Vendor cybersecurity due diligence
Vendor cybersecurity due diligence in Trade and Geopolitical Risk is no longer a back-office checklist item: the U.S. Department of the Treasury's Office of Foreign Assets Control and the Bureau of Industry and Security have both issued guidance tying third-party technology relationships directly to sanctions exposure and export control liability. The European Union Agency for Cybersecurity published its updated ICT supply chain risk framework under the NIS2 Directive in late 2023, and compliance teams in cross-border trade are now mapping vendor contracts against those disclosure and incident-reporting requirements before renewals.
Watch
- BIS Entity List additions affecting cloud and software vendors used in trade operations
- NIS2 Directive ICT supply chain provisions: incident reporting deadlines for third-party breaches
- OFAC guidance on technology vendor nexus to sanctioned jurisdiction exposure
- Whether U.S. agencies coordinate a unified vendor vetting standard across trade and cyber mandates
Recent material activity in Trade & Geopolitical Risk
-
OFAC replaces legal-services payment reporting requirement with recordkeeping obligation across multiple sanctions programs
On July 27, 2026, OFAC issued a final rule updating contact and website information across several sanctions-program regulations and amending general licenses that authorize payments for legal services from funds origina…
Read a full sample brief → -
USITC opens public interest comment period for Section 337 complaint targeting secondary cylindrical batteries and components
On July 27, 2026, the U.S. International Trade Commission received a complaint covering certain secondary cylindrical batteries, their components, and downstream products containing them, docketed as DN 3926. The Commiss…
Read a full sample brief → -
ITC institutes Section 337 investigation into imported dermatological treatment devices on four patent claims
The U.S. International Trade Commission instituted an investigation on July 27, 2026, following a complaint filed by Serendia, LLC of Los Angeles alleging patent infringement by importers of dermatological treatment devi…
Read a full sample brief → -
ITC institutes Section 337 investigation into adjustable child carriers on patent infringement complaint by Ergobaby
The U.S. International Trade Commission formally instituted an investigation on July 27, 2026, into alleged patent infringement by importers of adjustable child carriers, following a complaint filed by The Ergo Baby Carr…
Read a full sample brief → -
ITC institutes Section 337 investigation into imported silicon anode materials covering four active battery patents
The U.S. International Trade Commission instituted an investigation on July 24, 2026, based on a complaint filed June 18, 2026 by Sila Nanotechnologies and Georgia Tech Research Corporation. The complaint alleges patent …
Read a full sample brief → -
USTR publishes FY 2027 tariff-rate quota allocations for raw cane sugar, refined sugar, and sugar-containing products
On July 24, 2026, the Office of the United States Trade Representative issued FY 2027 in-quota quantity allocations for imported raw cane sugar, refined sugar (including specialty sugar), and sugar-containing products. T…
Read a full sample brief → -
EU Council implements updated Iran human rights sanctions designations under the 2011 restrictive measures framework
On 24 July 2026, the EU Council issued a Council Implementing Decision updating designations under the Iran human rights sanctions regime established in 2011. The decision adds or modifies listings of persons and entitie…
Read a full sample brief → -
EU Council implements updated Iran sanctions designations under Regulation 359/2011 effective 24 July 2026
On 24 July 2026, the EU Council issued an implementing regulation updating restrictive measures against specified persons, entities, and bodies under the Iran human rights sanctions framework. The regulation takes effect…
Read a full sample brief → -
EU Council adds new designations under Iran human rights sanctions regime effective 24 July 2026
On 24 July 2026, the EU Council issued an Implementing Decision updating designations under the Iran human rights restrictive measures framework. The decision adds or amends listings of persons and entities subject to as…
Read a full sample brief → -
EU Council adds new designations under Ukraine sanctions regime via Implementing Regulation of 23 July 2026
The EU Council adopted Implementing Regulation (EU) 2026/1843 on 23 July 2026, implementing the Ukraine territorial integrity sanctions framework. The regulation adds or amends designations, triggering immediate asset-fr…
Read a full sample brief →