The Conventional Wisdom
Many financial institutions approach insider trading prevention as a simple transfer of knowledge. You create a training module that explains Material Nonpublic Information, goes over Rule 10b5-1 Plans, lists penalties, and tests comprehension. Employees complete the course annually, sign an attestation, and you've checked the box.
The logic seems sound: if people understand the rules, they won't break them. Just make the consequences clear, the definitions precise, and the examples vivid.
Why We Disagree
This method assumes insider trading occurs because someone didn't know the rules. However, the SEC charges against two former investment bankers involved in the 2022 South Jersey Industries acquisition tell a different story. One of the accused was a former Bank of America employee. These weren't junior analysts confused about what constitutes material information. They were professionals who had attended numerous compliance trainings.
The issue isn't that your training module fails to explain insider trading. The problem is that it treats insider trading as an intellectual puzzle rather than a social and situational breakdown.
People don't trade on inside information because they forgot the definition of Material Nonpublic Information. They do it because:
- They're in a relationship where sharing information feels natural (a college roommate, a golf buddy, a former colleague).
- The opportunity arises when formal rules feel distant.
- They rationalize that "everyone does it" or "it's just a tip, not real insider trading."
- The psychological distance between their daily work and enforcement feels vast.
Your training doesn't address these factors.
The Evidence
Look at how insider trading actually unfolds. The SEC enforcement pattern shows trades that happen through personal networks, not through ignorance of compliance requirements. When investment bankers pass information to friends or family members, they know it's wrong. They've calculated that the relationship is worth the risk, or they've convinced themselves this particular instance doesn't count.
Consider the mechanics of the Bank of America case. The accused had access to confidential deal information through their professional role. The decision to misuse that information wasn't a knowledge gap. It was a choice made in a specific social context, probably rationalized in real time.
Your annual training module can't compete with that moment. A 45-minute course completed in February has no power when someone faces a concrete opportunity in August, especially when that opportunity involves a trusted relationship.
The Federal Sentencing Guidelines for Organizations recognize this. Section 8B2.1 calls for "periodic training" and "otherwise disseminating information appropriate to such individuals' respective roles and responsibilities." That "otherwise disseminating" matters. It acknowledges that a single training event doesn't create ongoing behavioral influence.
What to Do Instead
Build your insider trading prevention around moments and relationships, not just rules.
Map your information flows. Identify which roles routinely handle Material Nonpublic Information. Then map the social networks around those roles. Who do investment bankers socialize with? Who are the college friends, the neighbors who ask about work, the relatives who own brokerage accounts? Your training should address these specific relationship dynamics, not abstract "friends and family."
Train for the moment of temptation. Replace your annual knowledge quiz with scenario-based exercises that put people in realistic situations. "Your college roommate mentions he's thinking of buying stock in a company you know is about to be acquired. What do you say?" Make people rehearse the refusal, not just acknowledge the rule.
Create friction in high-risk relationships. Some firms require employees to pre-clear personal securities transactions and disclose the accounts of immediate family members. This isn't about catching violations after the fact. It's about making the employee think twice before sharing information, because they know the transaction will be visible.
Measure behavior, not comprehension. Stop tracking training completion rates as your primary metric. Track pre-clearance requests, Blackout Period compliance, and the volume of questions employees ask your compliance team. If no one's asking whether a particular piece of information is material, either you have perfect clarity (unlikely) or people aren't engaging with the real judgment calls.
Build a speak-up culture around gray areas. Most insider trading doesn't start with someone deciding to break the law. It starts with someone unsure whether specific information is material, or whether a particular relationship creates a conflict. If your training creates the impression that the rules are black-and-white, employees won't surface the gray areas until it's too late.
One practical step: require investment banking teams to hold monthly "close calls" discussions where they review situations that felt ambiguous. Not violations, but moments where someone wasn't sure. This normalizes seeking guidance and makes the compliance team a resource, not a police force.
When the Conventional Wisdom IS Right
Knowledge-based training isn't useless. You do need to teach the technical definitions. New employees genuinely need to learn what Material Nonpublic Information means, how Blackout Periods work, and what Rule 10b5-1 Plans allow.
The conventional approach works well for:
- Onboarding. New hires need foundational knowledge before they encounter real situations.
- Role transitions. When someone moves from a role without deal access to one with regular exposure to Material Nonpublic Information, they need explicit training on the new responsibilities.
- Regulatory updates. When the SEC issues new guidance or enforcement priorities shift, a knowledge update makes sense.
And yes, you need the annual refresher for documentation purposes. The Federal Sentencing Guidelines for Organizations and the DOJ Corporate Enforcement Policy both look for evidence of regular training. Courts will ask whether you trained employees on insider trading rules. You need to answer yes.
But don't mistake that annual course for actual prevention. Think of it as necessary documentation, not sufficient protection.
The real work happens in the 11 months between training sessions, when you're building a culture where people instinctively protect confidential information, where they know how to handle the uncomfortable moment when a friend asks about a deal, and where seeking guidance feels normal rather than risky.
Your training program should prepare people for those moments. The rules are the foundation. The relationships and decisions are where insider trading actually happens.
