Training & Awareness

Veridian Corp — Compliance Training and Awareness Requirements

Document ID: TRN-001

Version: 2.0

Effective Date: January 15, 2026

Owner: Learning & Development

Approved By: Chief Compliance Officer

Mandatory Training Requirements

All employees must complete the annual Compliance Awareness training within the first 30 days of each calendar year.

New hires must complete the mandatory onboarding compliance training package within their first 7 days of employment.

All employees with access to Protected Health Information (PHI) must complete role-specific HIPAA training annually.

Training completion must be recorded in the Learning Management System (LMS) within 24 hours of completion.

Employees who fail to complete mandatory training by the stated deadline must be escalated to their direct manager within 48 hours.

Managers must confirm with HR that escalated employees complete overdue training within 10 business days of escalation.

Training completion rates must be reported to the Board Risk Committee on a quarterly basis.

All training content must be reviewed for accuracy and relevance at least annually; updates must be deployed within 30 days of review completion.

Employees who fail mandatory training assessments (score below 80%) must retake the training within 5 business days.

Training records must be retained for a minimum of 3 years for audit purposes.

FDA-related training records for device manufacturing personnel must be retained for the lifetime of the device plus 2 years per 21 CFR 820.25.

Training Course Catalog

Course ID	Course Name	Audience	Frequency	Duration	Pass Score	Regulatory Basis
TRN-101	Compliance Awareness Fundamentals	All employees	Annual	45 min	80%	SOC 2 CC1.4
TRN-102	HIPAA Privacy & Security	PHI access roles	Annual	60 min	85%	HIPAA §164.530(b)
TRN-103	Data Handling & Classification	All data handlers	Annual	30 min	80%	SOP-DH-001
TRN-201	FDA Quality System Regulation	Manufacturing, QA, RA	Annual	90 min	85%	21 CFR 820.25
TRN-202	Medical Device Reporting (MDR)	QA, RA, Complaint handlers	Annual	45 min	90%	21 CFR Part 803
TRN-203	Design Controls & DHF	Engineering, QA	Annual	60 min	85%	21 CFR 820.30
TRN-301	Phishing & Social Engineering	All employees	Semi-annual	20 min	80%	IT Security Policy
TRN-302	Incident Response Procedures	IT Security, managers	Annual	45 min	85%	IRP-001
TRN-401	Vendor Risk & Third-Party Management	Procurement, IT Security	Annual	30 min	80%	VM-001
TRN-402	Code of Conduct & Ethics	All employees	Annual	30 min	80%	COC-001

Role	TRN-101	TRN-102	TRN-103	TRN-201	TRN-202	TRN-301	Deadline
All Employees	Required	—	—	—	—	Required	Jan 30
Clinical / Patient Data	Required	Required	Required	—	—	Required	Jan 30
Quality Assurance	Required	Required	Required	Required	Required	Required	Jan 30
Regulatory Affairs	Required	Required	Required	Required	Required	Required	Jan 30
Engineering / R&D	Required	—	Required	Required	—	Required	Jan 30
IT Security	Required	Required	Required	—	—	Required	Jan 15
Procurement / Vendor Mgmt	Required	—	Required	—	—	Required	Jan 30

Role-based training assignments must be auto-populated in the LMS within 5 business days of a role change or new hire start date.

Department	Headcount	Completed	Overdue	Completion Rate
Engineering	142	138	4	97.2%
Quality & Regulatory	38	38	0	100%
Clinical Operations	24	22	2	91.7%
IT & Security	31	31	0	100%
Sales & Marketing	67	61	6	91.0%
Corporate / Admin	89	84	5	94.4%
Total	847	812	35	95.9%