ST0070
Sufficient control functions exist that support the organization’s SCP—including but not limited to information technology software and systems—that adequately address the organization’s OFAC-risk assessment and levels.
Source text
As written.
Sufficient control functions exist that support the organization’s SCP—including but not limited to information technology software and systems—that adequately address the organization’s OFAC-risk assessment and levels.
Change history
When and why it changed.
Present in the original catalog
This standard has not changed since it was added.
Assessed by HEXDI
What HEXDI assesses.
- M4
4 — JURISDICTION, CLASSIFICATION, AND MARKING
Company has automated its jurisdiction, classification, and marking processes.
- M6
1 — TRANSACTION SCREENING
Company has automated its party and transaction screening process.
- M7
4 — AUTHORIZATION MANAGEMENT
Company has automated its authorization submission process.
- M7
4 — AUTHORIZATION MANAGEMENT
Company has automated its authorization implementation process.
- M7
4 — AUTHORIZATION MANAGEMENT
Company has automated its authorization maintenance process.
- M7
4 — AUTHORIZATION MANAGEMENT
Company has automated its notification and reporting process.
Related
Other DOT standards.
Source & revisions
- First mapped
- Jun 8, 2022
- Last updated
- Oct 28, 2026 (6d ago)
- Source
- Framework for OFAC Compliance Commitments