To develop an effective sanctions compliance program, an institution should consider what areas of its business are at a higher risk of providing resources or services to a sanctions target (e.g., customer types, jurisdictions, business lines, sales channels).  Lower-risk areas, however, should not be ignored.  It is important for risk assessments to be regularly updated, particularly when an institution expands into new jurisdictions or product offerings.