Markets do not exist in a vacuum. Licenses, approvals, data rules, tariffs, reimbursement schedules, climate policy, labor law, and platform policies can accelerate or derail a value‑creation plan—sometimes overnight. A commercially focused diligence must therefore translate the external rulebook into numbers: what you are allowed to sell, to whom, at what price, under what conditions, with what penalties for failure, and how those constraints evolve over the hold period. This chapter gives you a practical toolkit to (i) map regulatory exposure and timing gates, (ii) assess ESG posture where it affects access, cost, and brand, and (iii) frame macro and policy scenarios that move revenue, margin, and cash. The outputs should slot directly into valuation ranges, term‑sheet protections, and a 90‑day post‑close plan.
11.1 Regulatory Mapping Template
Regulatory mapping converts a thicket of rules into a short, auditable list of approvals, obligations, and risks that matter for the deal. The target state is simple: for each material segment and route‑to‑market, you can point to (a) the licenses and certifications required to operate, (b) the constraints that shape price, product, promotion, and data, (c) the penalties and probabilities of enforcement, and (d) the time and cost to close gaps. Done right, this work eliminates “unknown unknowns,” de‑risks closing, and prevents heroics in the plan.
Scope and materiality—set the guardrails first
Write one sentence that freezes scope, period, and segmentation: “Regulatory exposures for US hospital segment, EMEA enterprise SaaS, and NA retail channel; last 24 months plus 18‑month forward watchlist.” Apply the same segmentation used across the diligence (customer/job, size band, channel, region, product family). Define materiality thresholds up front (e.g., ≥2% revenue impact, ≥100 bps CM2 swing, ≥8‑week timing gate, or non‑insurable penalties).
A pragmatic taxonomy (cover these domains and drop what doesn’t apply)
- Sector approvals & product regulation: Licenses, device/drug approvals, product standards and labeling, equipment certifications, professional accreditations.
- Competition/antitrust & transaction control: Pre‑closing filings and gun‑jumping limits; exclusivity/MFN clauses; platform gatekeeper rules.
- Privacy, data, AI & cybersecurity: Personal data handling, cross‑border transfers, security obligations, algorithmic accountability and model transparency where applicable.
- Trade, sanctions & export controls: Denied‑party screening, tariff/FTA eligibility, export classifications and license needs, country‑of‑origin claims.
- Environment, health & safety (EHS): Permits, hazardous materials, producer responsibility (packaging/WEEE/battery), climate and emissions disclosures.
- Payments & financial conduct: Money transmission, KYC/AML, consumer credit/BNPL, interchange and surcharge rules.
- Employment & labor: Worker classification, wage & hour, collective bargaining, workplace safety; staffing and subcontracting limits for the public sector.
- Tax & marketplace obligations: Sales/use tax nexus, VAT/GST registrations, marketplace facilitator rules, digital services taxes.
- Public sector procurement: Contract vehicles, set‑aside eligibility, security clearances, debarment, gift/ethics rules.
- Advertising & claims: Health/financial/green claims, testimonials, endorsements, UGC moderation, sweepstakes.
- Healthcare/insurance specific (if applicable): Reimbursement codes and coverage, provider credentialing, prior authorization timeliness.
- Platform & channel policies (quasi‑regulatory): Marketplace/app‑store rules, take‑rate clauses, data access, parity/MAP, product safety compliance.
Evidence pack—request once, reuse everywhere
- Licenses, permits, certifications, filings, and correspondence with authorities; approval letters and scope.
- Contracts and ToS: customer, channel, marketplace, data processors, cloud/service providers, payment processors.
- Policies and controls: privacy notices, DPAs, ISMS/SOC2/ISO certifications, risk registers, change‑control, incident logs, complaint registers, CAPA logs.
- Product & labeling dossiers; test reports; clinical or performance evidence (where applicable).
- Screening logs (sanctions/export), tariff classifications, broker entries, certificates of origin, bills of material for regulated content.
- Employment and contractor policies; timekeeping/overtime reports (aggregated); safety incident records.
- Tax registrations and returns (summary); marketplace facilitator status confirmations.
- Board and S&OP packs that mention regulation, approvals, product withdrawals, or policy changes.
Step‑by‑step mapping (built for a two‑ to four‑week diligence sprint)
- Fix applicability by segment. For each domain in the taxonomy, state “applicable / not applicable / uncertain” by segment and channel. Where uncertain, run a single clarifying call with counsel or a subject‑matter advisor; do not over‑engineer.
- Inventory current approvals and obligations. Build a register of what exists today—licenses, certifications, filings, tariffs/FTAs utilized, privacy program artifacts, DPAs, controls, and channel/platform policy acceptances. Include owner and renewal dates.
- Identify triggers and timing gates. Flag change‑of‑control clauses, anti‑assignment provisions, pre‑market approvals, clinical or validation requirements, prior authorization SLAs, HSR or other transaction notifications, and public‑sector innovations. Attach a conservative lead time to each gate.
- Quantify economic constraints. Where rules shape economics, turn them into toggles: price caps, take‑rate limits, reimbursement fee schedules, cross‑border data limits (latency or regionalization costs), packaging EPR fees, duty rates, or marketplace penalties.
- Score enforcement exposure. For each obligation, compute a simple Risk = Impact × Likelihood score with written anchors:
- Impact (1–5): immaterial → existential (license loss, debarment).
- Likelihood (1–5): remote → frequent (based on history, audits, complaint volume, inspection cadence).
Express the top items as Revenue‑at‑Risk and Margin‑at‑Risk ranges with assumptions.
- Locate gaps and remediation paths. For each high‑risk item, state the corrective action, time, cost, owner, and dependencies (e.g., supplier certification, system changes, product reformulation). Distinguish close‑before‑close vs. post‑close actions.
- Translate to the model and term sheet. Turn the map into numbers (timing gates, CM2 drag, price caps) and protections (conditions precedent, special indemnities, escrows, covenants, earnouts). Keep the linkage on the page.
- Set the watchlist. Capture pending or proposed changes likely to land inside the hold period (e.g., tariff resets, privacy/AI obligations, retailer policy shifts, EPR expansions). Record expected timing and probability and wire to early‑warning indicators.
Regulatory Mapping Canvas (copy one per segment × domain)
- Scope & owner: segment, channel, region, product family; internal owner; counsel SME.
- Requirement: the obligation or approval in plain English.
- Authority / source: regulator or platform; reference to the controlling rule or policy.
