Compliance and Enforcement

FIRS monitors, facilitates, and investigates the private sector’s compliance with its obligations under the national-security authorities for which FIRS is responsible, including the Data Security Program, Protecting Americans From Foreign Adversary Controlled Applications Act, and mitigation agreements resulting from transaction-specific reviews through CFIUS, Team Telecom, and other authorities. As part of CFIUS, Team Telecom, and other reviews of specific transactions or technology, FIRS works with the parties to develop effective, verifiable, and enforceable measures to mitigate any risks identified as a result of those reviews. FIRS also takes appropriate actions to monitor and enforce these national-security obligations, including through in-house security directors and officers, audits and site inspections, civil penalties, judicial action, amending mitigation agreements, subpoenas, and criminal and civil referrals within the Department and to other agencies for investigation and enforcement.

Additional resources:

• CFIUS Enforcement and Penalty Guidelines