POLICY · PROCEDURES · RISK MANAGEMENT
From ad-hoc checks to a structured compliance framework
Ad-hoc checks and individual assessments are hard to scale over time.
TradeRisk supports organisations in structuring compliance processes relating to customers, sanctions, export control and international trade.
Why a compliance framework?
An effective compliance framework helps organisations recognise, assess and escalate risks in a consistent way.
The aim is not to create as many procedures as possible.
A good framework should instead fit the organisation, its activities and its actual risk profile in a practical way.
Practical rather than bureaucratic
A compliance procedure only has value when employees understand when and how to apply it. TradeRisk therefore focuses on:
- clear responsibilities
- practical workflows
- proportionate controls
- recognisable escalation points
- usable documentation
Support with
- Compliance risk assessments
- CDD and KYC procedures
- Sanctions screening procedures
- Export compliance procedures
- Dual-use procedures
- Escalation processes
- Decision-making structures
- Documentation and record keeping
- Periodic review processes
The Gap Analysis examines
- Customer research
- UBO checks
- Sanctions checks
- Export processes
- End-user research
- Dual-use process
- Responsibilities
- Record keeping
- Staff training
From analysis to implementation
STEP 1
Risk assessment
Inventory of relevant compliance risks.
STEP 2
Priorities
Determining which risks and processes need attention first.
STEP 3
Framework
Developing or improving policies and procedures.
STEP 4
Implementation
Support with practical application within the organisation.
Frequently asked questions
Does every organisation need an extensive compliance framework?
No. The size and complexity of a framework should match the size, activities and risks of the organisation.
Can TradeRisk review existing procedures?
Yes. Existing processes and procedures can be reviewed to identify areas for improvement and potential risks.
What does a Compliance Gap Analysis deliver?
A clear report with the status per area — in order, needs improvement or high risk — and concrete recommendations to address open points.
How long does it take to set up a compliance framework?
That varies by organisation and scope. A Gap Analysis is usually completed within a few weeks; setting up policies and procedures is planned in consultation.
Is this also suitable for smaller organisations?
Yes. The approach is scaled to the size and risk profile of the organisation — an SME has different needs from a large enterprise.
What happens if an organisation has no compliance policy?
Without a documented policy, there is often no consistent approach to customer research, sanctions screening and export risks, which increases the chance of errors and makes it harder to demonstrate that due care was exercised.
What is an Internal Compliance Programme (ICP)?
An Internal Compliance Programme is an internal policy and control system focused on export control and dual-use compliance: from classification and screening to internal approval procedures. For certain export licences, such as a Union General Export Authorisation, a demonstrably effective ICP is a prerequisite.