Standards
NIST makes supply-chain cyber risk an enterprise discipline—not a supplier questionnaire
The updated SP 800-161 record connects strategy, criticality, acquisition, assessment, monitoring, and response across organizational levels.
Coverage desk
Disruptions
Source-backed reporting and analysis connected to the companies, capabilities, authorities, and operating domains it affects.
Regulation
The EU CSDDD revision moves the timeline, not the supply-chain evidence problem
The 2026 revision changes scope and application timing while leaving buyers with a continuing need to distinguish legal applicability from mapping and risk-platform claims.
Regulation
EUDR turns geolocation into an operating data chain—not a map layer
The official due-diligence record connects covered product, supplier, production geography, legality evidence, risk assessment, mitigation, and statement workflows.
Standards
ISO 22301 keeps recovery beyond the control-tower dashboard
The continuity standard requires a managed capability around impact, strategy, plans, exercises, response, recovery, and improvement.
Standards
ISO 28000 separates cargo-security management from tracking
A location event can support security operations, but the management-system record retains risk assessment, controls, incidents, monitoring, and improvement.
Standards
WCO SAFE links advance data to trade security without turning visibility into customs compliance
The framework organizes customs and business cooperation, advance information, risk management, and authorized-operator concepts.
Product Intelligence
project44's current record shows the boundary between events and decisions
Movement connects transportation events and prediction to operating workflows, but official product language does not establish network completeness or ETA performance.
Product Intelligence
FourKites broadens the control-tower decision beyond transportation tracking
The current platform record spans transportation, orders, inventory, facilities, yards, and workflow, expanding both the opportunity and the integration burden.
Planning
Planning suites converge on scenarios—but not on one decision model
Kinaxis, Blue Yonder, o9, SAP, and Oracle all document scenario and planning capabilities, while horizons, data models, constraints, and decision rights remain buyer-specific.
Visibility
Visibility buyers need an event-provenance test before an ETA contest
The useful demonstration begins with missing, stale, duplicated, corrected, and conflicting events—not a clean route animation.
Risk
Supply-chain risk platforms map different kinds of exposure
Everstream, Interos, Resilinc, Prewave, Exiger, Altana, and Sourcemap overlap on mapping and monitoring while using different evidence, identity, risk, and workflow models.
Regulation
UFLPA evidence needs a chain—not a screening result
DHS's strategy joins entity information, product and supplier relationships, customs enforcement, and importer evidence under a legal process that software cannot decide.