Employees will fall within risk categories which will determine how frequently legal training has to be undertaken and whether such training involves e-learning only or whether it is supplemented by face-to-face trainings to give employees the chance to raise questions and discuss concerns.