
Ethics & Integrity Program
Builds a defensible ethics program covering conduct, anti-bribery, conflicts, and whistleblowing

Turn regulatory obligation into organizational confidence.
We build governance, risk and compliance capability inside enterprises: the people, the processes and the evidence that satisfy regulators, auditors and boards. Instructor-led programs across data privacy, financial crime, ethics, sanctions and AI governance are how we do it, scoped to your jurisdictions and delivered wherever your teams are.
Instructor-led workshops and programsIn-house, virtual or blended10+ languagesDelivered in English, Spanish, Mandarin, German, Arabic, Portuguese, Hindi, French, Japanese, Italian, and more100+ countriesWe have delivered in United States, United Kingdom, India, Canada, Germany, France, Netherlands, UAE, Saudi Arabia, Singapore, Australia, Japan, Brazil, South Africa and 90+ more countries
Trusted as a Leading Corporate Training Provider by
Corporate governance, risk and compliance training is instructor-led group training that builds an organization's ability to meet its legal and regulatory obligations and to evidence that it does. It spans data protection, financial crime prevention, ethics and anti-bribery, sanctions and trade compliance, internal controls, and the governance of AI systems. Programs are scoped to the jurisdictions an employer operates in and delivered to a closed cohort rather than sold as individual seats.
The distinction that matters commercially is between awareness and evidence. Generic e-learning tells people the rules; group training builds a shared operating picture: the same escalation paths, the same documentation habits, and the same understanding of what the regulator expects to see. For enterprises under active supervision, that shared picture is what stands up in an examination.
Programs split across the major obligation areas. Data privacy and protection, from GDPR to jurisdiction-specific privacy laws. Financial crime prevention: AML, KYC, sanctions, and fraud controls for regulated firms. Ethics and integrity: codes of conduct, anti-bribery, whistleblowing, and speak-up culture. And the newer frontiers: AI governance, digital assets compliance, and operational resilience.
Every engagement starts with discovery: which jurisdictions, which regulators, which obligations, and which teams carry them. Trainers are then matched from a vetted bench of compliance practitioners, former regulators, and legal specialists, and the program is tailored before delivery. Cohorts are closed to your organization, run in your timezone, and measured with pre- and post-assessments so L&D can show what changed.
Six areas carry most of the catalog. Start where your obligations are heaviest.
Governance, Risk & Compliance programs to start with.
Apply the ADGM data protection regulations to real processing: controller duties, data subject rights, breach handling and transfers out of the free zone.
Apply CPS 230: critical operations, tolerance levels, business continuity, material service providers and board accountability.
Apply the AMLA and AMLC rules in the Philippines, including customer identification, covered and suspicious transaction reporting and record keeping.
Spot and prevent bribery in finance: intermediaries, client entertainment, inducements, third-party due diligence and the controls regulators expect.
Browse all 168 governance, risk & compliance programs across 17 topics, from data privacy and AML to ethics, sanctions, and AI governance. Filter by topic and delivery format, then request a tailored proposal.
SHOWING 1–15 OF 168 · 168 IN THE LIVE CATALOG
Meet the Accessible Canada Act: accessibility plans, feedback processes, progress reports and the priority areas the Act covers.
Apply the ADGM data protection regulations to real processing: controller duties, data subject rights, breach handling and transfers out of the free zone.
Apply AML/CFT to fintech and crypto: risk-based onboarding, blockchain analytics, transaction monitoring and red flags specific to virtual assets.
Apply the AMLA and AMLC rules in the Philippines, including customer identification, covered and suspicious transaction reporting and record keeping.
Spot and prevent bribery in finance: intermediaries, client entertainment, inducements, third-party due diligence and the controls regulators expect.
Apply CPS 230: critical operations, tolerance levels, business continuity, material service providers and board accountability.
Apply CPS 234: board accountability, information asset classification, control testing, third-party security and notifying APRA of incidents.
Work through Argentina's data protection law in practice: database registration, consent, data subject access and cross-border transfer conditions.
Apply ASIC licensing duties and the design and distribution obligations: target market determinations, distribution controls and reporting.
Apply Australia's AML/CTF Act and AUSTRAC rules: AML/CTF programs, customer identification and reporting suspicious matters and threshold transactions.
Apply the 13 Australian Privacy Principles to collection, use, disclosure and security, including how to handle eligible data breach notifications.
Apply BACEN and CVM requirements: prudential and payments rules, securities regulation, reporting duties and supervisory engagement in Brazil.
Apply MaRisk and BaFin expectations: risk strategy, internal controls, outsourcing, the compliance and risk control functions and audit.
Work through Bahrain's PDPL: processing conditions, sensitive data, data subject rights, notifications to the authority and transfer rules.
Apply Bank Al-Maghrib banking circulars and AMMC capital markets rules: governance, reporting, client protection and supervisory engagement.
Build your team’s capabilities in governance, risk & compliance with curated training programs arranged in a clear learning sequence. Each pathway builds skills progressively, helping your workforce achieve defined milestones and apply their learning to business goals.

