US OFAC Sanctions Compliance Framework IC.IV: Align recordkeeping policies with OFAC requirements

Internal controls IV: the organisation ensures its OFAC recordkeeping policies and procedures adequately account for the requirements of the sanctions programs OFAC administers (see 31 CFR 501.601, now ten years).

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Internal controls (Framework, guidance) – US OFAC Sanctions Compliance Framework

IC.I Write clear SCP policies and procedures that reflect day-to-day operations
IC.II Implement controls to identify, interdict, escalate and report prohibited activity, with calibrated and tested screening tools
IC.III Enforce SCP policies through internal or external audits
IC.V On learning of a control weakness, apply compensating controls until the root cause is fixed
IC.VI Communicate SCP policies to staff, high-risk gatekeepers and external parties performing SCP tasks
IC.VII Appoint staff to embed SCP procedures into daily operations with business unit consultation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All US OFAC Sanctions Compliance Framework controls