{"id":5907,"date":"2025-08-06T05:04:04","date_gmt":"2025-08-06T05:04:04","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2025\/08\/06\/its-time-for-the-semiconductor-industry-to-step-up-html\/"},"modified":"2025-08-06T05:04:04","modified_gmt":"2025-08-06T05:04:04","slug":"its-time-for-the-semiconductor-industry-to-step-up-html","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2025\/08\/06\/its-time-for-the-semiconductor-industry-to-step-up-html\/","title":{"rendered":"The Semiconductor Industry and Regulatory Compliance"},"content":{"rendered":"\n<div>The Semiconductor Industry and Regulatory Compliance<\/div>\n<p> \t<BR><br \/>\n<BR><\/BR><br \/>\n    <!-- no image --><br \/>\n \t<BR><br \/>\n<BR><\/BR><\/p>\n<div>\n<p>Earlier this week,<a href=\"https:\/\/www.ft.com\/content\/a13ba438-3b43-46dd-b332-4b81b3644da0\"> the Trump administration<\/a> narrowed <a href=\"https:\/\/nationalinterest.org\/blog\/techland\/export-controls-arent-enough-to-beat-chinas-ai\">export controls<\/a> on advanced semiconductors ahead of US-China trade negotiations. The administration is increasingly relying on export licenses to allow American semiconductor firms to sell their products to Chinese customers, while keeping the most powerful of them out of the hands of our military adversaries. These are the chips that power the artificial intelligence research fueling China\u2019s technological rise, as well as the advanced military equipment underpinning Russia\u2019s invasion of Ukraine.<\/p>\n<p>The US government relies on private-sector firms to implement those <a href=\"https:\/\/nationalinterest.org\/blog\/techland\/digital-borders-biden-administrations-final-ai-rule-214416\">export controls<\/a>. It\u2019s not working. US-manufactured semiconductors have been<a href=\"https:\/\/www.hsgac.senate.gov\/wp-content\/uploads\/09.10.2024-Majority-Staff-Report-The-U.S.-Technology-Fueling-Russias-War-in-Ukraine.pdf\"> found in Russian weapons<\/a>. And China is<a href=\"https:\/\/www.wsj.com\/tech\/the-underground-network-sneaking-nvidia-chips-into-china-f733aaa6\"> skirting American export controls<\/a> to accelerate AI research and development, with<a href=\"https:\/\/media.defense.gov\/2024\/Dec\/18\/2003615520\/-1\/-1\/0\/MILITARY-AND-SECURITY-DEVELOPMENTS-INVOLVING-THE-PEOPLES-REPUBLIC-OF-CHINA-2024.PDF\"> the explicit goal of enhancing its military capabilities<\/a>.<\/p>\n<p>American semiconductor firms are unwilling or unable to restrict the flow of semiconductors. Instead of investing in effective compliance mechanisms, these firms have consistently prioritized their bottom lines\u2014a rational decision, given the fundamentally risky nature of the semiconductor industry.<\/p>\n<p>We can\u2019t afford to wait for semiconductor firms to catch up gradually. To create a robust regulatory environment in the semiconductor industry, both the US government and chip companies must take clear and decisive actions today and consistently over time.<\/p>\n<p>Consider the <a href=\"https:\/\/nationalinterest.org\/feature\/how-capital-markets-can-revive-the-defense-industrial-base\">financial services industry<\/a>. Those companies are also heavily regulated, implementing US government regulations ranging from international sanctions to anti-money laundering. For decades, these companies have invested heavily in compliance technology. Large banks maintain teams of compliance employees, often<a href=\"https:\/\/www.reuters.com\/business\/finance\/key-citis-regulatory-woes-staff-need-skills-enhancement-2024-10-15\/\"> numbering in the thousands<\/a>.<\/p>\n<p>The companies understand that by entering the financial services industry,<a href=\"https:\/\/news.bloomberglaw.com\/mergers-and-acquisitions\/matt-levines-money-stuff-td-was-convenient-for-criminals\"> they assume the responsibility<\/a> to verify their customers\u2019 identities and activities, refuse services to those engaged in criminal activity, and report certain activities to the authorities.<a href=\"https:\/\/www.bruegel.org\/system\/files\/2024-05\/WP%2010%202024_1.pdf\"> They take these obligations seriously<\/a> because they know they will face massive fines when they fail. Across the financial sector, the Securities and Exchange Commission imposed <a href=\"https:\/\/www.sec.gov\/newsroom\/press-releases\/2022-206\">a whopping $6.4 billion in penalties<\/a> in 2022. For example, TD Bank recently paid almost <a href=\"https:\/\/www.justice.gov\/opa\/pr\/td-bank-pleads-guilty-bank-secrecy-act-and-money-laundering-conspiracy-violations-18b\">$2 billion in penalties<\/a> because of its ineffective anti-money laundering efforts<\/p>\n<p>An<a href=\"https:\/\/www.federalregister.gov\/documents\/2025\/01\/15\/2025-00636\/framework-for-artificial-intelligence-diffusion\"> executive order<\/a> issued earlier this year applied a similar regulatory model to potential \u201cknow your customer\u201d obligations for certain cloud service providers.