National Security, Trade & Technology Controls

Our team, comprised of former in-house counsel, compliance executives, and compliance professionals, brings a wealth of experience designing, enhancing, and implementing compliance programs. We specialize in designing, implementing and assessing compliance programs for various regulatory regimes, including US export controls (ITAR and EAR), economic sanctions (OFAC), and CFIUS compliance. Our comprehensive approach includes conducting compliance assessments, tailoring programs to meet the specific needs and risks of each client, and seamlessly integrating compliance programs into the organization’s operations.

We assist clients with all aspects of compliance operations including designing and executing regulator engagement strategies, preparing license applications and other submissions, and providing temporary staffing (from Interim Chief Compliance Officer to analyst-level support) to support the operations of existing compliance programs.

Companies conducting business internationally are facing increasing risks related to the vetting of business counterparties (e.g., investors, customers, vendors, partners) and supply chains. CRA assists clients conduct diligence on business counterparties and supply chain through public-source, proprietary database, and in-depth (including in-country) investigative work to identify and address potential compliance risks.

We assist clients and counsel conduct diligence in support of mergers, acquisitions, and investments activity. Our global team is often engaged to help transaction parties and counsel discover and understand a target company’s compliance risks in the areas of export controls, economic sanctions, and cybersecurity compliance, among other areas.

Our team of experts has a wealth of experience, both as outside advisors and in-house compliance professionals, in assisting companies and their counsel with regulatory investigations. We offer a full range of investigation support services, from initial forensic data collection and analysis to personnel interviews, technology system reviews, and investigation reporting. Our team is highly skilled in conducting root cause analysis, documentation, and internal/government reporting.

Regulatory investigations and enforcement actions often result in the requirement to implement complex and far-reaching remedial actions. Our team helps clients design and deploy tools, training, and other remedial measures in response to internal investigations and/or enforcement actions. We also work with clients to validate that such remedial measures are responsive, risk-appropriate, right-sized, and effective.

When companies face enforcement actions or regulatory review, independent third-party compliance consultants and monitors may be appointed to monitor compliance efforts and report out jointly to both the company and the government. We have a team of experts with a proven track record as trusted and credible independent third-party monitors, who bring a pragmatic approach that balances business realities with compliance imperatives.

In addition to our monitorship services, we also offer independent, external compliance assessment and audit services for companies facing regulatory scrutiny. Our team has the expertise to handle assessments and audits of all sizes, from small-scale audits of a single location/business function to large, multi-site/business unit, global reviews of multinational companies. We approach each engagement with a coherent and credible assessment/audit plan and execute with efficiency and thoroughness. Our goal is to provide our clients with an objective and comprehensive assessment of their compliance posture and identify areas for improvement, giving them tools they need to mitigate risks and maintain compliance.

Cybersecurity and data protection are critical concerns for modern businesses. We understand the importance of protecting sensitive information and have the expertise to help our clients navigate the complex landscape of cyber compliance. Our services include investigating, responding to, recovering from, and remediating cyber incidents, as well as analyzing and complying with regulatory obligations related to cyber compliance and breaches. Our team helps clients develop and deploy robust cyber compliance programs, incident response policies and procedures, and navigate the process of cyber breach notifications to government entities. We understand that a data or cyber incident can be a make-or-break event for a business, and we strive to maximally support our clients through these critical moments.

Regulatory compliance in today’s digital age requires the use of advanced technology and tools to enforce compliance controls and facilitate compliance at the speed of business. We understand the role and importance of such technology and have a team of experts who can assist clients in evaluating, selecting, configuring, and deploying appropriate compliance tools and systems. Our team also assists clients review existing technology infrastructure, identify potential compliance gaps, and design remediation strategies. We can implement technical solutions that fill these gaps, reducing compliance risks for client systems and infrastructure.