Case studyFortune 100: 80% less compliance workRead the Story
RiskWatch

For Motor Carriers + Rail + Maritime + Aviation + Last-mile

One platform for FMCSA safety, TSA + C-TPAT security, and HazMat compliance across every mode.

Transportation operators face the broadest US safety + security + customs regulatory stack of any industry. FMCSA Safety Management Cycle. DOT 49 CFR 380/382 driver qualification + drug + alcohol testing. TSA Surface Transportation Security Directives (post-Colonial). CBP C-TPAT Minimum Security Criteria. PHMSA HazMat (49 CFR 171-180). TAPA FSR. RiskWatch handles all of it as one survey-based assessment platform sized for safety + compliance + security teams running multi-mode operations.

Trusted by motor carriers + 3PLs + ports + rail + cargo airlines managing FMCSA, DOT, TSA, CBP C-TPAT, PHMSA HazMat, and TAPA across truckload, LTL, intermodal, port, terminal, hub, and last-mile operations.

XPO LogisticsTE ConnectivityHalexIberdrola USAAonBose
4.8G2 Crowd·108+
4.7Capterra·76+
4.8Gartner Peer Insights·Voice of Customer

Why Safety + Compliance + Security Teams Pick RiskWatch

RiskWatch turns FMCSA, DOT, TSA, C-TPAT, and HazMat into one program.

RiskWatch runs FMCSA Safety Management Cycle, DOT 49 CFR 380/382, TSA Surface Transportation Security Directives, CBP C-TPAT MSC, PHMSA HazMat 49 CFR 171-180, TAPA FSR, ISO 28000, and AEO as one program on one platform, scored against the same controls library, and tracked through a single inspection-ready evidence trail. Built for transportation operators where one safety + compliance + security team covers every regulator, every mode, and every audit cycle, without enterprise-bank GRC overhead.

FMCSA + DOT + HazMat in one library

FMCSA Safety Management Cycle 6 elements + DOT 49 CFR 380/382 driver qualification + 49 CFR 171-180 HazMat shipping + PHMSA security plans cross-mapped. Driver files, drug + alcohol testing, BASIC scoring, and HazMat training share evidence, no parallel binders.

TSA Surface SD + C-TPAT + TAPA built in

TSA Surface Transportation Security Directives (post-Colonial era) + CBP C-TPAT Minimum Security Criteria + TAPA FSR 2024 are tracked as overlays. Cybersecurity, physical security, and supply-chain security controls map to the same access-review and vetting evidence already captured for FMCSA programs.

Sized for multi-mode + 3PL operators

VP Safety + Director of Compliance + Security Director + C-TPAT Coordinator share one platform. Pre-built libraries cut prep time. White-glove implementation in 30 days, not 6 months.

The Transportation Regulatory Landscape

Transportation compliance is multi-regulator + multi-modal. The numbers prove it.

TSA Surface Transportation Security Directives expanded post-Colonial Pipeline (May 2021) to cover freight rail, motor-carrier HazMat, and pipeline. FMCSA DataQ challenges drive Safety Measurement System (SMS) BASIC percentile management. CBP expanded C-TPAT after Colonial-era port disruption. TAPA FSR 2024 raised the bar on facility security. Each regulator wants its own evidence package.

DataQ
FMCSA DataQ challenges + Safety Measurement System (SMS) BASIC scoring updates
$200B+
annual US trucking industry revenue (American Trucking Associations estimate)
C-TPAT
CBP Customs-Trade Partnership Against Terrorism, post-9/11, expanded post-Colonial
TAPA FSR
TAPA Facility Security Requirements, 2024 revision in force

Three Domains, One Platform

Transportation risk lives in three concrete domains

RiskWatch covers all three. Each domain has a dedicated workflow, scoring model, and remediation queue. They share data so a single driver-qualification record satisfies FMCSA Safety Management Cycle, DOT 49 CFR 391 driver-qualification, 49 CFR 382 drug + alcohol testing, and a C-TPAT vetting requirement simultaneously.

Risk

Driver + Cargo + Cyber Risk

Survey-based risk assessment across driver behavior, cargo handling, vehicle integrity, and cyber posture, aligned to FMCSA SMC + ISO 28000 + SAE J3061 / ISO 21434.

  • Driver risk + BASIC scoring
  • Cargo + chain-of-custody evidence
  • Vehicle cyber + telematics register
Explore Risk Management
Compliance

FMCSA + DOT + HazMat

FMCSA 49 CFR 350-399, DOT 49 CFR 380/382 driver qualification + drug + alcohol, PHMSA 49 CFR 171-180 HazMat, FAA Part 107/121 in one cross-mapped library.

