2025 US National Security Compliance Risk and Readiness Report | Guide | Eversheds Sutherland

image of cables connected to computer serversimage of cables connected to computer servers

2025 US National Security Compliance Risk and Readiness Report

Cybersecurity, Fraud and Export Control Gaps Expose Corporate Vulnerabilities

October 01, 2025

Global
Global
Global
US companies are facing a national security compliance minefield as they confront a host of evolving issues, from trade wars to military conflicts to AI-enabled cyberattacks. Challenges include enhanced export controls, foreign investment reviews and anti-money laundering efforts—along with stepped-up enforcement by federal regulators

To identify the most urgent compliance risks and how organizations are responding, Eversheds Sutherland surveyed more than 100 executives in-house legal leaders with direct involvement or knowledge of their company’s national security practices in May and June 2025. Respondents came from US-based companies across a dozen industries, including financial services, manufacturing, healthcare, technology and energy.

The findings reveal critical gaps in both preparedness and alignment among key decision makers on compliance issues such as cybersecurity and data protection, fraud prevention, sanctions and export controls, and supply chain security. Notably, a third or more are not fully prepared to address key national security compliance risks facing their organization—despite the substantial legal, financial and operational consequences involved.

The materials on the Eversheds Sutherland website are for general information purposes only and do not constitute legal advice. While reasonable care is taken to ensure accuracy, the materials may not reflect the most current legal developments. Eversheds Sutherland disclaims liability for actions taken based on the materials. Always consult a qualified lawyer for specific legal matters. To view the full disclaimer, see our Terms and Conditions or Disclaimer section in the footer. Eversheds Sutherland is a provider of legal and other services operating through various separate and distinct legal entities. For further information about these entities and Eversheds Sutherlands' structure please see the Legal Notice page of this website.

Services

Industries

Key contacts

michaelbahar@eversheds-sutherland.com

Michael Bahar

Partner

Washington, DC, United States

rachelreid@eversheds-sutherland.com

Rachel M. Reid

Partner

Atlanta, United States

blakeroberts@eversheds-sutherland.com

Blake Roberts

Partner

Washington, DC, United States

Latest Insights

Latest News

Latest Events

skyscrapers

legal updates

October 07, 2026

EU: Proposed KIDS Act Targets Online Child Safety

Contemporary office buildings courtyard modern architecture glass facade

legal updates

October 07, 2026

Commercially Connected Shorts - 7 October 2026

konexo-data-and-cyber-consulting-her

legal updates

October 07, 2026

Legal Alert | Public Procurement and the pre-emption right for real estate...

ma-2026-report-intro

guides and reports

October 07, 2026

Technology, AI and the changing legal landscape of M&A

© Eversheds Sutherland 2026. All rights reserved. Eversheds Sutherland is a provider of legal and other services operating through various separate and distinct legal entities. For further information about these entities and Eversheds Sutherlands' structure please see the Legal Notice page of this website.

Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client. For further information about these Eversheds Sutherland Entities and Eversheds Sutherlands’ structure please see the Legal Notices page of this website.