By
Robert Whitmore
Director of Research, Council on Critical Infrastructure
May 5, 2026
Economic sanctions have become one of the primary instruments of geopolitical statecraft in the current era. The comprehensive sanctions regimes applied to Russia following the 2022 invasion of Ukraine, the layered restrictions on Iranian economic activity, and the expanding use of export controls and entity designations as tools of strategic competition have demonstrated that sanctions are no longer peripheral compliance concerns. They are operational risk events capable of disrupting supply chains, stranding assets, voiding contracts, and severing commercial relationships with little advance warning.
For industrial organizations, manufacturers, and infrastructure operators with international commercial exposure, sanctions risk management has become a strategic necessity.
The Speed and Scope of Modern Sanctions
Historical experience with sanctions involved lengthy diplomatic processes that gave organizations substantial time to adjust commercial arrangements. The current sanctions environment operates on a different timeline. The package of economic measures applied to Russia in the weeks following the 2022 invasion was assembled and implemented with a speed that left many organizations with Russian counterparty exposure scrambling to assess their legal position and operational consequences simultaneously.
This experience established a new benchmark for how quickly the sanctions environment can change. Organizations whose contingency planning assumes extended lead times for major sanctions events have calibrated against the wrong historical precedent.
Supply Chain Exposure Beyond Direct Counterparties
Sanctions compliance is not limited to direct commercial relationships with designated entities. Prohibited transaction restrictions, secondary sanctions risks, and the complexity of beneficial ownership rules mean that exposure can exist several layers deep in supply chains and financial relationships. Organizations that have assessed only their Tier 1 supplier relationships for sanctions exposure have not completed an adequate analysis.
The industrial sector faces particular complexity in this area because the equipment, components, and technology flows that characterize industrial supply chains cross multiple jurisdictions and involve numerous intermediaries whose sanctions exposure may not be visible without deliberate investigation.
Export Controls as a Related Risk Category
Export controls, which restrict the transfer of specific technologies and goods to certain destinations and end users, have expanded substantially in scope and enforcement intensity in recent years. Industrial organizations involved in international technology transfer, whether through product sales, joint ventures, licensing arrangements, or technical service relationships, face a regulatory environment that has become materially more complex and more consequential for violations.
The consequences of export control violations, including significant financial penalties, loss of export privileges, and reputational damage, are severe enough to warrant executive-level attention rather than treatment as a pure compliance function.
Building Organizational Readiness
Organizations that manage sanctions and export control risk effectively share common characteristics. They maintain current counterparty screening processes, invest in supply chain visibility sufficient to identify third and fourth tier exposure, conduct regular legal reviews as the regulatory environment evolves, and have clear escalation paths for emerging risk situations. These are organizational capabilities that require sustained investment rather than periodic attention.
