US OFAC Sanctions Compliance Framework IC.I: Write clear SCP policies and procedures that reflect day-to-day operations

Internal controls I: the organisation has designed and implemented written policies and procedures outlining the SCP that are relevant, reflect daily operations, are easy to follow and are designed to prevent misconduct; the SCP must adjust quickly to SDN and SSI list updates, new or amended programs and general licenses.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Internal controls (Framework, guidance) – US OFAC Sanctions Compliance Framework

IC.II Implement controls to identify, interdict, escalate and report prohibited activity, with calibrated and tested screening tools
IC.III Enforce SCP policies through internal or external audits
IC.IV Align recordkeeping policies with OFAC requirements
IC.V On learning of a control weakness, apply compensating controls until the root cause is fixed
IC.VI Communicate SCP policies to staff, high-risk gatekeepers and external parties performing SCP tasks
IC.VII Appoint staff to embed SCP procedures into daily operations with business unit consultation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All US OFAC Sanctions Compliance Framework controls