Lead story: NIST makes supply-chain cyber risk an enterprise discipline—not a supplier questionnaire
The updated SP 800-161 record connects strategy, criticality, acquisition, assessment, monitoring, and response across organizational levels.
Network WatchMaterial changes in disruptions, planning systems, visibility networks, standards, and due-diligence obligations.
Official guidance analysisNIST makes supply-chain cyber risk an enterprise discipline—not a supplier questionnaireDirective update analysisThe EU CSDDD revision moves the timeline, not the supply-chain evidence problemRegulatory analysisEUDR turns geolocation into an operating data chain—not a map layerStandards analysisISO 22301 keeps recovery beyond the control-tower dashboardThe EU CSDDD revision moves the timeline, not the supply-chain evidence problem
The 2026 revision changes scope and application timing while leaving buyers with a continuing need to distinguish legal applicability from mapping and risk-platform claims.
EUDR turns geolocation into an operating data chain—not a map layer
The official due-diligence record connects covered product, supplier, production geography, legality evidence, risk assessment, mitigation, and statement workflows.
Planning, visibility, and resilience intelligence
View newsroomThe EU CSDDD revision moves the timeline, not the supply-chain evidence problem
The 2026 revision changes scope and application timing while leaving buyers with a continuing need to distinguish legal applicability from mapping and risk-platform claims.
EUDR turns geolocation into an operating data chain—not a map layer
The official due-diligence record connects covered product, supplier, production geography, legality evidence, risk assessment, mitigation, and statement workflows.
ISO 22301 keeps recovery beyond the control-tower dashboard
The continuity standard requires a managed capability around impact, strategy, plans, exercises, response, recovery, and improvement.
ISO 28000 separates cargo-security management from tracking
A location event can support security operations, but the management-system record retains risk assessment, controls, incidents, monitoring, and improvement.
WCO SAFE links advance data to trade security without turning visibility into customs compliance
The framework organizes customs and business cooperation, advance information, risk management, and authorized-operator concepts.
project44's current record shows the boundary between events and decisions
Movement connects transportation events and prediction to operating workflows, but official product language does not establish network completeness or ETA performance.
How the market is organized
Explore allA plan is a governed decision—not a prettier forecast
Useful planning connects horizon, demand, supply, capacity, inventory, finance, constraints, scenarios, and decision rights. Buyers should test how assumptions and exceptions move into execution.
Read the market record →An event needs identity, time, coverage, and a workflow
Tracking becomes operational intelligence only when teams can trace the displayed state to its source, understand latency and gaps, and route an exception to an accountable response.
Read the market record →A risk score is not a recovery capability
Supplier maps and disruption signals can support prioritization. Continuity depends on criticality, alternatives, capacity, decisions, exercises, recovery objectives, and maintained evidence.
Read the market record →Obligations follow products, entities, jurisdictions, and evidence
Human-rights and environmental due diligence can share mapping and screening infrastructure while retaining distinct legal scope, source status, remediation duties, and qualified interpretation.
Read the market record →Standards and authority record
Explore allCompany and systems coverage
Explore allNetwork change ledger
Explore allOfficial guidance analysisNIST makes supply-chain cyber risk an enterprise discipline—not a supplier questionnaire
Supply-chain intelligence is useful only when a sourced signal retains enough identity, time, scope, uncertainty, and operating context to support an accountable decision.
Directive update analysisThe EU CSDDD revision moves the timeline, not the supply-chain evidence problem
Supply-chain intelligence is useful only when a sourced signal retains enough identity, time, scope, uncertainty, and operating context to support an accountable decision.
Regulatory analysisEUDR turns geolocation into an operating data chain—not a map layer
Supply-chain intelligence is useful only when a sourced signal retains enough identity, time, scope, uncertainty, and operating context to support an accountable decision.
Standards analysisISO 22301 keeps recovery beyond the control-tower dashboard
Supply-chain intelligence is useful only when a sourced signal retains enough identity, time, scope, uncertainty, and operating context to support an accountable decision.
Standards analysisISO 28000 separates cargo-security management from tracking
Supply-chain intelligence is useful only when a sourced signal retains enough identity, time, scope, uncertainty, and operating context to support an accountable decision.
Framework analysisWCO SAFE links advance data to trade security without turning visibility into customs compliance
Supply-chain intelligence is useful only when a sourced signal retains enough identity, time, scope, uncertainty, and operating context to support an accountable decision.
Signal Research
Explore allSUPPLY CHAIN SIGNAL · 2026Supply-chain technology market architectureIndependent market research
Original analysis
How planning, network design, visibility, orchestration, risk intelligence, condition monitoring, and due-diligence platforms divide the market.
The research connects the provider market, normalized capabilities, authority records, operating domains, and source limitations rather than presenting a score or universal winner.
Read the report →Conditional comparisons