What supply chain resilience software really delivers, what it cannot, and what NIS2, the CER Directive and the CSDDD actually require.
Every software category eventually gets sold as the outcome it enables rather than the work it performs. Supply chain resilience software has reached that stage. The demos show a world map with red dots, a risk score next to each supplier name, and a scenario slider. The implicit promise is that buying the platform makes the chain resilient.
It does not, and the vendors mostly know it. What this software can genuinely do is shorten the interval between an event happening and the right person knowing about it, and make a decision reproducible afterwards. What it cannot do is create a second supplier, fund a stock buffer, or redesign a part so it stops depending on a single alloy from a single region. Those are the things that actually absorb a shock, and none of them ship in a licence.