Interos says iScore evaluates extended supply chains across multiple risk factors. A composite score still needs a reconstructable entity, factor, source, model, time, and decision record.
Overhaul documents shipment visibility, route-deviation alerts, cargo-risk intelligence, and response. An alert still needs telemetry, custody, investigation, and product-disposition evidence.
NIST's July 2026 quick-start guide organizes ICT supplier research around five assessment components. It supports informed acquisition and existing-system decisions, but it does not turn a finding, score, or completed questionnaire into approval of a supplier or product.
CISA’s small-business fact sheet frames ICT supply-chain risk as work across products, services, suppliers, and acquisition. A questionnaire score cannot establish the risk, integrity, availability, or suitability of a particular technology supply chain.
Everstream, Interos, Resilinc, Prewave, Exiger, Altana, and Sourcemap overlap on mapping and monitoring while using different evidence, identity, risk, and workflow models.