Skip to content

Getting started

Getting started with Supply Chain Mapping & Risk Illuminator

What Supply Chain Mapping & Risk Illuminator is for, who uses it, what you need before you start, and your first steps.

Applies to Supply Chain Mapping & Risk Illuminator as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.

Last reviewed 2 min readReport a problem
On this page
  1. What it is for
  2. Who uses it
  3. Before you start
  4. Steps to get started
  5. Where to go next

The Supply Chain Mapping & Risk Illuminator builds a map of an agency's suppliers and their own suppliers from contract data, supplier disclosures and the commercial data sources you choose. It shows where critical products and services depend on a single source, on suppliers in countries of concern or on unstable regions, and records the evidence behind each finding. Analysts and contracting officers use it to document risk assessments, domestic preference reviews and mitigation decisions, which stay with people.

What it is for

Agencies are expected to understand where their critical goods and services come from, apply domestic preference rules, and keep prohibited sources out of their supply chains. In practice, most agencies know their prime contractors well and their sub-tier suppliers hardly at all. Supplier information sits in contract files, questionnaires and spreadsheets, commercial data is bought separately by different offices, and when a supplier is named in a new prohibition or a region becomes unstable, finding which programs are exposed takes weeks of emails.

  • Visibility usually stops at the prime contractor
  • Supplier disclosures and questionnaires are kept in files that cannot be searched together
  • Exposure to a newly prohibited source or affected region is found by hand
  • Risk assessments and mitigation decisions are hard to evidence consistently

Who uses it

  • Supply chain risk management (C-SCRM) programs in federal civilian agencies
  • Contracting officers and acquisition staff applying domestic preference and sourcing rules
  • Program offices that own critical systems and products
  • Chief information security and acquisition officers who answer for supply chain risk
  • Inspectors general and auditors who review supply chain decisions

Before you start

  • Your organization licenses Supply Chain Mapping & Risk Illuminator from Moraph.
  • A Moraph client account in that organization, signed in.
  • Access to Supply Chain Mapping & Risk Illuminator in Moraph Apps, given by an administrator in the Moraph Portal under People and access.
  • For setup: the product administrator role.

Steps to get started

  1. Sign in at app.moraph.com with your Moraph account.

  2. Open Supply Chain Mapping & Risk Illuminator from the launcher. The first time anyone opens it, its workspace is created from the default described in Workspace reference.

  3. Check your role: what you can see and do depends on it. See Roles and permissions.

  4. Product administrators: work through Set up Supply Chain Mapping & Risk Illuminator before your team starts.

  5. Everyone else: start with Everyday tasks.

Where to go next

Was this page helpful?

Report a problem with this page
What’s the problem?
Quote the step or heading if you can. Don’t include passwords or personal records.
Only if you’d like a reply. We use it for this report and nothing else.

Need help with your own setup rather than this page? Raise a support ticket.