verify your program holds together, with direct access to the trade attorney handling your matter. Get an export compliance memo →
