Sanctions Risk
What is sanctions risk?
Sanctions risk is the risk that a person, legal entity, or any of its officers, employees, subsidiaries, or affiliates may, directly or indirectly, engage in conduct that breaches, or is reasonably likely to breach, any applicable economic, financial, or trade sanctions laws, regulations, embargoes, or restrictive measures enacted, administered, or enforced by a competent authority, including but not limited to the United Nations, the European Union, the United States, the United Kingdom, or any other relevant national or supranational body, or that such person or entity may otherwise become the subject of or exposed to such measures. This is a complex definition for a diffucult to manage risk.
Sanctions risk involves exposure to legal, financial, operational, and reputational consequences arising from involvement, intentional or unintentional, in activities prohibited, restricted, or conditioned under one or more sanctions regimes. These regimes may include asset freezes, trade embargoes, investment restrictions, sectoral prohibitions, or limits on the provision of specific goods, technology, or financial services.
Primary exposure is where an entity is directly subject to a given jurisdiction’s sanctions laws (for example, a U.S. company under the U.S. Treasury’s Office of Foreign Assets Control framework).
Secondary or indirect exposure is where an entity outside jurisdiction X faces restrictions or enforcement actions from jurisdiction X due to dealings with sanctioned actors, sectors, or territories that have extraterritorial reach.
There is derivative exposure through ownership, control, or facilitation. In simple words, a company may face sanctions risk if it transacts with an entity that is owned or controlled by a designated person, even if that entity’s name does not appear on an official list. Facilitating a prohibited transaction (such as approving, financing, or insuring an activity involving a sanctioned party) can trigger liability even when the facilitating party is not directly engaged in the transaction itself.
In risk and compliance, sanctions risk is not limited to direct legal penalties. It includes collateral effects such as frozen assets, loss of access to correspondent banking and clearing systems, termination of contracts under sanctions clauses, exclusion from key markets, reputational damage, and forced remediation under regulatory scrutiny.
Sanctions risk is a multidimensional exposure. It arises from legal obligations, geopolitical developments, and operational complexity. Managing it requires continuous monitoring of evolving sanctions regimes, precise ownership and control analysis, robust screening and due diligence systems, contractual safeguards, staff training, and a culture of accountability.
Understanding sanctions risk
Sanctions regimes are dynamic instruments of statecraft. In simple words, sanctions are evolving geopolitical tools used by states and supranational bodies to pursue strategic objectives without resorting to armed conflict. They are instruments of coercion, deterrence, and signaling, deployed, adjusted, and withdrawn in response to changing political, economic, or security conditions.
In the past, sanctions were narrow and static embargoes on specific goods or countries, often implemented through multilateral resolutions. Today, sanctions have become multilayered policy mechanisms, integrated into foreign policy and national security architectures. Governments now design sanctions to achieve complex outcomes, including the punishment of violations of international norms. They target not only states but also non-state actors, industries, financial systems, and individuals, including in allied or neutral jurisdictions. This transformation has made sanctions risk a permanent risk, not an exceptional response to isolated crises.
Sanctions risk arises from several sources:
1. Sanctions regimes evolve with geopolitical developments. Designations, delistings, and licensing decisions are issued frequently and sometimes unpredictably, often in response to political negotiations, armed conflicts, or intelligence findings. A regime that is permissive today may be restrictive tomorrow. A transaction lawful today may become prohibited after some days. This means that risk and compliance frameworks must operate continuously, with legal, operational, and technological capabilities designed for rapid adaptation.
2. Sanctions have become instruments of coordination among jurisdictions. The United States, the European Union, and the United Kingdom each maintain independent regimes, yet they often act in parallel or sequentially to reinforce pressure. Divergence among them, especially in ownership and control definitions, humanitarian exceptions, or extraterritorial reach, creates legal conflicts and compliance uncertainty.
3. Modern sanctions regimes interact with other policy instruments such as export controls, investment screening, counterterrorism financing, and anti-corruption initiatives. The boundaries between these domains are not always clear. A single strategic objective, such as impeding a foreign adversary’s military capacity, may be pursued simultaneously through export bans on dual-use goods, financial sanctions against defense sector entities, visa restrictions on officials, and sectoral financing prohibitions. This convergence creates a legal and operational ecosystem in which sanctions are not isolated measures but components of broader economic statecraft.
4. Technological change improves enforcement. Governments now use data analytics, satellite imagery, and financial intelligence to detect sanctions evasion and to adjust designations with speed and precision. Digital assets, decentralized finance, and new payment technologies continuously reshape the enforcement landscape, prompting authorities to issue guidance and impose novel obligations.
Sanctions, United Nations Security Council
The Security Council can take action to maintain or restore international peace and security under Chapter VII of the United Nations Charter. Sanctions measures, under Article 41, encompass a broad range of enforcement options that do not involve the use of armed force. Since 1966, the Security Council has established 30 sanctions regimes.
