Compliance leaders are confident employees are equipped to handle compliance situations when they arise. But confidence and evidence are not always the same thing. The harder question is whether organizations have enough evidence to show that employees can put what they have learned into practice, writes Kristina Ryan, vice president of product and design at Go1.
New research from Go1 highlights a gap between how ready leaders believe employees are and how employees actually perform when compliance decisions require judgment. Among 313 US-based compliance, legal and risk professionals, 89% are confident employees understand required compliance policies after training and 90% believe they can apply those policies in real-world situations. Confidence is even higher among leaders in HR, people management and learning & development. In a separate sample of 312 professionals, 95% believe employees understand required policies and 96% believe they can apply them.
A third sample adds another perspective. When 320 recently trained employees completed scenario-based assessments designed to test applied compliance judgment, their average readiness score was 64.5%. The samples were not matched at the organization level, so the findings do not show that leaders are overestimating the readiness of their own employees. What they do reveal is a broader market-level contrast between high leader confidence and more uneven employee performance when applying compliance knowledge in realistic situations.
For compliance leaders, that raises a more useful question. What evidence is that confidence based on?
Completion is not application
Compliance programs generate a considerable amount of evidence. Completion records show required training happened. Assessments can demonstrate understanding, while audit logs, policy acknowledgments and reporting systems provide further assurance that compliance processes are operating as intended. All these signals matter, but they do not tell us the same thing.
A completion record shows an employee reached the end of a course, but it cannot show whether they can interpret a policy correctly when faced with an ambiguous workplace situation. Similarly, a knowledge check may show that someone understood the material during training without necessarily showing they can retrieve and apply that knowledge later when circumstances are less clear.
That distinction matters when we look at how compliance programs operate today. Among compliance, legal and risk leaders, 29% say their approach primarily records completion and 37% primarily test understanding through assessments. Just 13% say reinforcement after training best describes their approach, while 18% focus on proactively identifying risk. HR and L&D leaders report a similar pattern, with 31% primarily recording completion and 38% testing understanding, compared with 18% focused on reinforcement and 13% on proactive risk identification.
Together, these findings point to a potential evidence gap. Organizations may have strong proof that training happened and reasonable evidence that employees understood it without having equally strong evidence that employees can apply what they learned.
Judgment gets harder in the gray areas
Employee performance helps illustrate why that distinction matters. Recently trained employees performed strongly in many situations where the expected response was relatively clear. Among employees who completed harassment prevention training, around 90% recognized that same-sex harassment is covered under federal law and that employers have responsibilities around third-party harassment. Among employees trained on whistleblower protection, 85% understood that good-faith reporting can remain protected even when an allegation turns out to be incorrect.
Performance became much more uneven when employees needed to interpret context and policy boundaries. Only 39% recognized that management awareness does not eliminate a conflict of interest. Just 43% correctly distinguished a general complaint about unethical management from protected whistleblowing, while 45% recognized that existing performance documentation does not automatically eliminate retaliation risk following a whistleblower complaint.
These results suggest that knowing the rules is only part of the challenge. Real compliance issues rarely present themselves in the language of a policy or training course. Employees encounter relationships, conversations, pressure, assumptions and incomplete information. They need to recognize potential risk, interpret what is happening and decide what to do next.
A stronger view of compliance readiness therefore needs to answer three related questions. Did training happen? Did employees understand it? Can they apply it when context complicates the answer? Each question tells leaders something different about readiness and requires different evidence.
Measurement changes as compliance programs mature
The research also provides insight into how organizations approach measurement as their compliance programs mature. Organizations that primarily record completion are more likely to rely on activity-based measures, while those focused on proactively identifying risk before incidents occur show a different measurement profile.
Outcome- and risk-oriented measures rise from 27% among organizations primarily recording completion to 43% among those focused on proactive risk identification. The difference is even more pronounced for audit readiness, which is used as a measure of success by 20% of proactive-risk organizations compared with 7% of completion-recording organizations.
The findings do not suggest mature programs stop measuring completion. Instead, their evidence base expands to include measures of outcomes, risk and readiness. The question is not whether completion matters but whether organizations are asking completion data to prove more than it can.
What happens after training matters
The same shift can be seen in how organizations approach reinforcement. About three-quarters (76%) of compliance, legal and risk leaders and 85% of HR and L&D leaders say their organizations reinforce compliance learning always or often. Yet only 13% and 18%, respectively, describe reinforcement as the primary approach guiding their programs.
This suggests a difference between reinforcement happening and reinforcement being built systematically into how readiness is developed and measured. Once formal training ends, employees face situations that rarely resemble a clean assessment question. Scenario-based practice, targeted reinforcement and manager support can help organizations identify where uncertainty remains and provide support before employees have to make those decisions for real.
The goal is not to eliminate every possible mistake. It is to create more opportunities for employees to practice difficult decisions, identify where additional support is needed and reinforce learning beyond the point of completion.
From compliance confidence to compliance evidence
The value of earlier intervention becomes particularly relevant alongside another finding from the research. Just over half (52%) of compliance, legal and risk leaders and 53% of HR and L&D leaders say their organizations experienced compliance incidents in the previous 12 months that additional training, reinforcement or earlier intervention may have helped prevent.
This does not establish that training shortcomings caused those incidents, and the incidents cannot be connected to employees who participated in the separate readiness assessment. But the consistency across two independent leader groups is notable because leaders themselves see potential value in earlier intervention.
For compliance teams, the opportunity is to combine different readiness signals rather than rely on any one of them. Completion can establish that training occurred, assessments can provide evidence of understanding, realistic scenarios can reveal where applied judgment is weaker, and reinforcement can target areas where employees need more support. Risk and outcome measures add another view of whether the overall approach is translating into greater organizational readiness.
None of these measures needs to replace another. Together, they provide a more complete picture of whether employees are prepared to act when it matters.
That may also help explain why leaders’ future priorities extend beyond traditional training administration. AI-assisted support, better reporting and analytics, risk identification, reinforcement and scenario-based learning all feature among planned areas of investment. The common thread is better visibility into where employees are ready, where uncertainty remains and where additional support could make a difference.
That leaves compliance leaders with a more demanding test of their programs. We know employees completed the training. We believe they are ready. What evidence would prove us right?
Kristina Ryan is vice president of product and design at Go1. She previously served in a variety of roles at companies like LinkedIn and Ernst & Young. 
