Helping clients meet their business challenges begins with an in-depth understanding of the industries in which they work. That’s why KPMG LLP established its industry-driven structure. In fact, KPMG LLP was the first of the Big Four firms to organize itself along the same industry lines as clients.

How We Work

We bring together passionate problem-solvers, innovative technologies, and full-service capabilities to create opportunity with every insight.

Learn more

Careers & Culture

What is culture? Culture is how we do things around here. It is the combination of a predominant mindset, actions (both big and small) that we all commit to every day, and the underlying processes, programs and systems supporting how work gets done.

Learn more

Russia-Ukraine war: Managing third-party compliance with sanctions

Actions companies can take

abstract art: purple and blue cubes

The Russia-Ukraine war has prompted many companies to cease operations in Russia, at least until the fighting stops. But for many firms, the war and related sanctions create additional challenges including ensuring that their supply chains—and their supply chains’ third-party suppliers—are not subject to the growing list of sanctions being applied by the U.S. and other governments. Failing to adhere to the complex sanctions rules could prove very costly, both financially and in potential damage to reputation.

In this article, we detail some of the more recent sanctions and what companies need to do now to stay compliant.

The sanctions list keeps evolving

With the fast-growing list of sanctions on Russian companies, banks and individuals, U.S. companies need to increase scrutiny on third parties to manage compliance, not just with U.S. regulations, but with more stringent European sanctions that could affect U.S. overseas subsidiaries.

These are some recent sanctions that companies should be considering for third-party compliance:


The new sanctions landscape

  • Ban on new investment in Russia:  President Biden issued an executive order on April 6, 2022 that imposes a ban on all new investment in Russia.  This is a potentially a huge development that prohibits companies from even investing in their own subsidiaries.
  • The 50 Percent Rule from The Office for Foreign Assets Control (OFAC) in the U.S. Department of Justice: Any company that is 50 percent or more owned by a blocked individual or company is considered blocked by the sanctions.1 The European Union adopted an even more restrictive rule for companies owned or controlled by blocked individuals.
  • Expanded export controls: Another major challenge for companies is a focus on navigating export control restrictions with limited exceptions and extraterritorial controls on foreign-produced items. Third-party due diligence requires checks for certain end-uses and end-users, even for foreign-produced, non-U.S.-origin items that could be subject to U.S. export controls.
  • Import bans: New import bans on Russian and Belarusian products present a challenge as some companies are required to reshuffle their supply chains and enhance due diligence.


What you can do now

Company compliance programs will differ, depending on how directly it and its suppliers are involved with Russian trade and products imported and exported to the region. Here are some steps that every company should consider to comply and avoid financial and reputation risks from violations:  

  • Screen and rescreen: Screening involves comparing data from your potential business partners, including distributors and resellers, with the “watchlists” issued by U.S. OFAC and other global regulators. It is not enough to screen only once; instead,  implement a program of frequent rescreening and performing risk based due diligence involving beneficial ownership, political exposure, military end use (“MEU”) implications as well as overall adverse reputation of the third parties.
  • Conduct risk assessments: Given the potential liability associated with knowing your supplier/customer base and where products are coming from/going, conduct third-party risk assessments that also evaluate export controls and sanctions risks.
  • Review contracts: All contracts with third parties should contain language that the company will not be involved in any transaction that would be prohibited by sanctions or export controls. Consider adding in a right to audit and provisions for indemnification if violations occur.
  • Improve data collection: Gather quality, accurate data from your third-party business partners through the onboarding process to include relevant questionnaires. This may involve requesting information regarding the end-use and end-users of export-controlled products for distributors and resellers, obtaining country of origin and supply chain networks information from suppliers, as well as acquiring beneficial ownership structures when appropriate.
  • Evaluate your program: Measure your third-party risk management and trade compliance programs to improve effectiveness of policies, procedures, desk instructions, and ongoing internal assessments. Make sure personnel have adequate training and can recognize red flags for third-party risks.
  • Act expeditiously: Implement a comprehensive sanctions compliance program as soon as possible. While there has been no determination so far about the extent of financial penalties for violating sanctions, the costs could be considerable if a third-party supplier is found to be in persistent violation of the rules. Perhaps even more importantly, a company could suffer damage to its brand and reputation if the government makes a public case for sanctions violations. Consumer boycotts have already been launched against companies that continue to operate in Russia The consequences found to be in violation of the law could be more severe.

1 “U.S. Treasury Announces Unprecedented & Expansive Sanctions Against Russia, Imposing Swift and Severe Economic Costs,”, Feb. 24, 2022.

Dive into our thinking:

Russia-Ukraine war: Managing third-party compliance with sanctions

Download PDF

Explore other services tailored to your business

Thank you!

Thank you for contacting KPMG. We will respond to you as soon as possible.

Contact KPMG

Use this form to submit general inquiries to KPMG. We will respond to you as soon as possible.

By submitting, you agree that KPMG LLP may process any personal information you provide pursuant to KPMG LLP's Privacy Statement.

An error occurred. Please contact customer support.

Job seekers

Visit our careers section or search our jobs database.

Submit RFP

Use the RFP submission form to detail the services KPMG can help assist you with.

Office locations

International hotline

You can confidentially report concerns to the KPMG International hotline

Press contacts

Do you need to speak with our Press Office? Here's how to get in touch.