{"id":"FR2618123124","name":"Supply Chain Command","provider":"BlueVoyant Government Services","providerSlug":"bluevoyant-government-services","status":"Agency In Process","impact":"Moderate","authType":"Agency","serviceModel":["SaaS"],"deployment":"Hybrid Cloud","businessFunctions":["Analytics","Cybersecurity & Risk Management","Data Management","Development Tools","Governance, Risk, and Compliance (GRC)","Research"],"assessor":"Lunarline, Inc.","assessorId":"137004","smallBusiness":false,"website":"https://www.bluevoyantgov.com/","description":"Supply Chain Command (SCC) is a web based end-to-end, comprehensive solution that delivers quantifiable risk reduction across your entire third-party ecosystem, higher levels of efficiency to risk management processes, and greater visibility across your supply chain.\nSCC drives cyber risk reduction at every stage of the third-party lifecycle, from sourcing & selection, on through ongoing monitoring and reassessment. The highly configurable solution set includes multiple levels of continuous monitoring based on vendor risk levels, and point-in-time risk assessments to support procurement and M&A decision making.\n\nSCC provides visibility and prioritization for the entire third-party ecosystem via validated mappings of externally facing digital infrastructure and provides continuous monitoring of third parties with identification and notification of zero-day vulnerabilities in as little as 90 minutes following disclosure. SCC further provides on demand easy to understand snapshots of acquisition or procurement targets’ cyber risk posture. ","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/BlueVoyant%20Logo.png","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2026-05-01","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2026-10-29","to":"FedRAMP In Process","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Lunarline, Inc."},"trustCenterCheck":null}