ST1115DOTOFAC

ST1115

A comprehensive, independent, and objective testing or audit function within an SCP ensures that entities are aware of where and how their programs are performing and should be updated, enhanced, or recalibrated to account for a changing risk assessment or sanctions environment, as appropriate.

Same text as ST1139, which is the main page for this requirement.

Source text

As written.

A comprehensive, independent, and objective testing or audit function within an SCP ensures that entities are aware of where and how their programs are performing and should be updated, enhanced, or recalibrated to account for a changing risk assessment or sanctions environment, as appropriate.

Change history

When and why it changed.

Present in the original catalog

This standard has not changed since it was added.

Assessed by HEXDI

What HEXDI assesses.

  • M11

    2 — AUDITS AND ASSESSMENTS

    Program requires unit/functional level audits.

  • M11

    3 — AUDITS AND ASSESSMENTS

    Program requires program level audits.

  • M11

    2 — AUDITS AND ASSESSMENTS

    Program has procedures for promptly communicating audit results to relevant management personnel, employees responsible for key compliance…

  • M11

    3 — AUDITS AND ASSESSMENTS

    Program has procedures for promptly communicating audit results to Senior Management.

  • M11

    4 — AUDITS AND ASSESSMENTS

    Program has procedures for promptly communicating audit results to Board of Directors (or equivalent).

Source & revisions

First mapped
Jun 8, 2022
Last updated
Oct 28, 2026 (6d ago)
Source
Framework for OFAC Compliance Commitments