- Applicability & triggers: when it applies (thresholds, activities, change‑of‑control).
- Evidence on file: license numbers, certificates, contracts, policies, audit reports.
- Status & timing: compliant / gap / pending; renewal dates; lead time to remedy or obtain.
- Economic effect: price cap, fee, duty, surcharge, take‑rate, SLA/credit ladder; CM2 impact.
- Enforcement history: inspections, penalties, complaints; probability band.
- Risk rating & range: Impact 1–5 × Likelihood 1–5; revenue/margin‑at‑risk range.
- Mitigations & dependencies: specific actions, costs, critical path items.
- Model hooks & terms: toggles you changed (price, CM2, timing); proposed CPs/indemnities/escrows.
- Confidence & sources: H/M/L; link to artifacts; verifier initials.
Clean‑team and gun‑jumping guardrails (do not skip)
- Keep customer‑specific pricing, pipeline, or strategic plans behind clean‑team walls.
- No pre‑close coordination on market allocation, pricing, discounts, or future bids.
- Share only aggregated compliance statistics outside the ring‑fence; avoid competitively sensitive cross‑company benchmarking without counsel’s sign‑off.
What to produce (decision‑grade pack, not a binder)
- A one‑page heatmap of the top 10 regulatory exposures by segment with Impact × Likelihood scores and $ ranges.
- A Closing Conditions sheet listing filings/approvals, responsible party, dates, and critical path.
- A Regulatory Economics bridge converting rules into price caps, fees, and CM2 effects.
- A Special Terms memo: indemnities, escrows, RWI carve‑outs, covenants (e.g., indexation, inventory or service SLAs, privacy program milestones).
- A 90‑day Remediation plan with owners, costs, and outcome metrics.
Common exposure patterns—and how to quantify them without drama
- Data & AI obligations: Treat privacy/AI rules as cost and latency toggles (data residency, logging, explainability, human‑in‑the‑loop). Model: incremental hosting/compliance cost per account, longer implementation time, feature flag constraints in regulated segments.
- Trade/sanctions/export: Convert classification and routing to landed cost; add denied‑party screening coverage and false‑positive handling time to CTS; scenario a tariff/take‑rate shock.
- Healthcare reimbursement: Price is a function of code coverage and payer policy. Model scenario bands tied to coverage decisions and authorization SLAs; include credentialing lead times as timing gates.
- EPR/packaging/product content: Translate per‑unit fees and redesign costs into CM2 drag; include labeling lag as a timing gate for new SKUs.
- Marketplace/app‑store policy: Treat take‑rate and paid placement as quasi‑regulatory. Model penalty ladders for policy breaches (e.g., late shipment rate) and delist risk.
- Employment/labor: Reclassifying contractors or missed overtime creates retroactive liabilities; model accruals and forward‑cost step‑ups by geography; track unionization thresholds in the public sector.
Term‑sheet levers linked to the map
- Conditions precedent (CPs): required filings/clearances, license transfers, consents/novations, approval letters for SKUs or indications, data‑transfer mechanism in place.
- Special indemnities/escrows: unresolved investigations, back taxes, labor misclassification, privacy/security incidents, export or sanctions violations.
- Covenants: implement indexation, maintain inventory/OTIF on regulated/KVI lines, sustain program certifications (SOC 2/ISO), complete remediation milestones by set dates.
- Earnouts: tie to approvals (launch/coverage milestones), NRR in segments gated by remediation, or realized price under price‑cap risk.
Early‑warning indicators to monitor monthly post‑close
- Renewal/expiry calendar for licenses and certifications; % in 90‑day danger zone.
- Regulator or marketplace policy bulletins; tariff and fuel surcharge notices; audit/inspection cadence.
- SLA/credit accruals, chargebacks, and complaint rates; incident log for privacy/security.
- Denied‑party screening hits and export error rates; broker entry rejections.
- Labeling/EPR submission status by SKU; pack claims or greenwashing challenges.
- Worker classification disputes, wage & hour claims, safety incidents.
72‑hour sprint plan (from blank page to decision‑grade)
- Day 0: Freeze scope and materiality thresholds; issue a single evidence request; agree on clean‑team boundaries.
- Day 1: Populate the Regulatory Mapping Canvas for two top segments; compile approvals/obligations register and closing‑conditions list; mark timing gates and confidence.
- Day 2: Quantify $ impact for the top 10 exposures (price caps, CM2 drag, fees, penalties); run two scenarios (policy shock and timing delay); draft Special Terms memo.
- Day 3: Update the operating model (price, CM2, cash/timing); publish the heatmap, watchlist, and 90‑day remediation plan; align term‑sheet levers and owners.
Acceptance criteria for a decision‑grade regulatory map
- Scope, segmentation, and materiality thresholds written on page; clean‑team rules enforced.
- Approvals/obligations register complete for material segments; timing gates and owners assigned.
- Top exposures scored with Impact × Likelihood, expressed as revenue‑ and margin‑at‑risk ranges with sources and confidence labels.
- Model updated within 24 hours to reflect regulatory economics and timing; residual risk translated into CPs, indemnities, covenants, or earnouts.
- Watchlist of pending changes with timing, probability, and early‑warning indicators; 90‑day remediation plan with owners, costs, and outcomes.
- Verifier tie‑out to artifacts complete; all exhibits footnoted; no reliance on unverifiable claims.
Run this template and “regulatory” stops being a mysterious footnote. It becomes a quantified, time‑phased set of approvals and constraints you can underwrite, protect in the term sheet, and manage post‑close—so the plan you buy is the plan you can legally and sustainably execute.
11.2 ESG Risk Assessment Checklist
Environmental, Social, and Governance (ESG) factors are now commercial gatekeepers as much as ethical commitments. Large customers embed ESG screens in RFPs; retailers and marketplaces impose sustainability and safety codes; lenders and insurers price risk into rates and covenants; regulators translate environmental and labor expectations into obligations; and consumers reward or punish brands based on perceived integrity. In diligence, treat ESG as an earnings and access issue: which requirements are already binding, what will tighten in the hold period, and how exposures translate into revenue, margin, cash, and strategic option value. Your aim is a defendable map of material ESG risks and opportunities—by segment and route‑to‑market—with quantified ranges you can wire into pricing (8.2), unit economics (8.3), channel plans (9.2), and operational resilience (10.x).
