FIS · CIK 0001136893
What Fidelity National Information Services, Inc. told the SEC could break it.
As a technology provider to financial institutions, FIS leads with information-system security: it calls compromises to the confidentiality, integrity or availability of its systems one of its principal operational risks and says it is a regular target of attempts to exploit vulnerabilities and breach its networks, including concern over state-linked attacks on payment infrastructure. That centrality cuts both ways in regulation and supply — its European operations have been designated a Critical Third-Party Provider under the EU's DORA, adding oversight and compliance cost, while it depends on numerous third parties for systems, market data, connectivity and network infrastructure. It also runs operations in more volatile emerging markets across Latin America, India, Southeast Asia, the Middle East and Africa that could add swings to its revenue and earnings.
4 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Cybersecurity
- information-system security / payment-infrastructure attacksmedium
As a technology provider to financial institutions, FIS faces principal operational risk from compromises to the confidentiality, integrity, or availability of its information systems and is a regular target of attempts to exploit vulnerabilities and gain unauthorized access (with disclosed concern over state-linked attacks on payment infrastructure).
“For that reason, compromises to the confidentiality, integrity or availability of our information systems or information are some of the principal operational risks we face as a provider of services to financial institutions and businesses. Like other such providers, we are a regular target of attempts to identify and exploit system vulnerabilities and/or penetrate or bypass our security measures to gain unauthorized access to our networks and systems.”
SEC filing →As of 2026
Geographic concentration
- emerging-market operations (Latin America, India, SE Asia, Middle East, Africa)medium
FIS has operations in emerging markets — primarily Latin America, India, Southeast Asia, the Middle East, and Africa — whose more volatile economies could add volatility to its future revenue and earnings.
“We have operations in emerging markets, primarily in Latin America, India, Southeast Asia, the Middle East and Africa. These emerging market economies tend to be more volatile than the more established markets we serve in North America and Europe, which could add volatility to our future revenue and earnings.”
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings, including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its customers
“The Bank outsources its core processing activities to Fidelity National Information Services, Inc., or FIS Corporation located in Jacksonville, Florida.”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch