"a provider shall put arrangements in place, in accordance with subsection (4), for the protection of enrolled learners who have paid moneys to, or on whose behalf moneys have been paid to, the provider for a programme of education and training where—