Begin with materiality and segmentation, not slogans. The same metric can be trivial in one line and existential in another. A marketplace seller with high return rates faces waste and policy penalties; a med‑tech firm with weak quality systems faces license risk; a SaaS vendor with poor security governance invites churn and credits; a manufacturer with concentrated, coal‑heavy suppliers faces margin compression when energy costs spike or carbon costs rise. Lock the segments that move dollars (Chapter 6) and evaluate ESG where money and access sit: by product family, customer tier, channel, and geography.
Scope and materiality—freeze the rules of the road
Write one sentence per view that fixes scope, period, and threshold: “ESG exposures for Enterprise healthcare in North America (last 24 months actuals; 24‑month forward watchlist; material if ≥2% revenue impact, ≥100 bps CM2 swing, ≥8‑week timing gate, or non‑insurable penalties).” Apply the same segmentation and time windows across all ESG cuts. State explicitly that you will assess both downside risk (revenue‑at‑risk, margin‑at‑risk, cash drag) and credible upside (win‑rate lift, realized price premium, lower CAC, lower cost of capital).
Assemble a compact, decision‑grade evidence pack
Request artifacts once; reuse everywhere. Prioritize originals and external attestations over slideware.
- Customer and channel requirements: buyer codes of conduct, RFP ESG questionnaires, retailer/marketplace policies, audit findings, supplier scorecards, and any third‑party ratings customers ask for.
- Policies and controls: environmental policy, supplier code, human rights policy, safety standards, DEI commitments, whistleblower and anti‑bribery programs, data security and privacy controls, internal audit results.
- Operational and footprint data: energy use by site, renewable share, fuel mix, water use and discharge, waste and diversion, hazardous materials, packaging specs, returns and scrap, incident logs (safety, quality, ethics), training completion.
- Supply‑chain transparency: tier‑1 and critical tier‑2 suppliers, countries of origin, audit coverage and findings, corrective action plans, product content where regulated, traceability status.
- Governance: board composition, independence and committees, executive incentive design, related‑party disclosures, escalation and CAPA cycle times, compliance investigations.
- Financial linkages: fines/chargebacks/credits, insurance premiums and exclusions, energy and freight surcharges, EPR and recycling fees, carbon/energy hedges, capex for compliance.
- Claims and marketing: environmental or social claims and substantiation, customer complaints, takedown/delist notices.
A fast, falsifiable materiality triage
Avoid boiling the ocean. Use a six‑theme screen to rank what matters in each segment, then drop the rest.
- Climate & energy: energy intensity, carbon exposure (own operations and suppliers), price and reliability risk, and potential carbon‑cost pass‑through.
- Materials, waste & product stewardship: packaging and EPR fees, hazardous content, returns/refurbish waste, end‑of‑life responsibilities, circularity potential.
- Water, land & biodiversity: water stress at key sites, discharge compliance, deforestation‑linked inputs, land‑use constraints.
- Labor, human rights & safety: supplier labor practices, forced/child labor risk, worker classification, wage & hour, DEI and pay equity, TRIR/LTIFR, field safety.
- Data ethics & customer trust: privacy and security governance beyond legal minimums; AI model governance where relevant; incident history; uptime and fairness commitments.
- Governance & conduct: board oversight, whistleblower health, anti‑bribery/third‑party due diligence, related‑party hygiene, tax transparency.
For each theme, state a plain‑English “would‑have‑to‑be‑true” (WHTBT) risk and an upside thesis (e.g., “Win‑rate lift in public sector if independent security attestation is achieved,” or “≥300 bps CM2 drag if return rate remains above policy threshold in marketplaces”).
Quantify what’s quantifiable—use simple equations and ranges
ESG in diligence is about bounds, not false precision. Use corridors that bracket exposure and plug into the model within 24 hours.
- Carbon & energy exposure (downside):
Carbon cost exposure (annual) ≈ Scope 1+2 tCO₂e × assumed carbon price band (low/med/high) + electricity price sensitivity × kWh. Show pass‑through ability and elasticity implications (6.4).
Energy cost volatility exposure (quarterly) ≈ kWh or fuel units × price variance band; include data‑center or cloud energy where billed. - Packaging & EPR (downside):
EPR cost (annual) ≈ units sold × fee per unit (by material) + one‑time redesign cost ÷ payback horizon. - Waste & returns (both):
Waste drag (quarterly) ≈ return rate × average reverse‑logistics cost − recovered value; link to 10.4 CTS and 9.3 ROI (promo‑induced returns). - Labor & safety (both):
Attrition drag ≈ (turnover − peer median) × replacement cost per FTE × time‑to‑productivity; safety drag ≈ incident rate × avg. cost per recordable × lost‑time hours × wage rate. Upside from improvement drops CAC (employer brand) and raises productivity. - Supplier ethics & country risk (downside):
Revenue‑at‑risk (RaR) ≈ revenue on SKUs tied to high‑risk suppliers × probability of disruption or delisting (from retailer/platform policies) × duration band. - Governance & conduct (downside):
Penalty exposure ≈ historical fine/settlement band × likelihood class; add sales exclusions (public sector debarment risk) as a binary RaR for segments. - Commercial upside:
Price premium potential ≈ willingness‑to‑pay uplift (from VoC) × eligible mix × realization factor; win‑rate lift ≈ (delta win‑rate in ESG‑gated RFPs) × pipeline share; CAC benefit ≈ lower cost per hire/sale where brand and rating thresholds unlock channels.
Step‑by‑step ESG diligence (2–4 weeks, decision‑grade)
- Map buyer gates and channel policies. Read the last 12–18 months of RFPs and retailer/marketplace policies for top segments. Extract the hard gates (e.g., audit pass required, specific safety or environmental thresholds, diversity commitments) and the scoring levers (e.g., energy‑efficient product certifications, inclusive procurement). Tie each gate to revenue share at risk and to the workstreams in 9.2 and 10.3.
- Baseline the metrics that move economics. Produce a compact dashboard per segment: energy and carbon intensity; return and defect rates; waste and diversion; water use where material; TRIR/LTIFR; contact rate and SLA credits (trust and service) from 10.3; supplier audit coverage and findings; whistleblower activity and resolution time. Use medians and interquartile ranges—averages hide spikes.
- Score the supply base—complement 10.1 with ethics. For critical SKUs, rate tier‑1 and key tier‑2 on labor practices, audit outcomes, country risk, and corrective action status. Flag common‑mode risks (same region, same raw input) and any reliance on suppliers with recurrent findings. State dual‑source status and time‑to‑qualify alternates.
