What the SFO found at Ultra Electronics

The investigation dates back to 2018, when Ultra Electronics self-referred to the SFO roughly a month after Algerian media published corruption allegations connected to the company's activities in North Africa, according to the Guardian. The SFO's inquiry focused on the conduct of agents used by the firm to secure defence contracts in Algeria and Oman.

The core charge is a corporate offence under Section 7 of the Bribery Act 2010: failure to prevent bribery by persons associated with a commercial organisation. Ultra Electronics accepted responsibility for that failure as part of the settlement approved by the High Court on Friday, as reported by the Guardian.

Section 7 does not require prosecutors to prove that a company's directors or senior officers personally authorised corrupt payments. It is enough to show that a person "associated with" the organisation bribed a third party to obtain or retain business, and that the organisation did not have adequate procedures in place to prevent such conduct. The only statutory defence is demonstrating that the firm had "adequate procedures" designed to prevent bribery.

The SFO has not disclosed granular detail about the nature of the payments or the identities of the agents involved. However, the structure of the charge indicates that the agency identified specific bribery by intermediaries acting on Ultra Electronics' behalf, combined with inadequate internal controls, due diligence, or oversight of those intermediaries.

Corporate structure: who pays

Ultra Electronics Holdings was a London-listed defence and aerospace group until 2022, when it was acquired by Cobham Ultra, a vehicle backed by US private equity firm Advent International, in a deal valued at approximately £2.6bn, according to filings at the time. The offences under investigation predate the acquisition.

The £15m financial penalty falls on the successor entity. Cobham Ultra, as the corporate successor, bears the liability arising from the DPA. The settlement therefore illustrates a well-known risk in defence sector M&A: acquiring a business does not extinguish pre-existing regulatory exposure. Buyers conducting due diligence on targets with overseas agent networks would do well to note the timeline; the SFO investigation ran for roughly eight years before reaching resolution.

How the deferred prosecution agreement works

Deferred prosecution agreements were introduced to England and Wales by the Crime and Courts Act 2013 and first used in 2014. Under a DPA, the prosecution brings a charge but agrees to defer proceedings provided the company meets specified conditions over a set period. If the company complies, the charge is eventually discontinued. If it breaches the terms, the prosecution can proceed to trial.

Conditions typically include a financial penalty, disgorgement of profits, cooperation with ongoing investigations, and commitments to remediate compliance programmes. A DPA must be approved by a Crown Court judge, who must be satisfied that it is in the interests of justice and that its terms are fair, reasonable, and proportionate.

The SFO has now secured roughly a dozen DPAs since the mechanism became available. Notable examples include agreements with Rolls-Royce in 2017 (£497m in penalties plus disgorgement) and Airbus SE in 2020 (€991m globally, of which the SFO's share was approximately £815m). The Ultra Electronics agreement, at £15m, is modest by comparison, but the principle is identical.

DPAs have attracted judicial scrutiny. Judges have questioned whether the terms offered to corporates are sufficiently stringent, and whether individuals involved in the underlying conduct face adequate personal consequences. The SFO has faced criticism for securing corporate settlements while bringing relatively few prosecutions of individuals. That tension remains unresolved.

Compliance lessons for firms using overseas agents

The Ultra Electronics case is not an outlier. UK defence and engineering firms operating through agents in North Africa and the Gulf have faced repeated bribery scrutiny over the past two decades.

BAE Systems (LSE: BA.) paid £286m in 2010 to settle US and UK investigations into defence contracts in Saudi Arabia and other jurisdictions. GPT Special Project Management, a subsidiary of Airbus, was the subject of an SFO investigation into alleged corrupt payments connected to a Saudi Arabian National Guard communications contract; that case collapsed in 2021 after the SFO offered no evidence.

The pattern is consistent: firms win contracts in jurisdictions where commercial agents or consultants are standard practice, and those agents make payments that the principal either does not scrutinise or chooses not to see.

For mid-market firms and scale-ups pursuing international contracts, the practical takeaways from the Ultra Electronics DPA are concrete.

Agent due diligence

Section 7's "adequate procedures" defence demands documented, risk-based due diligence on every intermediary. That means verifying the agent's identity, beneficial ownership, business rationale, and connections to public officials before any engagement, and refreshing that analysis periodically.

Contractual controls

Contracts with agents should include anti-bribery warranties, audit rights, and termination clauses triggered by compliance breaches. Vague or unsigned agreements are a red flag that prosecutors will examine.

Monitoring and record-keeping

Paying an agent a commission is not inherently unlawful. But firms must be able to demonstrate that commission rates are commercially reasonable, that payments correspond to genuine services, and that internal records capture the decision-making process. The absence of such records is often what converts suspicion into a charge.

Culture and training

The Ministry of Justice's 2011 guidance on adequate procedures under the Bribery Act identifies "top-level commitment" as one of six principles. Board-level accountability for anti-bribery compliance is not optional; it is a component of the statutory defence.

Wider implications for the UK defence supply chain

The UK government has signalled increased defence spending in the coming years, and ministers have encouraged domestic manufacturers to pursue export markets aggressively. That push sits in tension with the enforcement reality demonstrated by the Ultra Electronics case.

Smaller firms in the defence supply chain, particularly those without dedicated compliance teams, face a structural challenge. They need agents to access markets where direct selling is impractical or culturally unusual, yet the legal risk attached to those agents is substantial. The Bribery Act's strict liability framework means that ignorance of an agent's conduct is not a defence; only demonstrably adequate procedures will suffice.

The SFO's willingness to pursue a DPA eight years after the initial self-referral also underscores the agency's long institutional memory. Firms that self-report, as Ultra Electronics did, may secure more favourable terms than those that do not, but they should not expect the process to be swift or painless.

"The company referred itself to the UK law enforcement agency a month after corruption allegations were published by Algerian media," the Guardian reported.

Self-reporting remains the SFO's preferred route to early cooperation credit. For firms that discover potential bribery in their agent networks, the Ultra Electronics timeline offers a sobering but instructive precedent: disclosure is better than concealment, but the consequences are real and lasting.

The £15m penalty will not materially trouble Advent International's balance sheet. For a mid-market firm, the equivalent sum could be existential. That asymmetry makes compliance investment not a cost centre but a condition of survival in international markets.