ST0665DOTOFAC

ST0665

One of the central tenets of this approach is for organizations to conduct a routine, and if appropriate, ongoing “risk assessment” for the purposes of identifying potential OFAC issues they are likely to encounter. As described in detail below, the results of a risk assessment are integral in…

Source text

As written.

One of the central tenets of this approach is for organizations to conduct a routine, and if appropriate, ongoing “risk assessment” for the purposes of identifying potential OFAC issues they are likely to encounter. As described in detail below, the results of a risk assessment are integral in informing the SCP’s policies, procedures, internal controls, and training in order to mitigate such risks.

Change history

When and why it changed.

Present in the original catalog

This standard has not changed since it was added.

Assessed by HEXDI

What HEXDI assesses.

  • M2

    1 — PROGRAM SETUP AND ADMINISTRATION

    Program is developed using a reasoned methodology that is based on a thorough analysis and identification of risks pertaining to company…

  • M2

    2 — PROGRAM SETUP AND ADMINISTRATION

    Methodology includes monitoring, collecting, and reporting of information on the number of exports/imports, nature and number of…

  • M2

    3 — PROGRAM SETUP AND ADMINISTRATION

    Senior Management, with the assistance of legal counsel and/or compliance personnel, takes responsibility for determining the significance…

  • M2

    4 — PROGRAM SETUP AND ADMINISTRATION

    Risk analysis and identification occurs at Senior Management meetings as part of short- and long-term forecasting and strategic planning.

  • M2

    5 — PROGRAM SETUP AND ADMINISTRATION

    Risk analysis and identification considers customer base, countries of exports/import activities, and product lines.

  • M2

    6 — PROGRAM SETUP AND ADMINISTRATION

    Risk analysis and identification considers risks posed by interactions with third parties, to include suppliers, brokers, contractors,…

Source & revisions

First mapped
Jun 8, 2022
Last updated
Oct 28, 2026 (6d ago)
Source
Framework for OFAC Compliance Commitments