- Stress‑test three scenarios.
- Carbon/energy shock: apply low/medium/high carbon price and a ± band on electricity or fuel; show CM2 effect, pass‑through feasibility, and pricing response.
- Policy or platform enforcement: raise EPR fees or return‑rate penalties within realistic bands; test marketplace policy tightening (late shipment/return thresholds) and retailer compliance fines (10.3).
- Labor or ethics incident: remove a high‑risk supplier for 8–12 weeks; quantify revenue at risk, expedite cost, and delist probability; include remediation path.
- Translate into model toggles and terms. For each material segment, change price realization corridors, CTS buckets (10.4), and capacity ladders (10.2) as dictated by scenarios. Where uncertainty is material, propose term‑sheet levers: indexation clauses, inventory and service covenants on KVIs, supplier qualification milestones, special indemnities for known investigations, or earnouts tied to NRR/price realization in ESG‑gated segments.
- Identify the two to three credible upsides. Only include upsides with clear evidence and owners: premium packaging that cuts returns and raises price, energy efficiency that repays in <18 months, a security or sustainability attestation that unlocks public sector or marketplace tiers, or a product redesign that removes a restricted component and lifts shelf access.
ESG Diligence Canvas (copy one per segment and fill)
- Scope & materiality: segment, channel, region, product family; thresholds (revenue %, CM2 bps, timing gate).
- Top exposures (E/S/G): 3–5 items with WHTBT statements and confidence labels.
- Buyer gates & channel policies: hard requirements and scoring levers; revenue share affected.
- Baseline metrics: energy/carbon intensity, returns/waste, water (if material), TRIR/LTIFR, SLA credits/contact rate, supplier audit coverage and findings, governance incidents.
- Economic bridges: carbon/energy, EPR/waste, labor/safety, returns/contact costs; show formulas and bands.
- Scenarios: carbon/energy shock, policy/platform enforcement, supplier ethics incident; RaR/MaR outputs.
- Upsides: price premium, win‑rate lift, CAC reduction; proof and enabling actions.
- Model hooks & terms: lines changed (price, CTS, CM2, NRR), proposed covenants/earnouts/indemnities.
- Owners & 90‑day plan: two to three actions with cost, impact, and deadlines.
- Confidence & sources: evidence list and verifier initials.
Mini‑cards you’ll reuse across the deal
- Carbon & Energy Exposure Card—site or product: baseline kWh and fuel, renewable share, carbon intensity, price sensitivity, carbon‑cost bands, pass‑through notes, and quick wins (procurement, metering, efficiency).
- Supply‑Chain Ethics Risk Card—supplier or cluster: audit outcomes, corrective actions, country risk, critical content, dual‑source status, time‑to‑replace, and commercial exposure.
- RFP/Channel ESG Gate Card—buyer or platform: requirement text, pass/fail or score weighting, current status, revenue affected, remediation path and timing.
- Returns & Waste Card—SKU family: return rate and reasons, refurbish and scrap pathways, policy thresholds, marketplace penalties, and margin bridge.
Governance, assurance, and clean‑team rules
Keep customer‑ and supplier‑identifiable audits behind clean‑team walls; share only aggregated, anonymized outputs outside the ring‑fence. If management relies on third‑party ratings, record the underlying evidence and the ways buyers use those ratings (gate vs. nice‑to‑have). For claims in marketing, require substantiation and legal sign‑off; green claims without proof become pricing and delisting risk (9.3, 10.3).
Common failure modes—and the fix
- ESG as PR, not P&L. Remedy: convert each risk to revenue‑ and margin‑at‑risk with simple equations; drop items without economic linkage.
- Averages that hide trouble. Remedy: segment by product/channel/geo; show medians and dispersion; highlight tail risk (p90 returns, p95 latency credits, site‑level energy spikes).
- Supplier ethics scored once, never updated. Remedy: couple the 10.1 resilience cadence with ethics metrics and corrective‑action tracking; re‑score quarterly.
- Upside hand‑waving. Remedy: include upsides only with VoC proof, buyer gate documentation, or observed win‑rate/price lift; otherwise park in narrative.
- Greenwashing risk. Remedy: pair each external claim with evidence and approval; add a pre‑close claim audit; treat gaps as term‑sheet items.
Early‑warning indicators (monitor monthly post‑close)
- Return rates and “no fault found” shared by SKU; marketplace penalty/late shipment thresholds approached.
- Energy intensity and spend per unit; renewable share; carbon‑cost proxy; site‑level anomalies.
- Supplier audit closures on time; repeat findings; geo or input concentration rising.
- Safety: TRIR/LTIFR trend; severe incidents; CAPA closure time.
- Trust: SLA credits, privacy/security incidents, contact rate per account, backlog age.
- Governance: hotline volume and closure time; related‑party disclosures; internal audit findings.
- Channel: retailer policy changes, delist warnings, ESG certification expiries.
90‑day post‑close plan (only what moves economics fast)
- Buyer gates: close the two biggest RFP gaps (e.g., security/sustainability attestations, product certification).
- Returns & waste: fix the top two root causes (fit/quality, packaging, claims), reset policies to align with marketplace thresholds, and implement refurbishment at scale where margin‑positive.
- Energy & carbon: install metering where missing; negotiate energy supply and cloud commitments; fund the fastest payback efficiency wins; set a simple carbon‑cost shadow price for capex.
- Supply‑chain ethics: roll out supplier code and audit plan for critical tier‑1 (plus key tier‑2); qualify a second source where ethics and resilience overlap.
- Governance hygiene: tighten incentives and approvals (discount guardrails, claim substantiation), refresh whistleblower and anti‑bribery training in sales and channel teams.
72‑hour sprint plan (from blank page to decision‑grade)
- Day 0: Freeze scope and materiality thresholds; issue a single evidence request; align clean‑team boundaries.
- Day 1: Map buyer gates and channel policies for the top two segments; build baseline metric cards; draft Carbon & Energy and Returns & Waste cards.
- Day 2: Score top suppliers on ethics (coverage and findings); run three scenarios (carbon/energy shock, policy/platform enforcement, supplier incident); quantify RaR/MaR ranges; identify one credible upside.
- Day 3: Push toggles into the model (price, CTS/CM2, NRR); publish the ESG Diligence Canvas, early‑warning indicators, and a 90‑day plan; propose term‑sheet protections (indexation, inventory/service covenants, supplier qualification milestones, special indemnities, earnouts tied to NRR or price realization in ESG‑gated segments).
