This depends on the content of the Covered Entity´s sanctions policy. Covered Entities can apply sanctions for non-compliance with a training policy that states attendance is mandatory. Similarly, Covered Entities and Businesses Associates can apply sanctions for non-compliance with security policies that stipulate training is mandatory.