Security Council sanctions have taken a number of different forms, in pursuit of a variety of goals. The measures have ranged from comprehensive economic and trade sanctions to more targeted measures such as arms embargoes, travel bans, and financial or commodity restrictions. The Security Council has applied sanctions to support peaceful transitions, deter non-constitutional changes, constrain terrorism, protect human rights and promote non-proliferation.
Sanctions do not operate, succeed or fail in a vacuum. The measures are most effective at maintaining or restoring international peace and security when applied as part of a comprehensive strategy encompassing peacekeeping, peacebuilding and peacemaking. Contrary to the assumption that sanctions are punitive, many regimes are designed to support governments and regions working towards peaceful transition. The Libyan and Guinea-Bissau sanctions regimes all exemplify this approach.
Today, there are 14 ongoing sanctions regimes which focus on supporting political settlement of conflicts, nuclear non-proliferation, and counter-terrorism. Each regime is administered by a sanctions committee chaired by a non-permanent member of the Security Council. There are 10 monitoring groups, teams and panels that support the work of 11 of the 14 sanctions committees.
The Council applies sanctions with ever-increasing cognisance of the rights of those targeted. In the 2005 World Summit declaration, the General Assembly called on the Security Council, with the support of the Secretary-General, to ensure that fair and clear procedures are in place for the imposition and lifting of sanctions measures.
Charter of the United Nations, Article 41.
"The Security Council may decide what measures not involving the use of armed force are to be employed to give effect to its decisions, and it may call upon the Members of the United Nations to apply such measures. These may include complete or partial interruption of economic relations and of rail, sea, air, postal, telegraphic, radio, and other means of communication, and the severance of diplomatic relations."
Using the threat of sanctions.
A sanction’s life-cycle often starts with the Security Council taking up a situation of concern. The Council or the UN Secretary-General and his representatives will usually employ peaceful means to prevent the escalation, or outbreak of, conflict.
At this stage, even the hint of Security Council sanctions may be enough to encourage conflict parties to enter into dialogue. This is sometimes what the Council means when it signals that it will “consider all measures at the Council’s disposal, including the use of enforcement measures.”
Sanctions are meant to be a last resort when it comes to addressing massive human rights violations, curbing illegal smuggling or stopping extremism groups. Increasingly, sanctions are also being used to support peace efforts, to ensure that elections are held, or to demobilize armed groups.
Imposing sanctions, the what, who and how.
Sometimes the threat of sanctions does not work, and it is up to the Security Council to decide to impose sanctions on individuals, entities or States who bear responsibility for conflict.
At this stage, the Security Council adopts a resolution establishing a new sanctions regime, where it determines the precise sanctions measure, such as arms embargoes, assets freezes or travel bans, for example, that it is imposing on the situation.
In some cases, the Council decides to also identify the individuals or entities that are subject to these ‘targeted’ sanctions measures. In other cases, the relevant Sanctions Committee, established as part of a sanctions resolution, will do so.
The individuals or entities sanctioned can change, with new names being added or removed from the list.
Implementing sanctions.
Sanctions Committees are subsidiary organs of the Council and are composed of all 15 of the Council’s members. Their role is to implement, monitor and provide recommendations to the Council on particular sanctions regimes. They meet regularly to consider reports from expert panels and to hold meetings with Member States, UN actors and international organizations.
In some cases, an expert panel is created to assist the sanctions committee. An expert panel monitors the implementation of the sanctions measures and reports its findings to the committee, or in some cases directly to the Council. Expert panels are usually comprised of between five to eight technical experts, all of whom are appointed by the Secretary-General. Expertise in these panels depends on the sanctions imposed, but may include arms, natural resources or human rights / humanitarian experts.
Of central concern to the Council is that sanctions are implemented with due regard for human rights.
De-listing requests from the other sanctions committee are managed by the Focal Point for De-Listing. The post of Focal Point, which was established by resolution 1730 (2006), is based in the UN Department of Political Affairs.
Ending a sanctions regime.
The Security Council can remove UN sanctions once a conflict situation improves. UN sanctions have been lifted in different ways. In some cases, benchmarks contained in sanctions resolutions have been achieved; in others, peace processes have achieved the desired outcome.
This website is developed and maintained by Cyber Risk GmbH as part of its professional activities in the fields of risk management and regulatory compliance.
Cyber Risk GmbH specializes in supporting organizations in understanding, navigating, and implementing complex European, U.S., and international risk related regulatory frameworks.
Content is produced and maintained under the professional responsibility of George Lekatis, General Manager of Cyber Risk GmbH, a well known expert in risk management and compliance. He also serves as General Manager of Compliance LLC, a company incorporated in Wilmington, NC, with offices in Washington, DC, providing risk and compliance training in 58 countries.