Acceptance criteria for a decision‑grade ESG assessment
- Scope, segmentation, and materiality thresholds written on page; clean‑team protocols observed.
- Buyer gates and channel policies documented with revenue share affected; supplier ethics coverage and findings summarized for critical SKUs.
- Baseline ESG metrics that tie to economics built by segment; formulas and corridors for carbon/energy, returns/waste, labor/safety, and trust costs shown with sources.
- Three scenarios modeled with revenue‑ and margin‑at‑risk ranges; model updated within 24 hours; residual risk translated into terms (covenants, milestones, indemnities, earnouts).
- Two to three credible upsides identified with proof and named owners; a 90‑day plan issued with costs, impact, and deadlines.
- Verifier tie‑out complete; every exhibit footnoted and replicable.
Run this checklist and ESG stops being a soft narrative. It becomes a quantified set of gates, costs, and advantages you can underwrite—an explicit part of price, terms, and the first 90 days of creating value.
11.3 Macroeconomic Scenario Guide
Macroeconomics is the weather in which your target sells, prices, and collects. A robust diligence does not try to predict the weather; it prices a small set of plausible climates and shows, by segment and route‑to‑market, how revenue, CM2, cash, and covenant headroom move in each. This guide gives you a practical, fast path: pick three to five externally anchored scenarios, translate each into micro‑level drivers (volumes, price realization, input costs, financing costs, FX, working capital), and wire the outputs into your model and term sheet within 24 hours. Keep it segmented. A downturn that hurts enterprise capex may benefit low‑ticket consumer categories; an energy shock may compress European CM2 but leave North America stable. Averages hide truths.
Begin with anchors you can cite. Use a well‑recognized baseline (for example, the IMF’s World Economic Outlook) and two to four alternatives that bracket the hold period (recession, stagflation, rate‑cut whipsaw, energy/FX shock). Supervisors routinely publish macro stress scenarios with specific paths for unemployment, GDP, home prices, and credit spreads; borrow their discipline and vocabulary for your cases instead of inventing bespoke nomenclature.
What to decide up front (freeze these before you model)
- Horizon and cadence: monthly for the next 6–12 quarters; annual thereafter if needed.
- Materiality thresholds: change a scenario only if it moves ≥2% revenue, ≥100 bps CM2, ≥50 bps covenant headroom, or ≥50 bps WACC.
- Segmentation lens: customer/job‑to‑be‑done, size band, route‑to‑market, region, and product family (consistent with Chapter 6).
- Disclosure policy: note whether you will use published anchors (IMF baseline; central‑bank stress scenarios) and maintain a short bibliography in the appendix for the Investment Committee.
Scenario taxonomy you can lift and tailor
Use three “always on” cases plus two optional ones if they are material for your target:
- Soft‑landing / benign disinflation: modest real GDP growth, inflation easing toward target, gradual rate cuts, flat credit spreads; consumer real incomes stabilize, capex improves late in horizon.
- Recession: negative real GDP for 2–3 quarters, unemployment up materially, falling inflation, wider credit spreads, rate cuts and steeper curve; volumes fall most in cyclical segments, pricing power weakens.
- Stagflation: low/negative growth with sticky inflation; central banks slow to ease; real incomes and margins compress; discounting fails to stimulate volumes.
- Rate‑shock / funding squeeze (optional): policy rates or credit spreads stay elevated; refinancing and floating‑rate debt hit I&E; B2B customers delay deals.
- Energy/FX shock (optional): input/freight and utility costs spike and FX moves sharply; regional CM2 diverges; compliance and indexation clauses become decisive.
Choose external anchors for the macro paths (keep it simple, cite them)
- Baseline path: IMF WEO growth and inflation for your geographies; adapt only where the target’s end‑markets run structurally hotter/colder than GDP.
- Downside/stress paths: borrow elements from supervisory stress scenarios (paths for unemployment, home prices, CRE prices, credit spreads) to avoid wishful thinking.
- Leading indicators to time turning points: Purchasing Managers’ Indexes (PMIs) for manufacturing/services and the orders‑to‑inventories ratio are widely used early signals; use them to phase demand before lagging data prints.
- Financial conditions: treat the yield curve (10‑year minus 3‑month) as one check on recession risk; pull its history or the New York Fed’s probability model only to time your recession case, not to claim certainty.
From macro to micro: the transmission channels you must quantify
Map each scenario into the handful of levers that actually move your P&L and cash. Do this by segment and route‑to‑market.
- Demand volume: tie to end‑market proxies (e.g., PMI new orders for industrial, housing starts for building products, IT investment indexes for software). Use short elasticities derived from your time series or nearest‑neighbor comps.
- Price realization and mix: combine price‑cost gap logic with the differentiation score (Chapter 8.4) and demand elasticity tests (Chapter 6.4).
- Input costs and logistics: energy, freight, and key commodities; for SaaS/usage businesses, cloud and third‑party API unit costs.
- Labor and service delivery: wage inflation and staffing availability in implementation/support; capacity ladders from Chapter 10.2.
- Financing costs: floating‑rate debt, refinancing walls, revolver usage; translate policy‑rate and spread paths into quarterly interest expense and covenant headroom.
- FX: translation (consolidation) and transaction (sourcing, pricing) effects; set price fences or indexation rules by currency where feasible.
- Working capital: DSO/late‑payment drift in downturns; inventory days for KVIs; payables terms tightening in stress.
Simple, auditable equations (use ranges, not point precision)
- Revenue sensitivity (by segment s):
ΔRev_s ≈ β_gdp,s × ΔGDP_region + β_pmi,s × ΔPMI + β_fx,s × ΔFX + promo_lift_s − price_elasticity_s × ΔPrice_s.
(Estimate β’s from your history or nearest comps; show ranges.) - Price‑cost gap: ΔCM2%_s ≈ ΔRealizedPrice_s − [w_input,s × ΔInputInflation + w_freight,s × ΔFreight + w_labor,s × ΔWage + w_cloud,s × ΔCompute].
- Interest expense: ΔIE ≈ Δ(PolicyRate + Spread) × Avg floating debt − hedge_effect.
- FX translation: ΔRevenue_USD ≈ Rev_local × ΔFX (weighted by local share); keep transaction impacts separate.
- Working capital cash drag: ΔCash ≈ ΔDSO × DailyRevenue + ΔDIO × DailyCOGS − ΔDPO × DailyCOGS.
