In this episode of Corruption, Crime and Compliance, Michael Volkov breaks down the State Department’s $36 million settlement with BAE Systems, Inc. over more than 100 alleged violations of the International Traffic in Arms Regulations and Arms Export Control Act spanning 2019 through March 2025, including unlicensed technical data exports to China, Canada, the U.K., and Germany, unauthorized defense services in Italy, France, and Indonesia, and a shipping mix-up that sent a fully controlled engine component to Switzerland in place of a properly licensed part. Despite BAE self-disclosing the vast majority of violations and cooperating fully with DDTC’s investigation, avoiding debarment as a result, Volkov highlights the agency’s pointed finding that BAE’s compliance program lacked the integration to translate earlier corrective actions into lasting fixes, with violations continuing to recur even after a 2021 internal audit prompted real remediation efforts. The episode walks through specific fact patterns showing how insufficient training, high compliance staff turnover, inadequate export management software, and reliance on junior personnel for high-risk judgment calls combined to produce a sprawling pattern of violations, and closes with practical lessons for any export-controlled company: build control warnings directly into operational systems, treat compliance staff turnover as an enterprise risk, route licensing judgment calls to genuinely experienced personnel, extend verification controls all the way to the shipping dock, and ensure remediation after an audit addresses root causes rather than just visible symptoms.