Ensuring employees complete a tick-box training module might not protect employers from vicarious liability, as this employer discovered.