Step‑by‑step build (five half‑day passes, reusable across deals)
- Exposure map (Half‑Day 1): For each top segment, list the 5–7 exposure levers that move ≥80% of outcomes (volume proxy, price power, two biggest input costs, wage‑ or capacity‑sensitive delivery steps, funding, FX, working capital). Assign a “direction of pain” note for each scenario.
- Scenario parameter sheet (Half‑Day 1): Paste baseline and alternative paths for GDP, CPI/PCE, unemployment, policy rate, credit spread, FX, energy/freight; document the source and timestamp for each path.
- Elasticities and pass‑through (Half‑Day 2): Estimate β’s from 3–5 years of monthly/quarterly data (or proxy cohorts). Where data are thin, triangulate with PMIs and peer disclosures; label confidence.
- Driver‑based P&L and cash (Half‑Day 3): Wire the parameter sheet into revenue, CM2, opex, interest, FX translation, and working capital. Build toggles for promo depth, indexation, and mix shifts.
- Covenant and liquidity view (Half‑Day 4): Add DSCR/interest coverage, net leverage, and minimum liquidity; test “two bad quarters” in each scenario.
- Decision deck (Half‑Day 5): Publish a one‑page per segment: scenario deltas to revenue, CM2, cash, and headroom; top three levers; owner and 90‑day actions.
How many scenarios are “enough”?
Three is usually sufficient if they are externally anchored and structurally different (e.g., soft‑landing vs. recession vs. stagflation). Add rate‑shock or energy/FX shock only if your exposure map says they materially move outcomes. Resist “scenario bloat” that confuses rather than clarifies.
Leading indicators and early‑warning dashboard (update monthly)
- Demand: PMI headline and new orders; orders‑to‑inventories ratio; retail sales by category where relevant.
- Labor: initial unemployment claims; vacancy‑to‑unemployment ratio where available.
- Financial conditions: 10Y–3M term spread; BBB/IG credit spreads; small‑business credit surveys where relevant.
- Costs: energy benchmarks, parcel/freight spot indexes, cloud unit cost; wage trackers.
- FX: DXY or specific currency pairs tied to sourcing/pricing.
- Customer health: days sales outstanding, disputes, down‑sell/seat‑shrink rate; marketplace delist/penalty warnings (Chapter 9.2).
Treat “two indicators red for two months” as a trigger to shift from baseline to downside execution mode.
Borrow discipline from supervisors—without copying their portfolio
Regulators publish macro stress paths and methodology each year (for example, the Federal Reserve’s supervisory scenarios and stress‑test methodology). You are not a bank, but you can adopt their clarity about variables, timing, and severity to avoid wishful thinking. When in doubt, use their unemployment and home‑price paths as the spine of your downside case.
Translating scenarios into actions (the commercial lens)
- Pricing & indexation: If stagflation is plausible, hard‑wire CPI/commodity/fuel indexation into new and renewal contracts (8.2) and set promo guardrails; simulate price/elasticity from 6.4 before assuming pass‑through.
- Mix & channel: Pivot coverage and spend (9.2, 9.3) to segments with structural demand (compliance‑driven, efficiency ROI, non‑discretionary).
- Capacity & cost: Adjust capacity ladders (10.2) and CTS levers (10.4) for the downside; pre‑position low‑cost lanes or reserved cloud capacity if energy/freight shocks are material.
- Credit and cash: Tighten terms, auto‑dunning, and dispute workflows; price late‑pay risk; expand credit insurance or collateral where practical.
- FX & rates: Pre‑define hedging bands and counterparties; reflect hedge costs in CM2. (No pre‑close execution.)
- M&A and partnership posture: In a sustained downturn scenario, prepare for tuck‑ins at lower multiples; in a benign disinflation, fund product‑led/partner‑led routes that compound.
Quality controls that keep scenarios honest
- External anchors documented with date/time; changes tracked.
- Two‑source rules for each leading indicator you rely on (e.g., PMI + company order intake).
- Ratio‑of‑sums (not sum‑of‑ratios) for rollups; currency and inflation consistency stated.
- Backtests: apply last two macro bumps to your driver model to see if it would have “predicted” the direction and approximate magnitude.
- Verifier pass: a second person can reproduce each scenario result from the parameter sheet.
Common traps—and quick fixes
- Copy‑pasting GDP into revenue. Fix: use segment‑specific proxies (PMI, housing starts, IT spend) and estimate β’s; show ranges, not points.
- Assuming cost relief equals price relief. Fix: model price–cost gap explicitly with indexation and elasticity.
- Ignoring funding costs. Fix: tie policy‑rate and spread paths to quarterly interest expense and covenant headroom.
- Treating the yield curve as fate. Fix: use it to time the recession case, not to assert certainty; keep management options (price/mix/cost) front and center.
- Scenario bloat. Fix: three clear cases beat seven fuzzy ones.
- No owner, no clock. Fix: every lever in a case must have an owner, cost, and start date.
72‑hour sprint plan (from blank page to decision‑grade)
- Day 0: Freeze scope, segments, horizon, and materiality; import baseline and two alternates from external anchors; timestamp sources.
- Day 1: Build the exposure map by segment; estimate quick β’s from internal time series or proxy cohorts; set initial price/elasticity ranges (6.4).
- Day 2: Wire parameter paths into a driver‑based P&L/cash model; add financing, FX, working‑capital, and covenant views; run soft‑landing, recession, and stagflation.
- Day 3: Publish a one‑pager per segment with deltas and top levers; update valuation ranges and structure (indexation covenants, earnouts tied to NRR/price realization in ESG‑gated segments; closing conditions for critical approvals in 11.1); set early‑warning indicators and owners.
Acceptance criteria (use this as your “done” check)
- Scenarios are externally anchored, dated, and cited; macro paths are translated into micro drivers by segment (revenue, CM2, cash, headroom).
- Elasticities and pass‑through assumptions shown as ranges with confidence labels; at least one backtest performed.
- Early‑warning dashboard defined (PMI, term spread, credit spreads, energy/freight, FX, DSO); trigger rules written.
- Model updated within 24 hours; residual uncertainty translated into valuation ranges and term‑sheet protections.
- Owners and 90‑day actions assigned for each material lever; clean‑team protocols observed.
Use this guide and your macro view will stop being a hand‑wavy appendix. It will become a decision tool with clear anchors, explicit micro‑economics, and named actions—so the Investment Committee can underwrite outcomes, not narratives.
