Foreign Ownership, Control or Influence (FOCI) Information Form

Purpose

This Information Form is issued to obtain information necessary for the Australian Taxation Office (ATO) to understand any potential FOCI associated with your organisation and the proposed goods or services.

All potential suppliers must provide complete and accurate responses to all questions. Where a question is not applicable or information is unavailable, a clear explanation must be provided. Incomplete forms may require resubmission, and otherwise delay consideration and processing.

Supplier Details

FOCI Information Questions

1. Defence Industry Security Program (DISP) or Hosting Certification Framework (HCF) Status

Are you currently a member of the DISP or certified under the HCF?

☐No ☐Yes – If Yes, provide details below:

1. Identify the relevant program (DISP and/or HCF), current membership level or certification status, and date granted.

2. Confirm whether the goods or services being provided under this process align with or differ from those covered by your DISP membership or HCF certification and explain any differences.

2. Ultimate Ownership and Structure

Identify your organisation’s Ultimate Beneficial Owner(s) (UBOs) and, where available, attach a current corporate structure diagram or organisational chart showing ownership and control relationships:

If UBO and/or structure information is unavailable, explain why:

3. State Ownership or Control

Is your organisation or any of its UBOs state-controlled, majority funded by, or financially connected to a foreign government or sovereign entity?

☐No ☐Yes – If Yes, provide details below:

If No, but a special relationship exists with a foreign government that provides benefits such as preferential contracts, state funding, or special legal status, or other privileges that may enable direction, control or influence, describe these arrangements in detail:

4. Politically Exposed Persons (PEPs)

Are any of your organisation’s senior executives, directors or UBOs classified as PEPs under Key Definitions at the end of this document?

☐No ☐Yes – If Yes, provide details below:

5. Access to ATO Systems, Networks or Data

Will your organisation, or any personnel or systems involved in delivering the proposed goods or services, have access or connectivity to ATO systems, networks or data?

☐No ☐Yes – If Yes, provide details below:

1. Describe how access or connectivity will occur (e.g. remote access/support, system integration, data hosting, on-site access etc):

2. Specify what type of ATO information will be accessed, stored, transformed or transmitted, and to/from which country and service provider this will occur:

3. Explain how access will be restricted to only what is required, and what safeguards or controls (e.g. authentication, encryption, segregation, monitoring etc) are in place to protect it:

4. Confirm whether any ATO information could be accessed from a foreign jurisdiction, and if so, specify the country(ies) and purpose for access:

**

6. Subcontractors, Offshore Support, or Foreign-Based Personnel

Will you use any subcontractors, support providers, or foreign-based personnel to deliver or support the proposed goods or services?

☐No ☐Yes – If Yes, provide details below:

If Yes, explain how you manage and control these parties and ensure access and data handling remain within agreed security parameters, including safeguards/controls in place:

7. Jurisdictional Obligations

Is your organisation, UBOs, or any related entities subject to laws or obligations in a jurisdiction that could:

• compel disclosure of information (including ATO information),

• require the cooperation with, or

• enable a foreign government to access, direct, or exercise control over the products, services, hardware, software or systems you provide?

☐No ☐Yes – If Yes, provide details below:

Key Definitions

[TABLE]

Note: The definitions below are specific to this document only.