How these matters tend to begin
National security investigations involving businesses often grow out of export controls and sanctions rather than espionage. The International Traffic in Arms Regulations, administered by the State Department's Directorate of Defense Trade Controls, govern defense articles, defense services, and related technical data, while the Commerce Department's Export Administration Regulations cover many commercial and dual-use items. Sharing controlled technical data with a foreign person, even inside the United States, can count as an export. Many matters begin with a regulator's inquiry or a company's own discovery of a problem, and criminal investigations, often handled by the Justice Department's National Security Division together with investigative agencies, can run alongside civil enforcement.
Early steps that protect your position
If agents contact you or your employees, it is reasonable to say you would like counsel present before answering questions and to ask for contact details, rather than refusing to engage at all. Knowingly making a false statement to federal agents is a separate crime, which is one reason careful, counseled answers matter. Preserve relevant records, including emails, technical files, shipping records, and licensing correspondence, and suspend routine deletion. Do not move company files to personal accounts or devices; if you want to keep your own messages, ask counsel how to do it properly. If a possible export violation has been found internally, a voluntary disclosure to the relevant agency may be worth considering, but it should be prepared with advice.
What we sort out first
In a first consultation we try to understand which agency is involved, whether the matter appears civil, criminal, or both, and what the government may already know. For a company, we look at how the items or technology are classified, the licensing and registration history, and whether a formal jurisdiction determination may be needed to confirm which regime applies. For an individual, we discuss whether counsel separate from the company is advisable. We also flag immigration or security clearance consequences where they may arise. The goal is a measured response that protects your rights without making the situation worse.