A foreign owned company cannot simply hold a facility security clearance and start work on classified contracts. It must first show the U.S. government that its foreign ownership will not put classified information at risk. The framework that governs this is Foreign Ownership, Control, or Influence, known as FOCI, and it is administered by the Defense Counterintelligence and Security Agency. When FOCI is present, the government requires a mitigation instrument, and there are five to choose from. This guide explains what each one is, when it applies, and how to plan for the right one early, because choosing late is where entry timelines collapse.

This is a general explanation, not legal advice. The instrument that fits your company is a determination made with the government based on your specific ownership structure, and qualified counsel should confirm the details for your situation.

What FOCI mitigation actually does

A company is considered under FOCI when a foreign interest has the power, direct or indirect, to influence its management or operations in a way that could affect the protection of classified information. The presence of FOCI does not disqualify a company. It triggers a requirement: the foreign influence must be mitigated or negated to a level the government finds acceptable before a facility clearance can be granted or kept.

The core idea across all five instruments is the same. The greater the degree of foreign ownership and control, the more the arrangement must insulate classified work from that foreign influence. Lighter instruments add oversight around a small foreign stake. Heavier instruments move voting power, and in the most involved cases legal title, into the hands of cleared U.S. citizens. The government does not apply a fixed formula. Under the governing rule, the Cognizant Security Authority weighs the factors in the aggregate, including the ownership structure, the sensitivity of the information involved, and the record of the foreign interest, then determines which instrument is appropriate.

The five instruments, from lightest to most involved

Board Resolution

A board resolution is the lightest instrument. It applies when a foreign interest holds a stake too small to elect board representation, for example a minority position with no right to appoint a director. The company board formally certifies that the foreign owner cannot access classified information and adopts measures to keep it that way. This is the arrangement for limited foreign influence rather than foreign control.

Security Control Agreement (SCA)

A security control agreement applies when a foreign interest is entitled to representation on the board but does not control the company. The company remains effectively owned and controlled by U.S. interests. At least one cleared U.S. citizen serves as an outside director, and a government security committee oversees compliance. Because the company is not foreign controlled, an SCA generally permits access to classified information without the added step that heavier instruments require.

Special Security Agreement (SSA)

A special security agreement is used when a company is effectively owned or controlled by a foreign interest. This is a substantial step up. The SSA lets the foreign owner retain a voice in the business through board representation, but it builds an institutionalized set of security practices around classified work and denies the foreign interest majority representation on the board. Access to the most sensitive categories, such as top secret, sensitive compartmented information, special access programs, communications security, and restricted data, can require an additional National Interest Determination confirming that access is consistent with U.S. national security interests. Many foreign owned entrants that want to keep a genuine ownership voice end up on the SSA path.

Proxy Agreement (PA)

A proxy agreement is used when a foreign interest effectively controls the company and the parties choose to fully insulate that control from classified operations. The foreign owner keeps financial ownership, but its voting rights are exercised by cleared U.S. citizen proxy holders approved by the government. Because U.S. citizens hold the voting power, the company can generally access classified information without the National Interest Determination step that an SSA can require. The trade off is that the foreign owner gives up direct control over the operations that hold the clearance.

Voting Trust Agreement (VTA)

A voting trust works much like a proxy agreement, with one key difference. Rather than transferring only the voting rights, the arrangement transfers legal title to the shares to cleared U.S. citizen trustees approved by the government. The foreign owner retains the financial benefits of ownership while the trustees hold and vote the stock. It is the most complete separation of foreign ownership from control over classified work.

The rule also allows combination measures, meaning a blend of these instruments tailored to a specific ownership structure. In practice, the label matters less than the outcome the government is looking for: a credible, durable barrier between foreign influence and classified information.

How the government decides which one applies

There is no automatic mapping from a percentage of foreign ownership to an instrument. The Cognizant Security Authority conducts a risk based assessment and considers the factors together. Ownership structure matters, but so does the sensitivity of the information the company would handle, the nature and location of the foreign interest, and the foreign owner willingness to accept the controls. Two companies with similar ownership percentages can land on different instruments because the rest of the picture differs. This is why a generic answer to which instrument will I need is rarely useful. The realistic answer comes from mapping your actual structure against the classified work you intend to pursue.

Why this belongs early in an entry plan, not late

The single most common and most expensive mistake foreign entrants make with FOCI is treating it as a final step. They complete registrations, pursue opportunities, and only confront foreign ownership when a classified requirement appears. By then the timeline is already under pressure, and negotiating a mitigation instrument, standing up a government security committee, and clearing the required personnel all take real time. A company that knows from the start that classified work is the goal can structure ownership and governance to fit the likely instrument, which shortens the path considerably.

There is also a strategic point here. Some entrants discover that the instrument required for their goals would demand more separation from foreign control than the owners are willing to accept. It is far better to learn that early, while the structure can still be shaped, than after committing to a market position that the ownership will not support. Knowing your likely FOCI path is part of the feasibility question, not a formality to handle at the end.

The mistakes that cost entrants the most time

Assuming foreign ownership is a disqualifier and never exploring classified work at all, when a mitigated path was available.

The opposite error: pursuing classified opportunities before addressing foreign ownership, then scrambling to mitigate under deadline pressure.

Underestimating the personnel and governance work, including the need for cleared U.S. citizens to serve as directors, proxy holders, or trustees, which cannot be arranged overnight.

Choosing an instrument that looks convenient on paper but conflicts with what the owners actually want from the business, which surfaces as friction later.

Frequently asked questions

Does foreign ownership prevent a company from holding a facility clearance

No. Foreign ownership triggers a requirement to mitigate or negate the foreign influence through an approved instrument. Once an acceptable instrument is in place, a foreign owned company can hold a facility clearance and perform classified work.

What is the difference between an SSA and a proxy agreement

A special security agreement lets the foreign owner keep a voice in the business through board representation while security practices insulate classified work, and access to the most sensitive information can require a National Interest Determination. A proxy agreement moves voting rights to cleared U.S. citizens, which more fully separates foreign control from classified operations and generally avoids that additional step. The right choice depends on how much control the owners are prepared to give up.

How is the required instrument determined

The Cognizant Security Authority makes a risk based determination, weighing ownership structure, the sensitivity of the information involved, the nature of the foreign interest, and other factors in the aggregate. It is not a fixed formula tied to an ownership percentage.

How long does FOCI mitigation take

It varies with the instrument and the company. Lighter arrangements are faster. Heavier instruments such as an SSA, proxy agreement, or voting trust involve negotiation, governance changes, and personnel clearances that add substantial time. Starting early is the single biggest factor in keeping the timeline manageable.

Do I need to resolve FOCI before I register or bid

Not necessarily to register or to pursue commercial and unclassified work, which is broadly open. You need to resolve FOCI before you can perform on a classified contract. If classified work is your goal, plan the FOCI path early even while you handle registrations and unclassified positioning in parallel.

Where Nortrane fits

Nortrane helps foreign and new entrants understand their likely FOCI path before it becomes a bottleneck, as part of a market entry plan that runs the steps in the right order. We are vendor neutral and we work in plain English, from the first feasibility question to a first award. If classified work is part of your goal, an initial consultation is the most useful place to start. Request a consultation.

For the full sequence this fits into, read our roadmap on how a foreign company enters the U.S. defense market, and see our defense market entry consulting and export compliance pages.