It's not the same thing as being sanctioned. In broad outline, a supply chain risk is a company that can't sell to or have its products or components resold to USG; whereas, a sanctioned entity is one that can't do business with anyone -- anyone who does so will be punished.