Standards / Frameworks
StatusPublic

Frameworks
we work to.

Every standard and regulation we work to, by sector. We draft within them; we do not certify against them or represent compliance with them.

Sector

Defence & aerospace

Open the sector page →

ITAR
22 CFR 120–130

US defence articles, services and technical data.

EAR
15 CFR 730–774

US dual-use items and end-use controls.

OFAC
31 CFR Ch. V

US country and list-based sanctions.

Export Control Order
2008 · UK

UK Military List and trade controls.

Export Control Act
2002 · UK

Statutory basis for UK export controls.

ECJU Notices
UK · Current

Standing UK licensing guidance.

EU Dual-Use
(EU) 2021/821

EU dual-use export regime.

AUKUS exemption
ITAR §126.7 · UK OGL

Licence-free trade between AUKUS partners.

DFARS
252.204-7012

Safeguarding covered defence information.

NIST 800-171
Rev 2 · CMMC baseline

Controlled unclassified information.

CMMC 2.0
US DoD

Defence supplier cyber maturity.

JSP 440 · 604
UK MoD

Defence security and network manuals.

Def Stan 05-138
UK MoD · DCPP

Cyber requirements for defence suppliers.

Cyber Essentials Plus
NCSC

Audited baseline for MoD supply.

AQAP 2110 · 2210
NATO

Supplier quality assurance.

NCAGE
NATO

Supplier code for NATO procurement.

FCPA
15 USC 78dd-1

US anti-bribery and books-and-records.

Sector

Critical minerals & rare earths

Open the sector page →

Dodd-Frank §1502
SEC Form SD

Conflict minerals disclosure (3TG).

EU Conflict Minerals
(EU) 2017/821

Due diligence on 3TG imports.

OECD Guidance
Third edition

Responsible minerals benchmark.

EU CRMA
(EU) 2024/1252

Strategic materials and concentration.

EU Batteries
(EU) 2023/1542

Cobalt, lithium, nickel, graphite.

RMAP
Responsible Minerals Initiative

Smelter and refiner assurance.

IRMA
v1.0

Mine-site responsible mining.

LME Sourcing
London Metal Exchange

Exchange responsible-sourcing rules.

UFLPA
Pub. L. 117-78

US forced-labour import presumption.

ISO 9001 · 14001 · 45001
ISO

Quality, environment and safety.

ISO 22301
ISO

Continuity where supply concentrates.

Sector

Energy & industrial materials

Open the sector page →

Russia Regulations
SI 2019/855

UK Russia sanctions regime.

Oil price cap
SI 2022/1122

UK import ban and maritime services.

EU 833/2014
As amended

EU Russia energy and dual-use measures.

OFAC Part 587
31 CFR 587

US Russia-related sanctions.

EU CBAM
(EU) 2023/956

Embedded emissions on imports.

ISO 50001
2018

Energy management system.

ISO 14064-1
2018

Greenhouse gas quantification.

IPIECA · API
Current

Oil and gas operating practice.

ISO 9001 · 14001 · 45001
ISO

Quality, environment and safety.

Energy Act
2023 · UK

UK energy market and security.

SECR
SI 2018/1155

UK energy and carbon reporting.

TSCA
15 USC 2601

US industrial chemical controls.

NIS2
(EU) 2022/2555

Cyber risk and incident reporting.

CER Directive
(EU) 2022/2557

Resilience of critical entities.

NIS Regulations
SI 2018/506

UK essential services security.

Sector

Food & agriculture

Open the sector page →

GLOBALG.A.P. IFA
v6

Farm-level good agricultural practice.

GRASP
GLOBALG.A.P.

Social practice risk assessment.

BRCGS Food Safety
Issue 9

Manufacturer and packer certification.

BRCGS Ethical Trade
Issue 1

Responsible sourcing module.

SALSA
Current issue

UK smaller-supplier approval.

LEAF Marque
Current

Integrated farm management.

FSSC 22000
Version 6

Food safety system certification.

ISO 22000
2018

Food safety management system.

GFSI
Benchmarking

Recognition of food safety schemes.

Codex · HACCP
General Principles

Food hygiene baseline.

VACCP · TACCP
BRCGS

Food fraud and threat assessment.

General Food Law
Assimilated 178/2002

Traceability and withdrawal duties.

Food Safety Act
1990 · UK

Offences and due-diligence defence.

FSMA · FSVP
21 CFR 1 Subpart L

US foreign supplier verification.

EUDR
(EU) 2023/1115

Deforestation-free due diligence.

Environment Act
2021 · Sch. 17

UK forest-risk commodities.

AEO
HMRC

Authorised Economic Operator.

CTPAT
US CBP

US supply chain security.

Sector

Data centres & robotics

Open the sector page →

NIS2
(EU) 2022/2555

Cyber risk and incident reporting.

CER Directive
(EU) 2022/2557

Resilience of critical entities.

NIS Regulations
SI 2018/506

UK essential and digital services.

DORA
(EU) 2022/2554

ICT third-party risk for financial clients.

ISO 27001
2022

Information security management.

ISO 22301
2019

Business continuity.

ISO 50001
2018

Energy management.

EAR
15 CFR 730–774

Controls on advanced computing and dual-use items.

EU Batteries
(EU) 2023/1542

Due diligence on battery materials.

EU CRMA
(EU) 2024/1252

Strategic materials and supply concentration.

Dodd-Frank §1502
SEC Form SD

Conflict minerals in electronics.

