FOCI Vendor Risk Snapshot

Foreign Ownership, Control and Influence (FOCI) is one of the most overlooked supply chain obligations under the SOCI Act — and one of the first things CISC auditors check.

This 13-page intelligence document gives you a structured framework to identify, assess and document FOCI risk across your vendor supply chain before you sign your annual CIRMP attestation.

Inside:

• The FOCI Risk Spectrum — Low to Critical rating scale

• High-risk vendor categories with a known OT vendor reference list

• The 5-Step FOCI Vendor Assessment process

• 7 red flag triggers requiring immediate escalation

• FOCI obligations under the Enhanced CIRMP Rules

• A 15-row fillable Vendor Risk Register with example entries

Designed for CIRMP owners, security leads, and directors of declared critical infrastructure assets.

For information purposes only — not legal advice.