De-risking defence: where diversification meets export controls

Diversification is not automatically synonymous with resilience.

Conventional logic remains: broaden our supplier base, establish manufacturing redundancy, enter new markets, and reduce dependence on any single jurisdiction or partner.

But geopolitical fragmentation has changed things.

Russia’s invasion of Ukraine, instability across the Red Sea, US–China technology competition, sanctions, and critical mineral dependencies have made diversification more difficult.

“Diversification doesn’t inherently remove risk exposure. It determines which risks a business will face next.”

Every new relationship introduces questions around ownership, licensing, sanctions, technical data, end use, and onward transfer. Leadership teams must decide which new dependencies are acceptable, and whether the organisation can control them.

What successful leadership teams do

Diversification decisions should tell the board what the regulatory consequences are. Leaders must have visibility into:

• Which concentration risk are we trying to reduce?
• What new regulatory or geopolitical exposure replaces it?
• Does the relationship introduce controlled technology?
• Who owns the supplier, and who can access the capability?
• Can the arrangement support every intended market and end user?
• What happens if permissions tighten or access is withdrawn?
• Is there a viable substitute, recovery plan, or exit route?

Before approving any diversification, organisations need a joined-up assessment of commercial value, regulatory feasibility, strategic alignment, and recoverability. This prevents today’s expansion decisions from becoming tomorrow’s constraints.

Resilience is selective

Rather than maximum diversification, the boardroom objective must be credible diversification across relationships that are understood, sustainable, and trustworthy.

A supply chain spanning ten jurisdictions is not necessarily more resilient than one spanning three. Breadth only adds resilience when you understand supplier ownership, jurisdictional influence, controlled technology, information flows, licensing restrictions, and whether critical capability can realistically be replaced.

This trend is visible in Europe’s accelerating defence technology market.

The war in Ukraine has accelerated the development of drones, autonomous systems, software-defined weapons, and low-cost interceptors. These capabilities are produced through distributed networks and adapted rapidly to battlefield conditions – but their modularity also complicates component origin, technical-data sharing, end-use controls, and licensing.

“NATO and the UK explicitly treat defence-critical supply chain resilience as part of military readiness. This includes the ability to sustain production and recover quickly when sources are disrupted.”

In short, a longer supplier list is not a resilience strategy. For boardrooms, diversification should be measured by the amount of recoverable, governable capability it adds. 

Every new relationship redraws the regulatory perimeter

Commercial decisions and regulatory consequences cannot be separated. Every new supplier, market, engineering partner, cloud environment, or production location changes an organisation’s exposure. For instance: 

• A defence manufacturer may replace a Chinese component with an American alternative, reducing one geopolitical dependency while introducing US re-export controls.
• A business may enter an Australian programme through AUKUS, gaining access to a trusted allied market while inheriting restrictions around technical data, authorised users, end use, and onward transfer.

“Every new route to market redraws the compliance perimeter.”

The approximately $252 million US settlement with Applied Materials in February 2026 illustrates the scale of that exposure. The Bureau of Industry and Security alleged that US semiconductor manufacturing equipment had been illegally exported to China. 

The lesson? Subsidiaries, distributors, and cross-border operating structures can obscure accountability without removing it.

Leadership teams need regulatory modelling layered over commercial decisions. Before approving a new relationship, they must understand the permissions, restrictions, and future dependencies that come with it.

Allied does not mean unrestricted

Trusted alliances reduce friction. They do not remove control.

AUKUS, NATO cooperation, and allied industrial partnerships create routes to shared development and production. But they do not guarantee unrestricted freedom to modify, transfer, export, or commercialise capability.

A platform may be domestically owned while depending on foreign-controlled technology. An allied component may remain subject to re-export permission. Shared innovation may still involve tightly governed access to data and know-how. This is the sovereignty paradox.

“Allied access is still access on terms.”

Defence leaders must therefore distinguish between:

• Ownership and control
• Access and autonomy
• Collaboration and freedom of action

Alliance access should be treated as an operational condition to manage, not a permanent permission to assume.

Diversification fails when visibility falls behind growth

Diversification becomes dangerous when organisations expand activity faster than they build strategic visibility. Common failure points include:

1. Suppliers onboarded without ownership checks
2. Controlled technology shared before classification
3. Market entry approved before licensing feasibility is established
4. Engineering partnerships creating uncontrolled technical-data access
5. Products incorporating components that restrict onward sale

US controls on advanced semiconductors show how quickly commercial assumptions can change. Repeated policy revisions have altered which products, customers, and transactions are licensable, leaving business viability partly dependent on decisions outside the organisation’s control.

“The most expensive compliance problem is a growth strategy that cannot legally be executed. The boardroom risk is investing in a supplier, technology, facility, or market that becomes unusable.”

The governance dividend

Organisational discipline gives firms greater freedom and confidence to expand. The governance dividend is the commercial value created when strong governance expands strategic freedom rather than constraining it.

• Evaluate jurisdictions and licence implications early
• Classify technology before sharing it
• Approve trusted partners and end users confidently
• Adapt quickly when regulation or political alignment changes

This strategic discipline enables faster market entry, more credible bids, stronger customer confidence, clearer supplier choices, and fewer stranded investments.

“The governance dividend is the freedom to grow without losing control of the business you are building.”

Diversification with confidence

“Resilience is not having more options. It is knowing which options remain viable when the world changes.”

Defence growth has become geopolitical. Governments want greater industrial capacity; allied nations want shared production; and businesses want broader markets, resilient suppliers, and faster routes to capability. Export controls, sanctions, and strategic policy increasingly determine which routes remain viable.

In the modern defence sector, understanding which dependencies you are removing, which ones you are creating, and whether the resulting model remains commercially and strategically controllable is how firms create competitive advantage.

Those that will  grow will be those that understand the strategic consequences of every new dependency they create.