Sanctions screening governance: are firms measuring outcomes now?

TL;DR: The FCA’s 2026 multi-firm sanctions review shifts expectations from having screening inputs in place to proving they work, with recurring failures in due diligence, alert handling, transaction screening and vendor reliance treated as structural control gaps, according to Alloy. The new standard is outcome-based governance, where firms must explain decisions, document calibration and show that breaches are not repeat events.

Editorial analysis by NHI Mgmt Group, based on content published by Alloy: “What the FCA's 2026 sanctions review is really telling you”.

Key questions

Q: What breaks when sanctions screening is treated as a static control?

A: Static screening breaks when firms assume list matching alone can detect sanctions risk.

Q: Why does vendor reliance create sanctions compliance risk?

A: Vendor reliance becomes risky when the firm cannot explain how data is calibrated, how alerts are triaged or why decisions were closed.

Q: What do firms get wrong about sanctions breaches and remediation?

A: They often treat a breach as a one-off event rather than a symptom of a control gap.

Practitioner guidance

• Document control effectiveness, not just control existence Map each sanctions process to observable outcomes such as alert quality, escalation quality and decision consistency.
• Retain ownership over outsourced screening decisions Where vendors or group entities support screening, keep internal records of configuration rationale, alert thresholds, data update expectations and escalation authority so accountability remains with the regulated firm.
• Test for sanctions evasion scenarios Use scenario-based reviews for proxies, layered ownership and indirect links to designated persons, and verify that transaction monitoring plus screening together can surface the pattern.

Bottom line: The review frames sanctions breaches as recurring control failures rather than isolated mistakes, which changes how firms should investigate and remediate them.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →