OFAC (economic sanctions), EAR (Export Administration Regulations) and ITAR (International Traffic in Arms Regulations) compliance training is the process of teaching employees to recognize and stop transactions that may violate U.S. sanctions or export controls. It is not a generic “compliance” course: it is operational training so that the person who negotiates, invoices or ships a product can spot a red flag and knows whom to escalate it to. It is one of the essential components of an effective compliance program.
Would your team know how to stop a risky transaction?
We design role-specific training with real cases from your industry, and leave you the records proving it was delivered.
The reason is simple: most violations are not committed by the legal department; they are committed by a salesperson or a logistics manager who did not recognize the risk in time. That is why training has to reach the person who makes the real decision. At Burke Compliance we design that training through our executive training service, tailored to each company’s specific risk. This article explains what it should cover, whom it should reach and how to document it.
What Is OFAC, EAR and ITAR Compliance Training?
Compliance training on U.S. economic sanctions and export controls is the set of learning activities that teach each employee their specific responsibilities regarding sanctions and export controls. It must be role-specific: what a salesperson needs to know is not the same as what a payments manager or a procurement director needs. It is part of an OFAC, EAR and ITAR compliance program and brings the other components to life, because policies nobody understands do not get applied.
Why Training Is a Mandatory Component of the Program
Training is mandatory in practice because its existence and quality are assessed when determining the response to a violation. A program with effective training can mitigate a penalty; its absence works as an aggravating factor. U.S. agencies —Commerce, Treasury and Justice— have stressed that non-U.S. companies should ensure their subsidiaries and personnel receive training on sanctions and export controls, can identify red flags and are empowered to escalate and report prohibited conduct.
In other words: training not only prevents violations, it is also proof that the company took prevention seriously. That dual value —preventive and evidentiary— is what makes it an investment rather than an expense.
Who Should Be Trained
All staff whose work may intersect with a transaction potentially exposed to U.S. economic sanctions and export controls should be trained, with particular intensity in high-risk roles. Training is adapted to the role and to the regions where the company operates.
- Product development and manufacturing: where technical parameters are set, and those parameters determine the export control classification.
- Sales and business development: the first point of contact with new customers and markets.
- Procurement and supply chain: where a risky supplier or intermediary can slip through.
- Logistics and shipping: who decides routes, transit points and final destinations.
- Finance and payments: where use of the U.S. dollar or the U.S. financial system and potentially suspicious payment methods are detected.
- Management and senior leadership: responsible for the compliance culture and for escalation.
- Subsidiaries and staff abroad: where the blind spot of non-U.S. companies usually lies.
Can you prove your team has been trained?
We prepare the training plan and the documentary evidence that agencies take into account in the event of a violation.
What Effective Training Should Cover
Effective training teaches people to recognize red flags and act on them, not to memorize regulations. The minimum content should cover how U.S. sanctions and export controls apply to a non-U.S. company, how counterparty screening works and what to do if there is a match, how the products and technology handled are classified, how to determine whether licenses are required, and how to escalate a concern without fear of retaliation.
- How and why U.S. sanctions and export controls reach companies outside the United States.
- Typical red flags: destinations that do not add up, opaque intermediaries, requests to split payments or conceal the end use.
- What the SDN List is, how to screen a counterparty and what the 50 Percent Rule is.
- What the CCL is, and ECCN or ITAR classifications.
- The internal escalation process: whom to notify, within what timeframe and how to document it.
- The real consequences of non-compliance: strict liability, civil and criminal penalties, and individual employee liability.
How Often It Should Be Delivered and How to Document It
Training should be delivered periodically and at least once a year, with a frequency consistent with the company’s risk profile. In addition to annual training, it is advisable to reinforce it when there are significant regulatory changes, when entering new markets or after a weakness is detected in an audit or test.
A point many companies forget: training has to be documented. That means measuring whether employees have understood it —with an assessment— and keeping a record of who was trained, when and with what content. Without that record, the training happened but cannot be proven, and before an agency, what is not documented does not count. The materials should also be accessible so they can be consulted when a real question arises.
In practice
A U.S. industrial group with a sales subsidiary outside the United States has an impeccable U.S. sanctions and export controls policy at headquarters, but it is never turned into training at the subsidiary. A salesperson accepts a triangulated transaction to a sensitive destination because, quite simply, nobody had explained which red flags should have stopped them.
Short, role-specific training is designed: one module for sales, another for logistics and payments, with real cases from the industry itself. The change is not the syllabus; it is that each person finally knows what to look for and whom to call. Training works when it stops being theory and resembles everyday work.
Frequently Asked Questions
Is compliance training required by law?
The regulations do not require a specific course, but they do consider training an essential component of an effective program and take it into account when determining penalties. For a company with international operations, it is mandatory in risk management terms.
Is general training for all staff enough?
It is not the most effective approach. Training should be role-specific: each function faces different risks. A general talk raises awareness, but it does not equip the person who makes the risky decision.
Do foreign subsidiaries also need training?
Yes. U.S. agencies have expressly stated that companies should ensure their subsidiaries and affiliates are trained, can identify red flags and can escalate prohibited conduct. It is one of the most common blind spots.
How do I prove my team has been trained?
With records: attendee lists, content delivered, date and assessment results. That record is the evidence an agency expects to see.
Free download: OFAC, EAR and ITAR Compliance Checklist (in Spanish)
Includes the training section: whom to train, how often and how to document it. Use it to check whether your training plan would stand up to scrutiny.
Want compliance training tailored to your company’s real risk? Learn about our executive training program or write to us through our contact page.
