What to Tell Your Officers When They Ask Why You Need an Export Compliance Program

A client came to us this week with a question that was really a bigger ask in disguise. She needed to walk into a room with her corporate officers and make the case for a formal compliance manual, and she wanted something solid to bring with her. Not just our word for it, but the actual regulation. Something she could point to and say, "here, this is why we need this."

So she asked us directly: "Can you send me the regulation that says we're required to have an export compliance program?"

It's a great question, and one we hear a lot from people in her seat. Compliance managers often have to sell leadership on investment before leadership will approve the budget, the headcount, or even the time. So we went and found her something better than she was expecting.

There's no blanket rule, but there is something better

Here's the honest answer: the Export Administration Regulations (EAR) do not contain a single provision requiring every company to maintain a formal Export Compliance Program (ECP). If you go looking for the line that says "thou shalt have an ECP," you won't find it.

But we didn't stop there. We pointed her to Part 764, Supplement No. 1 of the EAR, which lists the presence or absence of a compliance program as one of the factors BIS considers when determining whether a penalty should be increased or reduced. That's not a mandate. It's something more useful: a regulation that says, in writing, that not having a program works against you, and having one works in your favor.

That was the citation she actually needed. Not proof that a program is required, but proof that its absence has consequences BIS has built directly into how penalties get decided.

Why that distinction wins the room

Walking into a meeting with "there's no rule requiring this" gets a compliance manual shelved. Walking in with "BIS has told us in writing that skipping this makes penalties worse" gets budget approved.

Officers think in risk and dollars. Showing them the actual language on aggravating and mitigating factors turns a vague compliance ask into a concrete exposure question: what does this cost us if something goes wrong and we have nothing to show for our efforts, versus if we do.

What the program needs to actually demonstrate

A practical ECP exists to show a business took real, documented steps to prevent problems before they happened. At minimum, that means having clear procedures for:

• Denied party screening

• Classification (ECCN and HTS)

• Licensing determinations

• Recordkeeping

• Training

• Internal escalation when something looks off

  
  

These pieces build a record. And when BIS is weighing mitigating factors, that record is exactly what they're looking for.

The question worth asking isn't "are we legally required to have a program?" It's "if BIS ever looked at how we operate, what would they see, and how would that shape any penalty?" That reframe, backed by the actual regulatory text, gave our client something far more persuasive than a simple yes or no. It gave her a citation her officers couldn't wave away.

Build the program before you need to explain why you didn't have one.

How The Trade Pros can help

We help companies build export compliance programs that are right-sized for how they actually operate, not generic templates that sit on a shelf. If you're in the spot our client was in, needing to make the case internally before you can even start building, that's exactly where we come in. We'll help you build both the program and the argument for why it matters.

Reach out to The Trade Pros to talk through what a practical ECP looks like for your business.

-Dee