<\/p>\n<p>If Trump\u2019s new license-focused export controls are to be effective, the administration must increase the penalties for noncompliance. The Commerce Department\u2019s Bureau of Industry and Security (BIS) needs to more aggressively enforce its regulations by sharply increasing penalties for export control violations.<\/p>\n<p>BIS has been working to improve enforcement, as evidenced by this week\u2019s news of a<a href=\"https:\/\/www.bis.gov\/press-release\/cadence-design-systems-pay-95-million-penalty-bis-unauthorized-exports-chinese-entities-tied-development\"> $95 million penalty<\/a> against Cadence Design Systems for violating export controls on its chip design technology. Unfortunately, BIS<a href=\"https:\/\/www.hsgac.senate.gov\/wp-content\/uploads\/The-U.S.-Technology-Fueling-Russias-War-in-Ukraine-Examing-BISs-Enforcement-of-Semiconductor-Export-Controls.pdf\"> lacks the people, technology, and funding<\/a> to enforce these controls across the board.<\/p>\n<p>The Trump administration should also use its bully pulpit, publicly naming companies that break the rules and encouraging American firms and consumers to do business elsewhere. Regulatory threats and bad publicity are the only ways to force the semiconductor industry to take export control regulations seriously and invest in compliance.<\/p>\n<p>With those threats in place, American semiconductor firms must accept their obligation to comply with regulations and cooperate. They need to invest in strengthening their compliance teams and conduct proactive audits of their subsidiaries, their customers, and their customers\u2019 customers.<\/p>\n<p>Firms should elevate risk and compliance voices onto their executive leadership teams, similar to the chief risk officer role found in banks. Senior leaders need to devote their time to regular progress reviews focused on meaningful, proactive compliance with export controls and other critical regulations, thereby leading their organizations to make compliance a priority.<\/p>\n<p>As the world becomes increasingly dangerous and America\u2019s adversaries become more emboldened, we need to maintain stronger control over our supply of critical semiconductors. If Russia and China are allowed unfettered access to advanced American chips for their <a href=\"https:\/\/nationalinterest.org\/blog\/techland\/jd-vance-unveils-americas-ai-doctrine\">AI efforts<\/a> and military equipment, we risk losing the military advantage and our ability to deter conflicts worldwide. The geopolitical importance of semiconductors will only increase as the world becomes more dangerous and more reliant on advanced technologies\u2014American security depends on limiting their flow.<\/p>\n<p><em>This essay was written with Andrew Kidd and Celine Lee, and originally appeared in <a href=\"https:\/\/nationalinterest.org\/blog\/techland\/its-time-for-the-semiconductor-industry-to-step-up\">The National Interest<\/a>.<\/em><\/p>\n<\/div>\n<p> \t<BR><br \/>\n <BR><\/BR><br \/>\n    Bruce Schneier<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n<a href=\"https:\/\/www.schneier.com\/blog\/archives\/2025\/08\/its-time-for-the-semiconductor-industry-to-step-up.html\">Go to bruce schneier<\/a><br \/>\n \t<BR><br \/>\n <BR><\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Semiconductor Industry and Regulatory Compliance Earlier this week, the Trump administration narrowed export controls on advanced semiconductors ahead of US-China trade negotiations. The administration is increasingly relying on export licenses to allow American semiconductor firms to sell their products to Chinese customers, while keeping the most powerful of them out of the hands of [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[57,624,601,1],"tags":[87],"class_list":["post-5907","post","type-post","status-publish","format-standard","hentry","category-bruce-schneier","category-laws","category-regulation","category-uncategorized","tag-bruce-schneier"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/5907"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=5907"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/5907\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=5907"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=5907"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=5907"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}