Insights / Cross-border
What enterprise risk and intelligence means for a middle-market company
Large corporations have compliance departments. Suppliers and growth companies doing business in Mexico usually do not. What the gap looks like and how to close it.
By Nick York. October 6, 2026. 5 min read
A Fortune 500 company doing business in Mexico has a compliance team, a security team and a government relations function. The supplier to that company usually has none of those, even when it is big enough and sophisticated enough to carry the same exposure. That gap is what we mean by enterprise risk and intelligence.
What it covers
It has a legal side, mostly compliance. It has a market side: intelligence about where you are operating, who you are dealing with and what is changing. And it has an operational side: the practical work of establishing and running a business in a foreign jurisdiction with the right partners.
- Regulatory issues in cross-border transactions, including rules that affect who you can do business with and how you vet them.
- Supply chain sourcing, vetting and security across ports of entry and logistics providers.
- Site selection, incentives, human resources and technology when you set up an operation in Mexico.
- Government relations and market insight so decisions are made on current information.
It can be very specific or very broad
Sometimes the request is narrow: keep us in compliance with a particular set of requirements. Sometimes it is the whole thing: we need to establish an operation in Monterrey and we need technology people, HR people, business connections and financing. Both are the same discipline applied at different scales.
Why the background of the team matters
Risk in a foreign market is not learned from a checklist. Our enterprise risk practice is led by people who spent years in Mexican customs and in corporate security for multinational manufacturers, working operationally with agencies on both sides of the border. They have seen how legitimate supply chains get exposed and how companies protect them.
That is paired with bicultural advisors who have launched and run companies in both countries and know the business landscape in each, not only the law.
Where to start
If you are a supplier, operator or growth company with activity in Mexico or Latin America, start with a candid review of what you know about your partners, your supply chain and the rules that apply to you. The questions you cannot answer are the agenda. We are glad to work through them with you.
