The Vendor Risk Assessment Program will focus on foreign influence, cyber risk and company vulnerability.