The engagement
North America Compliance Exposure Review
A four-week, fixed-fee assessment of where your US, Canadian and Mexican sites stand against the compliance dates that have moved.
The questions it answers
- Are we ready for 20 November at every site, and can we evidence it site by site?
- Where do our Mexican sites fall short of NOM-017-STPS-2024, now that it is enforceable?
- What else is dated and approaching that we are not currently tracking?
What you receive
- An instrument-level legal register for each site — every applicable instrument named individually, with an owner, an evidence location and a review date.
- A gap register, rated by severity, with a named owner against each finding.
- An exposure summary stating what is out of compliance and what it places at risk.
- A prioritized remediation roadmap with the effort estimated for each item.
- An executive readout, with the deck provided.
A register built from subjects will show everything as covered — you have a safety committee, you have occupational health, you have machine guarding. A register built from instruments shows what the regulator will actually ask for. The difference between the two is where the exposure lives, and it is invisible until someone builds the second one.
Scope
| Package | Sites | Countries | Duration |
|---|---|---|---|
| Focused | up to 3 | 1 | 3 weeks |
| Standard | 4 to 6 | up to 2 | 4 weeks |
| Enterprise | 7 to 12 | up to 3 | 5 weeks |
How it is quoted
A fixed fee, confirmed in writing before any work begins, with no hourly billing and no variation unless you change the scope. Three things determine it: the number of sites, the countries they sit in, and which standards and regulatory instruments are in play.
Delivered remotely, with on-site verification available as a priced addition. Deliverables are provided in English, Spanish or Portuguese at no additional charge. Payment is 50 percent on purchase order and 50 percent at readout. Brazil and South America are covered on request.
Not included: remediation work, permit or license applications, training delivery, or legal opinion.
How it runs
Kickoff and data
A structured data request, then review of permits and licenses, the existing legal register, prior audit reports, open corrective actions, and organizational charts where structural obligations apply.
Regulatory mapping and interviews
Applicable instruments identified site by site and named individually. Remote interviews with each site EHS lead. This is the part that is not delegated, and it is why the regulation is read in the original language rather than in translated summary.
Report and readout
Registers, findings, exposure summary and remediation roadmap, followed by an executive session with your team.
What happens next is your decision
The roadmap is a genuine deliverable, including where the honest answer is that less needs doing than feared. If remediation is warranted, a proposal follows within two weeks, priced from the roadmap. If it is not, the review has told you that, which is worth knowing.