Where companies run into these issues
National security enforcement rarely starts with a dramatic event. More often it begins with a shipment to a distributor that resold to a restricted end user, a payment routed through a sanctioned bank, an investor whose stake triggers review by the Committee on Foreign Investment in the United States, or an employee who took controlled technology abroad. The agencies involved vary: the Commerce Department for export controls, Treasury's Office of Foreign Assets Control for sanctions, and the Justice Department's National Security Division for criminal matters, among others. Law enforcement may also arrive as a subpoena, a search warrant, or a request for customer records. Matters can move between civil and criminal tracks, so the first contact deserves care.
Responding without making things worse
If an agent contacts you or an employee, it is usually wise to take contact details and speak with counsel before giving an interview; you are generally not required to answer on the spot, and agents usually write up what was said. Knowingly giving false information to federal investigators is a separate crime, which is another reason to slow down. Preserve documents, emails, and chat messages once you learn of an inquiry, and suspend routine deletion. Do not move funds, ship goods, or contact the foreign party in ways that could look like an effort to evade a restriction. If the request comes with a nondisclosure order, follow it, and raise any concerns about it through counsel.
What we work out at the start
In a first meeting we try to identify which agency is involved, whether the company is being treated as a witness, a subject, or a target, and whether any ongoing transaction must be paused. We look at whether a voluntary disclosure may be available and how it would interact with any investigation already underway. Enforcement priorities in this area have shifted in recent years, so we check current agency policy rather than relying on older guidance. For companies with foreign owners or overseas operations, we also consider how foreign law affects what records can be shared. The aim is a clear plan for communication with the government and with your own employees.