11.4 Policy Change Watchlist Template
Policy shifts—whether from governments, regulators, standards bodies, platforms, or payment networks—can change your unit economics faster than competitive moves. A robust watchlist turns vague “regulatory risk” into an operational feed: what may change, when, who it hits, how it flows through price and CM2, and what you will do about it before it bites. Build this once, keep it live, and wire every entry to a model toggle, an owner, and a clock.
Start by defining what counts as “policy.” For commercial diligence, include any non‑contractual rule that constrains what you can sell, how you price or promote, how you handle data, how you ship, how you get paid, how you hire, or how you disclose. Treat platform and marketplace rules as quasi‑regulatory; they can be stricter and move faster than law.
Scope and taxonomy (freeze these at the outset)
Group items so nothing important falls between the cracks. Use the same segmentation as the rest of the diligence (customer/job, size band, channel, region, product family).
- Legislative and rulemaking: new laws, delegated regulations, agency rules and guidance, consultations, technical standards that become de facto rules.
- Competition and platform governance: gatekeeper rules, self‑preferencing limits, MFN/price‑parity restrictions, app store/marketplace policy changes, ad policy shifts.
- Privacy, data, AI, and cybersecurity: personal data requirements, cross‑border transfer limits, algorithmic transparency/impact assessments, security baselines and attestations.
- Trade and customs: tariffs, quotas, sanctions, export controls, certificates of origin, valuation and classification changes
- Tax: sales/use/VAT nexus, digital services taxes, marketplace facilitator obligations, withholding, e‑invoicing mandates.
- Payments and finance: interchange/surcharge rules, money transmission, BNPL/credit guidelines, chargeback programs.
- Labor and public procurement: wage & hour, worker classification, unionization thresholds, contract‑vehicle and set‑aside rules.
- Environmental and product stewardship: EPR (packaging/WEEE/batteries), labeling, hazardous substances, carbon pricing and reporting.
- Healthcare and reimbursement (if relevant): coverage decisions, codes, prior authorization timing, credentialing.
- Advertising and claims: health/green/financial claim standards, endorsements, UGC moderation and disclosure.
Signals and sources worth monitoring (set once, then automate)
- Official registers and dockets (national and sub‑national), consultation portals, and agency bulletins.
- Standards bodies and security frameworks (ISO, SOC, NIST, PCI), industry consortia, trade associations.
- Platform and marketplace policy centers, developer portals, seller newsfeeds, and partner newsletters.
- Payment networks/processors, parcel carriers and 3PL notices, customs brokers.
- Retailer compliance portals, chargeback/OTIF policy updates, category‑specific rulebooks.
- Court decisions, enforcement actions, warning letters, and consent decrees (signal how rules will be applied).
- Analysts and counsel alerts—useful for interpretation, but always anchor to primary sources.
A simple triage framework that keeps the list short and sharp
Score every item on four axes; focus only on the ones that clear your materiality thresholds (e.g., ≥2% revenue, ≥100 bps CM2, ≥8‑week timing gate, or non‑insurable penalties).
- Impact (I, 1–5): potential revenue hit or CM2 swing if adopted/enforced.
- Likelihood (L, 1–5): probability of adoption/enforcement in the hold period (based on stage, political momentum, recent enforcement).
- Immediacy (M, 1–5): time to effect from today (reverse‑scored: sooner = higher).
- Controllability (C, 1–5): your ability to mitigate through pricing, mix, routing, or process (reverse‑scored: less control = higher).
- Policy Priority Score (PPS): PPS = I × L × (M + C). Sort by PPS; work the top 10.
Policy Change Card (copy‑ready; fill one per item)
- ID & title: short handle (e.g., “EU marketplace late‑shipment threshold ↓”).
- Domain & jurisdiction: [taxonomy bucket], [region/country/state/platform].
- Source & link: official register/policy page; last checked date.
- Stage: Emerging | Proposal/Draft | Adopted | Effective | Enforced; key dates (comment deadline, adoption, grace period end, enforcement start).
- Affected scope: segments, channels, SKUs, geographies; % of revenue/CM2 exposed.
- Obligations & constraints: what must change in product, price, promo, data, fulfillment, or support.
- Economic bridge: formula for effect (e.g., Landed cost = FOB + duty% × value + brokerage; realized price corridor −200–400 bps if parity clause enforced).
- PPS & ranges: Impact, Likelihood, Immediacy, Controllability; revenue‑at‑risk (RaR) and margin‑at‑risk (MaR) corridors with assumptions.
- Mitigations & levers: indexation, price fences, channel mix, packaging redesign, second source, alternate lanes, consent language, attestation timeline.
- Dependencies: supplier certifications, system changes, partner consent, counsel review.
- Owner & cadence: accountable exec, policy SME, next review date; RAG status.
- Communications: customers, partners, internal (FAQ, scripts, timing).
- Model hooks: which toggles you changed (price, CTS/CM2, CAC, working capital, timing).
- Artifacts: docket ID, guidance PDF, platform bulletin, enforcement examples.
How to convert policy text into numbers (fast, falsifiable moves)
- Tariff or duty change → ΔLandedCost_per_unit = ΔDuty% × customs value; CM2 impact = volume × price realization − ΔLandedCost − freight/accessorial spillovers.
- Marketplace/app‑store take‑rate +X bps → net revenue drop = GMV × Δtake‑rate; CAC/payback elongation if paid placement also rises.
- Return/late‑shipment policy tightening → expected penalty drag = incident probability × new penalty $; revenue at risk from delist thresholds.
- Privacy/data residency → ΔCTS = added hosting + logging/compliance burden per account; cycle time shift for implementation.
- Interchange/processor fee shift → ΔCTS = Δbps × realized revenue collected over card rails; consider mix by payment type.
- Minimum wage or labor rule change → ΔCTS = affected roles’ hours × Δwage + overtime/benefits knock‑ons; reflected in implementation/support capacity.
- EPR/packaging → ΔCTS = units × fee table by material + redesign amortization ÷ horizon; shelf access upside if compliance unlocks listings.
Governance and cadence (keep it light, relentless, and linked to cash)
- Weekly 20‑minute “policy stand‑up”: top 10 cards; changes since last week; decisions due; one‑slide model deltas.
- Monthly risk committee: re‑score PPS, approve mitigations, escalate term‑sheet asks (indemnities, covenants, CPs), set or clear red flags.
