Its Draft Trade Compliance Policy Manual

Skill: Draft Comprehensive Trade Compliance Policy Manual

1. Subject-matter triage

• Treat the source set as the governing factual record for the manual: the self-disclosure materials define required remediation, the internal investigation identifies root causes and control gaps, the audit or assessment materials identify implementation details, and the existing manual is the baseline to supersede or amend.
• Identify every subsidiary, region, business line, and compliance process that has distinct trade-control exposure, then tailor policy obligations to each rather than repeating a generic parent-company standard.
• If the record contains multiple remediation commitments, control failures, destinations, product lines, or subsidiaries, map them separately before drafting so each is addressed expressly in the manual.

2. Failure modes the skill is correcting

• Converting remediation commitments into soft aspirations instead of binding policy duties with ownership, timing, and monitoring.
• Drafting abstract trade controls without the operational matrices, escalation steps, and records that make the program implementable.
• Omitting screening-tool governance, including automatic restricted-party list updating, fallback verification, and failure escalation.
• Ignoring EU-specific export-control obligations, including general export authorizations, notice or registration conditions, and catch-all controls.
• Failing to address deemed-export risk through technology-access controls that distinguish among controlled technologies and foreign-national access categories.
• Neglecting privilege and record-segregation protocols for investigation files, causing avoidable waiver risk during government-facing productions.
• Using inconsistent terminology across chapters so that policy obligations, procedures, and recordkeeping duties do not line up.

3. Legal frameworks / domain conventions that apply

• Convert each remediation commitment into a mandatory policy requirement, with the implementing owner, implementation timeline, and compliance-monitoring mechanism stated in operative terms.
• Build the screening section around restricted-party screening governance: auto-update configuration, periodic integrity checks, manual verification when automation fails, and escalation if updates are delayed or incomplete.
• Use a technology access matrix for deemed-export controls: identify each controlled technology or category, the physical and logical access controls, the foreign-national categories requiring license review, and the approval workflow before access is granted.
• For EU operations, address general export authorizations as an affirmative compliance path only where the authorization applies to the product, destination, and transaction profile, and require any registration, filing, or notice the authorization conditions demand.
• Apply catch-all controls to relevant EU transactions even when the item is not independently controlled, whenever end-use, end-user, diversion, or other red-flag factors trigger review.
• Separate legal advice communications from ordinary business records in investigation matters; mark privileged communications appropriately, limit circulation, and segregate counsel-directed materials from operational files.
• Preserve record-retention and legal-hold obligations across jurisdictions, and state that legal holds override routine destruction schedules until clearance is given.

4. Analytical scaffolds

• Start from the source documents and extract every discrete compliance commitment, then convert each into a policy clause with: scope, rule, owner, timing, evidence of completion, and monitoring cadence.
• Draft the manual chapter by chapter: governance; screening; licensing; technology control; EU exports; catch-all review; investigations and privilege; records and retention; training and audit; escalation and discipline.
• For each control area, state the trigger, the required decision, the responsible role, the record to be created, and the escalation path for exceptions or suspected breaches.
• When the source set identifies a prior failure mode, write the compensating control directly against that failure mode so the policy cannot be read as optional or aspirational.
• For deemed-export controls, make the matrix operational: define the controlled item, access conditions, review question, license requirement, approval authority, and documentation standard.
• For EU authorizations and catch-all controls, write the decision tree in policy form: eligibility check, transaction screening, authorization verification, documentation, and stop/escalate criteria.
• For privilege and investigations, define three buckets of material: privileged legal communications, non-privileged business records, and mixed files; then specify handling rules for each.
• Where subsidiaries have different risk profiles, use subsidiary-specific annexes or provisions rather than one global rule that obscures local obligations.

5. Vertical / structural / temporal relationships

• The manual should read as a binding enterprise policy with subordinate procedures and annexes, not as a narrative report.
• Cross-reference remediation provisions to the source commitment they implement, and align each policy rule with the investigation finding or audit gap that necessitated it.
• Make temporal sequencing explicit: immediate interim controls, near-term remediation steps, ongoing monitoring, periodic review, and escalation upon non-compliance.
• State that investigation-related holds, preservation steps, and production protocols apply once a matter is reasonably anticipated or opened, and continue until closure or written release.
• Where one control depends on another, specify the dependency; for example, access approval depends on classification of the technology, and EU authorization reliance depends on destination and end-use screening being complete.

6. Output structure conventions

• Produce a complete trade compliance policy manual in a polished, multi-chapter form suitable for company adoption.
• Use conventional policy drafting elements in each chapter: purpose, scope, policy statement, procedures, responsibilities, records, exceptions, and review.
• Use defined terms consistently and include an interpretation section if needed to keep policy terms aligned across chapters.
• Include annexes or tables where needed for access matrices, escalation paths, record categories, and subsidiary-specific requirements.
• Write in operative policy language; avoid commentary that merely describes what the policy would do.
• Ensure the final document is self-contained, implementation-ready, and suitable for circulation as the company’s controlling trade compliance policy.