§ 800.102 Risk-based analysis.

Any determination of the Committee with respect to a covered transaction to suspend, refer to the President, or to negotiate, enter into or impose, or enforce any agreement or condition under section 721 shall be based on a risk-based analysis, conducted by the Committee, of the effects on the national security of the United States of the covered transaction. Any such risk-based analysis shall include credible evidence demonstrating the risk and an assessment of the threat, vulnerabilities, and consequences to national security related to the transaction. For purposes of this part, any such analysis of risk shall include and be informed by consideration of the following elements:

(a) The threat, which is a function of the intent and capability of a foreign person to take action to impair the national security of the United States;

(b) The vulnerabilities, which are the extent to which the nature of the U.S. business presents susceptibility to impairment of national security; and

(c) The consequences to national security, which are the potential effects on national security that could reasonably result from the exploitation of the vulnerabilities by the threat actor.