- Ownership: business line owns execution; legal/compliance interpret; finance models; channel managers handle platform items; supply chain executes routing and inventory changes.
- Change log: snapshot policy text, date, and diff; tie to card and model version; store in the data book.
Automation that saves hours (no new software required)
- Turn on RSS/email alerts for registers, agencies, platforms, payment networks, carriers, and retailers you care about.
- Add document diff watchers on policy pages (where terms change silently).
- Keep a single spreadsheet or tracker (or your PMO tool) with Policy Cards, RAG status, dates, owners, and model hooks; version it weekly.
- Integrate with your risk register (Chapter 3.4) so capacity, service, and policy items live in one cadence.
Early‑warning indicators (watch monthly; trigger work the moment two go red)
- New drafts or bulletins on official portals; consultation deadlines within 60 days.
- Platform policy diffs that touch take‑rates, search rank, or shipping/returns thresholds.
- Chargebacks/OTIF penalties trend up; delist warnings.
- Processor/carrier notices of fee schedule changes or surcharges.
- Broker entry rejections or export screening hit rate uptick.
- Customer RFP gates adding new attestations or sustainability/security requirements.
- Enforcement tone shift: warning letters, fines, or case law aligning against current practices.
Red flags—and immediate responses
- Effective date <90 days with high PPS → move revenue/CM2 ranges to downside; launch a war‑room; freeze features/promo that worsen exposure.
- Platform take‑rate or ranking policy change on a channel ≥20% of revenue → run a mix‑shift bridge; prep paid placement or diversify channels; consider term‑sheet covenants.
- New privacy/AI obligations without an attestation path → cap growth in gated segments to upside only; fund certification as Day‑1 priority.
- Tariff/sanctions action on a critical input with no alternate → haircut revenue in exposed lines; require dual‑source milestones; build buffer stock.
- Labor rule step‑up in a location with key fulfillment or support hubs → adjust CTS and capacity ladders (10.2); push indexation or price fences at renewal.
Wire the watchlist into price, terms, and the model within 24 hours
For any high‑PPS item, immediately:
- Update realized price corridors, CM2/CTS, CAC/payback, and timing in the driver‑based model (add base and downside toggles).
- Translate residual risk into structure: conditions precedent (approvals, certifications), covenants (indexation, inventory/OTIF floors, platform tier maintenance), special indemnities/escrows (known investigations), and earnouts tied to NRR or price realization in gated segments.
- Publish a one‑page Decision Memo: what changed, impact range, levers, owner, and next review date.
90‑day implementation plan (prioritize moves that change cash within the hold period)
- Indexation and price fences in new/renewed contracts; add CPI/commodity/fuel clauses where legal.
- Channel diversification and shelf protection (secondary marketplaces/retailers; paid placement caps; KVI management).
- Packaging and routing tweaks to cut EPR/freight penalties; qualify alternates for sanctioned/tariffed inputs.
- Attestations needed for RFP gates (security, sustainability, accessibility); schedule audits and publish timelines.
- Policy‑ready service design (SLA ladders, returns thresholds, data‑location toggles) so you can adapt without re‑platforming.
Copy‑ready templates (paste directly into your workspace)
A) Policy Change Watchlist (tracker fields)
- ID | Title | Domain | Jurisdiction | Source/Link | Stage | Key Dates (consultation/adoption/effective/enforcement) | Affected Segments/Channels/Regions | Revenue % exposed | CM2 % exposed | Obligations Summary | Economic Bridge (formula + inputs) | PPS (I,L,M,C) | RaR $ | MaR $ | Mitigations | Dependencies | Owner (Exec/SME) | RAG | Next Review | Model Hooks | Artifacts
B) Economic Bridge Library (snippets to reuse)
- Tariff +5% on component X → ΔCOGS = 0.05 × customs value; CM2_sens = −ΔCOGS × units; pass‑through = [0/50/100%] at renewal.
- Marketplace take‑rate +200 bps → ΔNetRev = −0.02 × GMV; CAC_sens = +Δpaid placement if rank falls.
- Return penalty threshold from 12% to 8% → expected penalty = max(0, return rate − 8%) × penalty$/order × orders; delist hazard when >2 months.
- Interchange +10 bps → ΔCTS = 0.001 × card‑processed revenue; check alternative rails mix.
- EPR fee +$0.03/unit → ΔCTS = 0.03 × units; redesign amortization added if pursued.
- Data residency mandate → ΔCTS = hosting uplift/account + implementation delay × hazard on NRR.
C) Communication Plan Card
- Audience (customers/partners/internal) | Message (what/why/when) | Policy basis | Customer impact | Entitlements/price changes | Effective date | Support scripts & FAQ | Escalations | Owner | Send date
D) Platform Policy Radar (per marketplace/app store/retailer)
- Policy page monitored | Last diff date | Take‑rate | Paid placement rules | Returns/late‑ship thresholds | Search rank levers | Evidence of enforcement | Listings/delistings trend | Owner
72‑hour sprint plan (from blank page to a live watchlist)
- Day 0: Freeze scope, segmentation, and materiality thresholds; build the tracker shell; subscribe to core sources; assign owners for top five domains.
- Day 1: Populate ten candidate cards; score PPS; compute first‑pass RaR/MaR for the top five using the Economic Bridge Library; draft model toggles.
- Day 2: Validate sources with counsel/SME; run two policy scenarios (e.g., platform take‑rate hike; tariff +5–10%); draft communication plan and term‑sheet asks.
- Day 3: Publish the watchlist, updated model, and a 90‑day action plan; embed the weekly stand‑up and monthly risk review; log evidence and version the tracker.
Acceptance criteria for a decision‑grade watchlist
- Scope and materiality thresholds written; segmentation consistent with the deal model.
- Top 10 Policy Cards completed with sources, dates, PPS, and quantified RaR/MaR ranges; model toggles updated within 24 hours.
- Clear owners, RAG status, and next review dates; change log and artifacts stored.
- Weekly and monthly cadences set; early‑warning indicators defined; communication plans drafted for the top three items.
- Term‑sheet translations proposed where uncertainty is material (CPs, covenants, indemnities, earnouts).
- Verifier pass complete; numbers reproduce from the tracker and cited artifacts.
Use this template and “policy risk” stops being a hand‑wavy caveat. It becomes a living, prioritized queue of changes tied to dollars, owners, and dates—so you can price the risk, protect the downside, and move first when rules create a new right‑to‑win.