Builds a defensible ethics program covering conduct, anti-bribery, conflicts, and whistleblowing
Implement anti-bribery and corruption controls in financial institutions: risk mapping, due diligence and reporting.
Design, communicate and enforce a code of conduct that shapes ethical decision-making across the organisation.
Recognise and prevent antitrust violations: cartel behaviour, abuse of dominance and merger notification obligations.
Manage conflicts of interest and gifts-and-hospitality policies that meet regulatory and ethical standards.
Strengthen public sector ethics and integrity: anti-corruption frameworks, asset disclosure and oversight mechanisms.
Build whistleblower programmes and speak-up culture aligned with the EU Whistleblowing Directive.

One program covering licensing, AML, and Travel Rule obligations for digital assets
Apply AML/CFT obligations to fintech and crypto business models: risk assessment, monitoring and reporting.
Navigate MiCA, FATF Travel Rule and digital asset compliance for crypto service providers.

Builds an AI governance capability from staff literacy through to an auditable ISO 42001 system
Classify AI systems under the EU AI Act and complete conformity assessments for high-risk applications.
Compare global AI regulations across EU AI Act, US Executive Order, India and UAE and plan compliance.
Implement an ISO 42001 AI management system: governance, risk controls and responsible AI lifecycle processes.
Assess readiness for Korea's AI Framework Act: classification, obligations and compliance gap analysis.
Lead the implementation of an ISO/IEC 42001 AI management system from gap analysis to operational deployment.
Audit AI management systems against ISO/IEC 42001: scoping, evidence gathering and lead auditor reporting.

Prepares teams to pass security audits and regulator reviews with documented controls
Prepare payment environments for PCI DSS v4.0.1: scoping, controls implementation and assessment readiness.
Govern cloud environments with compliance frameworks: CSA STAR, SOC 2, ISO 27017 and shared responsibility models.
Prepare products for the EU Cyber Resilience Act: vulnerability handling, SBOMs and security update obligations.
Prepare for a SOC 2 audit: map trust service criteria, build controls and gather evidence for Type II readiness.

Builds a privacy program from staff awareness through to a managed, certifiable privacy system
Handle PII responsibly: classify personal data, conduct DPIAs and manage consent under privacy regulations.
Establish and run a data privacy programme: policies, governance, vendor management and breach response.
Extend an ISMS to ISO 27701 for privacy information management: gap analysis, controls and certification readiness.
Embed privacy by design into systems engineering: data minimisation, pseudonymisation and access controls.

Covers control design, fraud detection, and investigation in one program
Raise fraud awareness and design internal controls that deter, detect and report fraudulent activity.
Prevent, detect and investigate fraud using analytics, forensic techniques and whistleblower intelligence.
Establish J-SOX internal control frameworks for Japanese listed companies: documentation, testing and reporting.
Investigate tax crimes and financial fraud: evidence gathering, forensic analysis and case preparation.

Covers conduct, market abuse, and accountability expectations that regulators test most
Identify conduct risk and implement consumer protection controls across financial products and services.
Detect and prevent market abuse and insider trading: surveillance, insider lists and disclosure obligations.
Apply MiFID II requirements to securities markets: best execution, transparency and product governance.
Navigate PSD2/PSD3 payment services regulations: strong authentication, open banking and licensing requirements.