OECD Guidance
Third edition

Responsible minerals benchmark.

RMAP
Responsible Minerals Initiative

Smelter and refiner assurance.

UFLPA
Pub. L. 117-78

Forced-labour presumption on imports.

EU Forced Labour
(EU) 2024/3015

EU ban on forced-labour products.

EU CBAM
(EU) 2023/956

Embedded emissions in steel and aluminium.

ISO 28000
2022

Supply chain security.

UK GDPR
DPA 2018

Personal data and breach reporting.

Sector

Cross-border trade & sanctions

Open the sector page →

SAMLA
2018 · UK

UK autonomous sanctions framework.

OFSI guidance
Current

Licensing, ownership and control.

OFSI enforcement
PACA 2017 s.146

Civil penalties for sanctions breaches.

OFAC
31 CFR Ch. V

SDN list and the 50% rule.

IEEPA
50 USC 1701

Statutory basis for US sanctions.

EU 833/2014
As amended

EU Russia restrictive measures.

Money Laundering Regs
2017 · Regs 18–35

CDD, EDD and PEPs.

FATF Recommendations
Recs 10 · 12 · 15 · 22

International CDD standard.

Bribery Act
2010 · s.7

Failure to prevent bribery.

ECCTA
2023 · Part 5

Failure to prevent fraud.

FCPA
15 USC 78dd-1

US anti-bribery.

ISO 37001
2016

Anti-bribery management.

ISO 28000
2022

Supply chain security.

AEO · CTPAT
HMRC · US CBP

Trusted trader programmes.

UK GDPR
DPA 2018

Data protection in diligence.

Sector

Fashion & consumer goods

Open the sector page →

SMETA
Sedex · 7.0

Ethical audit standard in fashion sourcing.

amfori BSCI
Current CoC

Buyer-led social compliance.

SA8000
2014

Social accountability certification.

WRAP
Current principles

Facility-level ethical production.

Sedex
Platform

Shared supplier ethical data.

Higg Index
Cascale · FEM / FSLM

Facility environmental and labour modules.

OEKO-TEX · GOTS
Current

Textile safety and organic content.

UFLPA
Pub. L. 117-78

US forced-labour import presumption.

CBP WROs
19 USC 1307

US forced-labour detentions.

EU Forced Labour
(EU) 2024/3015

EU ban on forced-labour products.

CSDDD
(EU) 2024/1760

Mandatory human-rights due diligence.

Modern Slavery Act
2015 · s.54

Annual supply chain statement.

EU GPSR
(EU) 2023/988

Consumer product safety and recall.

ISO 28000
2022

Supply chain security management.

Export controls

UK, EU and US regimes.

Open the export controls page →

Export Control Order
UK · 2008

The Military List, the dual-use schedule and trade controls, including UK persons abroad.

Financial sanctions
UK · OFSI · SAMLA 2018

UK designations, ownership and control, and the duty to report.

Dual-Use Regulation
EU · 2021/821

EU dual-use controls, catch-all provisions and the expectation of a compliance programme.

ITAR
US · 22 CFR 120–130

Defence articles, services and technical data on the Munitions List.

EAR
US · 15 CFR 730–774

Dual-use items, end-user and end-use controls, and the Entity List.

OFAC
US · 31 CFR Ch. V

US sanctions programmes, including the 50 per cent rule.

Supplier assurance
DFARS · NIST 800-171 · CMMC · JSP 440 · Def Stan 05-138 · AQAP

The cyber and quality regimes that travel with a defence contract.

Management systems

Frameworks across practices.

We do not issue certificates; we prepare you to obtain and keep them.

ISO 9001
ISO 27001
ISO 14001
ISO 37001
ISO 37301
ISO 28000
ISO 20400
Procurement Act
Cyber Essentials
UK GDPR
NIST CSF
AQAP 2110
Sources

Where we look.

The official procurement and trade sources we draw on.

SAM.gov
US Federal

Federal opportunity data, daily.

DLA DIBBS
US defence

Item-level defence supply RFQs.

UK MOD
Defence Sourcing Portal

MOD advertised requirements.

Find a Tender
United Kingdom

UK above-threshold notices.

NATO NSPA
Multinational

Support, logistics and equipment.

NATO NCIA
Multinational

ICT and C4ISR procurement.

OCCAR
Multinational

Armament programmes.

EU TED
European Union

EU public procurement.

DASA
United Kingdom

Defence innovation competitions.

DoD SBIR/STTR
United States

Defence R&D for small business.

AFWERX · SOFWERX
United States

Service innovation challenges.

DPRTE
United Kingdom

Defence supply chain directory.

Prime portals
UK · US · Global

BAE Systems · Babcock · Leonardo · Thales · RTX · Lockheed Martin · Northrop Grumman · General Dynamics

Next step

Have a question with a date on it?

A bid, an audit, a counterparty or a contract. Send it over and we reply the same working day with scope, fee and timeline.

Container port elevation A densely detailed front-elevation line drawing of a container port in brass on deep navy. A large container ship with a raked bow, hull plating, draft marks and an accommodation block carries eleven bays of stacked containers. Two ship-to-shore gantry cranes stand on the quay: one with its latticed boom lowered over the ship, a trolley and a container suspended on the spreader, the other with its boom raised. To the right a rail-mounted gantry spans stacked yard containers. Water is drawn as layered wave lines with reflections; the quay carries crane rails, bollards, fenders and mooring lines.
Container terminal · Elevation