Insights · Enterprise Risk & Intelligence
Operating globally is now a legal question, a security question and a strategic question
Cross-border exposure arrives as one converged problem. Here is what a middle-market company should be able to see before it becomes an incident.
By Nick York, Founder. October 6, 2026. 5 min read. About the practice
A supplier to a large manufacturer opens a plant in Mexico, or adds a Mexican supplier to its chain, or wins a customer whose goods cross the border twice before they are sold. From the first day, the company carries exposure it did not carry before: in its contracts, on its routes, in its people, and in the rules of a jurisdiction it does not know well.
The conventional response is to hire a lawyer for the contracts, a security firm for the sites and a consultant for the market. Each one capable. None of them accountable for the whole thing. The exposure lives in the gaps between them.
Three questions from one event
- The legal question: compliance across two regulatory systems, contracts enforceable where the goods and the people actually are, and obligations that did not apply a year ago.
- The security question: the physical security of people, plants, warehouses and routes, and the integrity of a supply chain that can be used by people who are not your customers.
- The strategic question: whether the operation, the partner and the location are the right ones, and what it would cost to be wrong.
These are not three problems. They are one problem seen from three sides, and a decision taken on one side changes the other two. A supplier vetted for price but not for provenance is a legal exposure and a security exposure at once.
What a company should be able to see
The useful first step is not a program. It is a baseline: a map of where the exposure actually is, across all three questions, before it becomes an incident. From there the work follows a sequence we use across the firm. Illuminate what is actually true. Interpret what it means and what happens next. Insulate the business with controls, policies and playbooks. Institutionalize the monitoring and governance that make it hold.
We write about Mexico the way a partner writes about a partner. The country is where our team has run operations, held permits, met payroll and built institutional relationships. Exposure is a feature of operating anywhere; what matters is whether you can see it.
“Keep operating across borders with exposure you can see, a program you can defend, and one team that answers the legal, security and strategic questions together.”
If your company has operations, suppliers or customers across the border and nobody has drawn that map, an Exposure Diagnostic is where to start.