Builds an end-to-end AML capability from onboarding and KYC to monitoring and investigation
Build an integrated financial crime prevention programme covering AML, KYC and sanctions compliance.
Perform KYC, CDD and EDD checks: customer identification, risk scoring and ongoing monitoring.
Deliver role-specific AML/CFT/CPF training for boards, first-line staff and compliance teams.
Detect trade-based money laundering schemes: red flag indicators, invoice analysis and reporting obligations.
Design and operate transaction monitoring systems: rule tuning, alert investigation and SAR filing.
Explore governance, risk & compliance training aligned with your teams’ functions, job roles, industry and tools. Help your teams build the knowledge and practical skills to apply governance, risk and compliance across your organization, supporting your business priorities and evolving needs.
Connect risk assessments to business objectives and decisions. Develop consistent risk language, treatment plans and reporting that make uncertainty easier to discuss across functions.
Translate applicable obligations into controls, responsibilities and review cycles. Strengthen change monitoring and evidence management so compliance work remains practical and traceable.
Plan and perform independent assurance around the risks that matter most. Improve engagement scoping, evidence evaluation and communication of findings and follow-up actions.
Assess the risks introduced by external providers throughout their lifecycle. Build proportionate due diligence, monitoring and exit planning that connect supplier decisions with business exposure.
Turn organizational expectations into usable policies and consistent ethical practices. Develop ownership, communication and review methods that help employees apply policies in real situations.
Connect privacy responsibilities with everyday information handling and business change. Strengthen data-use assessments, accountability and coordination with legal, security and operational teams.
Prepare for disruption by identifying essential services, dependencies and recovery needs. Build exercises and lessons-learned routines that improve plans before a real incident occurs.
Bring risk, compliance and assurance information into a consistent decision-making view. Design reporting routines that clarify accountability, control gaps and actions requiring leadership attention.
Understand the controls attached to day-to-day business responsibilities. Practice control execution, evidence retention and timely escalation so issues can be resolved close to their source.
Apply GRC practices to interconnected financial services and technology dependencies. Develop sector-specific oversight scenarios, including ICT supplier registers and operational resilience where relevant regulations apply.
Training a role that is not listed, or a mix of them? Tell us who you are training and what they need to do, and we build the shortlist
Where GRC teams most often cross-train, based on how these courses are classified.
Domain-level outcomes, not course objectives. These are the capabilities enterprises usually buy this training to build.
Handle personal data lawfully across jurisdictions, with documented processes a regulator can inspect.
Run AML, KYC, and sanctions controls that detect, escalate, and report the right activity.
Make codes of conduct, anti-bribery rules, and speak-up channels part of daily operations.
Design and test controls that satisfy auditors, with documentation that survives scrutiny.
Track new rules across your jurisdictions and translate them into updated policies and training.
Classify AI risk, document controls, and meet emerging AI regulation with audit-ready evidence.
Assess vendors and partners against corruption, sanctions, and data-handling standards.
Move from box-ticking to ownership, where every team understands its part in the control environment.
Onsite, live virtual, or hybrid, every program is instructor-led and built around your teams.
A trainer comes to your office and works face to face with your team, using your policies and your examples.
For small teams or enterprise-wide training, across one site or multiple global locations, in one language or multiple languages.
Get a QuoteExpert-led live online sessions delivered anywhere, with consistency and easy scheduling. Training tools such as Zoom or Microsoft Teams are selected subject to your organization's approval and compliance requirements.
For small teams or enterprise-wide training, across one site or multiple global locations, in one language or multiple languages.
Get a QuoteCombine in-person sessions with live online training in a coordinated instructor-led program, with the mix planned around your team's needs.
For small teams or enterprise-wide training, across one site or multiple global locations, in one language or multiple languages.
Get a QuoteGovernance, risk and compliance work depends on clear accountability and sound judgment across functions. Edstellar tailors role-based, instructor-led training for risk teams, compliance professionals, control owners and leaders to your operating context. Practical scenarios connect obligations, risk assessments, controls and evidence, helping teams apply consistent approaches and discuss tradeoffs as business activities, stakeholder expectations and requirements continue to change.

