We’ve had the same internal "sanctions policy" for about five years, but with everything changing so fast in the global markets, I’m worried it’s outdated. Our current policy is basically just a list of countries we don't trade with, but I’ve been hearing that the Treasury is now focusing more on "indirect" links and specific individuals regardless of where they live. Does anyone have advice on how to modernize a compliance program? We need a strategy that actually works for a modern business and doesn't just check a box. Are there experts who help draft these things?