Supply chain risk management
Bridging Analytical Gaps
All-source intelligence tradecraft, wherever a mission needs cleared analytic judgment. Supply chain risk is where we have most recently proven it.
- SDVOSB SBA certified
- Since 2006 continuous federal performance
- Analyst-owned founded and led by analysts
The problem
Every program depends on suppliers it cannot see.
Screening tools verify the vendor you contracted with. They rarely reach the supplier behind that one — and almost never the supplier behind that.
The trace
One dependency, followed to the end.
An analyst follows a single path through the structure — supplier, fabricator, port, assembler, program — and records what can be corroborated at each step, and what cannot.
The unit
One line-replaceable unit. Ninety-four components.
Each with its own supplier. Each with its own declared country of origin. Each of those suppliers has suppliers.
- Assembly
- LRU-4417-B
- Components
- 94
- Flagged for review
- 1
A worked example. Part numbers, lot codes and figures are illustrative — the pattern they describe is not.
The component
One component. One declared origin.
- Part
- XC-7749-QA
- Lot
- 4417-B
- Declared country of origin
- United States
The part marking says what the last supplier in the chain declared. Not what is true.
The finding
Verification stopped here. We keep going.
Sub-tier illumination is where automated screening ends and analytic tradecraft begins.
Provenance assessment
XC-7749-QA| Declared country of origin | United States |
|---|---|
| Tier 1 supplier | Verified — registered, audited |
| Tier 2 supplier | Verified — registered, audited |
| Tier 3 supplier | Beneficial ownership undisclosed |
Assessment Verification chain terminates at Tier 2. Origin unconfirmed.
The finding is almost never that something came from somewhere hostile. It is that visibility stopped one tier short, and nobody mapped what was underneath.