Link policy requirements, operational risks and controls in realistic scenarios
Build relevant capabilities for oversight, execution and assurance responsibilities
Practice documenting assessments, escalating concerns and evaluating control effectiveness
Adapt capabilities as obligations, business activities and stakeholder expectations evolve
Experience across industries brings business context to GRC learning
Company-wide training experience informing practical learning for GRC teams
Company-wide trainer network supporting GRC learning and complementary business skills
Edstellar's certified quality and information-security management systems support GRC training delivery
Every engagement runs the same five stages, from capability baseline through delivery to sustained measurement.
We meet your stakeholders and L&D team to baseline what your people can do today against the GRC capability you need.
Weeks 1–2
Programs are assembled against your policies, obligations, and team levels, then trainers are shortlisted from the vetted bench.
Weeks 2–4
Closed-cohort instructor-led sessions in your language and timezone, with labs, exercises, and materials shipped alongside.
Scheduled to your calendar
Pre- and post-assessments establish a measurable change in capability, benchmarked against role frameworks.
Immediately after delivery
Retrospectives, refresher modules and skill-refresh tracking keep the investment from decaying, and the measured gaps feed the next cycle.
Quarterly
Stage 05 feeds the next cycle: the gaps it measures become the next Discover.
Also from Edstellar
Psychometric, behavioral, leadership and 360-degree assessment.
Needs analysis, gap identification, and a training roadmap.
Learning strategy, content, technology and ROI measurement.
Org design, succession planning and cultural change.
Training outsourcing, vendor management, logistics and administration.
Executive and manager coaching that keeps skills in use.
Compliance officers, privacy professionals, risk and audit teams, legal, financial crime units, and HR. A separate track covers executives and board members on oversight duties.
Instructor-led and live, as a closed cohort for your team, onsite, virtual, or hybrid. There are no self-paced modules. You choose the format, location, language, and schedule.
Yes. Programs are scoped to the jurisdictions you operate in, with country-specific modules layered onto the global framework. Tell us your footprint in the discovery call.
Programs map to your regulators' guidance, from GDPR and AUSTRAC to MAS, SAMA, and EU directives. Trainers include former regulators and compliance practitioners.
Most programs run 16 to 32 hours across several sessions. Multi-program bundles and enterprise rollouts are scheduled around your calendar.
Cohorts run from a single small team up to enterprise rollouts of hundreds, with one trainer per cohort for discussion quality.
Yes. Case studies use real enforcement actions and your policies; workshops cover escalation decisions, documentation, and audit-style questioning.
Pre- and post-assessments benchmark each participant against role frameworks, with a completion report showing measured change per cohort.
Yes. Your code of conduct, policies, and escalation paths are built into the materials, so teams train on the rules they actually follow.
Yes. Programs adapt to banking, insurance, fintech, and crypto obligations, including AML, prudential, and conduct regimes across 30+ jurisdictions.
Yes. Directors get focused sessions on oversight duties, conduct risk, and personal liability, without the operational detail.
A room or virtual setup, participant list, and your policies where relevant. We ship case materials, exercises, and completion evidence.
Discovery to delivery typically takes two to four weeks, depending on customization depth and trainer matching for your jurisdictions.
Yes. You can sit in on a trial session with the shortlisted trainer before committing, to check fit with your team and level.
Pick the scale that matches your rollout. Every quote is tailored to your teams and timeline.
Team size
1–25 PARTICIPANTS
One or two programs for a single team, delivered as a closed cohort. The usual entry point for a first GRC engagement.
26–150 PARTICIPANTS
Multiple cohorts or programs for larger teams, with delivery structured around your workforce and training requirements.
151–1,000 PARTICIPANTS
A coordinated rollout across business units, with role-based tracks and central reporting for L&D.
1,000+ PARTICIPANTS
GRC capability at organizational scale, with dedicated management and measurement from pilot to rollout.
Tell us which teams you are training and what they need to be able to do. Anything you filtered in the catalog comes through with your message.