A predicate offense is the underlying qualifying crime that can activate entity liability under a compliance regime. In practice, the offense is the legal trigger: if the conduct falls within the regime’s list, a company can face penalties even when the violation was committed by an employee, contractor, or third party acting for the business.
In cyber security, predicate offenses matter because digital activity often supports the crime. Examples include unauthorized access, fraud, data theft, sanctions evasion, or the use of compromised systems to hide transactions. Defenses focus on reducing both the chance of the offense and the ability to prove it happened: access controls, logging, monitoring, vendor due diligence, incident response, and preserved audit trails. A strong compliance program maps each high-risk process to controls and evidence, so the organization can show what was checked, who approved it, and when alerts were escalated.