Illuminate, score, and mitigate supply chain risk across every vendor, product, and program.

Fortress C-SCRM is a comprehensive, collaborative risk management platform, supported by processes and services, built to identify, analyze, resolve, and monitor the supply chain risks that threaten missions, critical cyber assets, and operational effectiveness. It directly supports the Navy's Cyber Ready initiative and implements the OSD SCRM Taxonomy, from hardware counterfeit parts and FOCI to cyber compromise and operational security.

Mission-ready today

Currently holds ATO and operates in DOD IL5 and IL6 environments, delivering vendor and product-level risk illumination, findings dashboards, and POA&M workflows from initial finding through closure.

Compliance out of the box

DoDI 8500.01, DoDI 4140.67, NIST SP 800-53 / 800-161, and NDAA FY19 Section 889.