Your cart is empty.
Keep shopping
Workplace Compliance: Policy, Ethics, Conduct, Audit
338 students
Workplace Compliance: Policy, Ethics, Conduct, Audit
workplace compliance | employment law basics | GDPR | code of conduct | internal investigations | policies | audits
Last updated 9/2026
English
English [Auto],
What you'll learn
- Apply the three lines of defence so every control has a named owner
- Build a risk register and score it on a heat map with agreed criteria
- Recognise the fraud triangle and the conditions that produce it
- Handle employee data against GDPR, HIPAA and equivalent regimes
- Run an internal investigation to a plan rather than improvising it
- Write a code of conduct people can actually apply to a real decision
- Design mandatory training that changes behaviour instead of ticking a box
- Document a procedure in BPMN so it can be audited and followed
- Run a compliance audit and turn the gaps into a prioritised roadmap
- Learn alongside Mike's 1.6 million students from 185 countries
Explore related topics
Course content
16 sections • 43 lectures • 22h 1m total length
Requirements
- Responsibility for policy, conduct or controls in an organisation
- No legal qualification required, and none is granted by this course
- Access to one real policy or procedure you can rework
- English at intermediate level or above, since all lessons are in English
- Willingness to check whether your existing policies are actually followed
Description
This course contains the use of artificial intelligence.
Nearly every organisation that has had a compliance failure had a policy covering it. The policy was not the problem.
Where compliance actually fails
It fails in the gap between the document and the decision. The policy was written for an auditor, so it is precise and unreadable, and the manager making a call on a Thursday evening does not consult it — they do what seems reasonable. The mandatory training was completed by everyone and changed nobody, because completion was the metric. Nobody owns the control, so when it fails there are three people who each assumed it was one of the others. And the code of conduct describes values rather than decisions, so it cannot be applied to the specific awkward situation in front of you.
What this course covers
Forty-one lessons from the environment down to the audit. The context first: legal systems and how business is regulated, labour legislation, international institutions and trade, what multinational structure changes about obligations, technology, and ethics and social responsibility as an operating matter rather than a poster. Then the risk and control framework: the heat map, the fraud triangle, cognitive bias and conflict of interest, ISO 31000, escalation, leadership-team dynamics, risk culture, the three lines of defence with the usual confusion in the second, the high-reliability organisation, and a code of conduct written so it can be applied. Then obligations across borders: multi-jurisdiction structures, mobility and assignments, unions, European works councils, the International Labour Organization and the OECD, global pay and tax equalisation, and — the core of it — employee data under GDPR and equivalent regimes, the compliance audit, and a plan for running an internal investigation. Then the most regulated area of workplace conduct: the legal requirements, prejudice and discrimination named plainly, and how to design mandatory training that changes behaviour and can be evidenced. Then documented procedures: what to document, BPMN, templates, implementation and a documentation project. Finally the audit itself: three audit levels starting with compliance, express scoring, a weighted checklist, four collection methods, gap analysis, RACI and a roadmap.
What this course does not cover
This is workplace and organisational compliance. It does not cover anti-money-laundering, sanctions screening, financial crime, third-party or supplier due diligence, or sector-specific regulatory reporting. It is also not legal advice and does not qualify you to give any — the obligations described vary by jurisdiction and change, and a lawyer remains a lawyer. If you came looking for financial-sector compliance, this is the wrong course and it is better that you know now.
Who is teaching this
I am Mike Pritula. I built the people system at Preply as it became a unicorn, and I have worked at Wargaming, iDeals and Alfa-Bank. More than 1.6 million students have enrolled in my courses across 185 countries, and over 150,000 specialists have gone through my programmes. I hold PHRi and SHRM-CP certifications and represent HRCI in more than ten countries.
What is included
Lifetime access to all 41 lessons
Active instructor support in the Q&A section
A Udemy Certificate of Completion
Working material: the heat map, the fraud triangle, ISO 31000, the three lines of defence, the data protection checklist, the investigation plan, BPMN templates, the audit checklist and roadmap
A full audit demonstration on a real 200-person company
Where to start
Take one policy your organisation has and find the last decision that should have been governed by it. Then ask whether anyone opened the document. That gap is what this course is about. Enrol now and start today.
Who this course is for:
- Compliance and risk specialists covering the workplace side
- People and operations managers who own policies they did not write
- Internal auditors adding employment and conduct areas to their scope
- Managers in companies that just crossed a border and inherited new rules
- Founders and small-company leaders with no legal function to lean on
- Anyone told to "make sure we are compliant" without a definition of compliant
- Professionals preparing to take on data protection or conduct responsibilities