  • FMCSA inspection-ready packages
  • DOT driver-qualification evidence captured
  • PHMSA HazMat security plan ready
Explore Compliance Management
Security

TSA + C-TPAT + TAPA + Cyber

TSA Surface Transportation Security Directives, CBP C-TPAT MSC, TAPA FSR 2024, ISO 28000, AEO, and IT/OT cybersecurity across every mode and facility.

  • TSA SD-Surface overlay tracked
  • C-TPAT MSC + TAPA FSR aligned
  • OT + telematics cyber evidence
Explore Cybersecurity

The Coverage Gap

Most transportation software covers one regulator

TMS platforms cover dispatch + load tendering + visibility. Driver-compliance tools cover qualification files + drug + alcohol. C-TPAT specialty tools cover CBP minimum-security criteria. EHS platforms cover incidents + leading indicators. Each does one job. Safety + compliance + security teams still operate four parallel programs.

Platform CategoryFMCSATSA SDC-TPATTAPAHazMatMulti-mode
TMS PlatformsMcLeod, MercuryGate, TMWPartial····Yes
Driver Compliance ToolsFoley, J. J. Keller, DriverFactsYes···Partial·
C-TPAT SpecialtyTradeLink, Descartes··YesPartial··
EHS PlatformsSphera, Enablon, IntelexPartial···PartialYes
Internal Audit / ERMWorkiva, AuditBoardPartialPartialPartial···
Spreadsheets & Email······
RiskWatchThe unified inspection-ready platformYesYesYesYesYesYes

RiskWatch is the only platform covering all six transportation compliance domains: FMCSA Safety Management Cycle, TSA Surface Transportation Security Directives, CBP C-TPAT MSC, TAPA FSR, PHMSA HazMat 49 CFR 171-180, and multi-mode coordination. TMS platforms cover dispatch + visibility. Driver-compliance tools cover qualification files. C-TPAT specialty tools cover CBP minimum-security criteria. Each does one job. RiskWatch unifies all six in one survey-based assessment workflow.

How It Works

One platform. Continuous compliance across every regulator.

RiskWatch is a survey-based assessment platform. The work is structured around questionnaires that capture driver, cargo, facility, and cybersecurity posture in a consistent format, then scored against every framework you align to.

For transportation, that workflow runs continuously across FMCSA Safety Management Cycle, DOT 49 CFR 380/382 driver-qualification + drug + alcohol, TSA Surface Transportation Security Directives, CBP C-TPAT MSC, PHMSA HazMat (49 CFR 171-180), TAPA FSR, ISO 28000, and AEO. A single facility-security record scores against TSA SD-Surface, C-TPAT MSC, TAPA FSR Class A, and the operator's own corporate-security SOP simultaneously.

The same platform runs all of it, surfaces gaps before regulator arrival, assigns remediation owners, and tracks completion. Replace the four parallel tools and the spreadsheet bridge between them.

The Workflow

  1. 01
    Assess
    Survey-based questionnaires capture driver, cargo, vehicle, facility, and cyber posture across every terminal, hub, port, and mode of transport.
  2. 02
    Score
    Responses score against your chosen framework: FMCSA SMC, DOT 49 CFR 380/382, TSA SD-Surface, CBP C-TPAT MSC, PHMSA 49 CFR 171-180, TAPA FSR, ISO 28000, AEO, NIST CSF 2.0, or custom.
  3. 03
    Remediate
    Gaps become assigned tasks. Owners get deadlines. Carrier + 3PL + broker + drayage tasks cascade to the supplier portal automatically.
  4. 04
    Audit
    Evidence trails export to PDF, FMCSA new-entrant audit format, TSA reporting template, C-TPAT validation binder, or TAPA FSR audit pack. Inspection-ready in minutes.
FMCSADOTTSAC-TPATHazMat

Built For Your Role

Who uses RiskWatch in a transportation operator

VP Safety / Director of Safety

Owns enterprise-wide safety program, FMCSA BASIC percentile management, and board-level safety performance.

FMCSA Safety Management Cycle scoring continuous. CSA percentile trending visible. Crash + roadside-inspection evidence captured in one vault.

Director of Compliance (FMCSA + DOT)

Owns 49 CFR 380/382 driver-qualification + drug + alcohol testing, FMCSA new-entrant audits, and DOT-facing compliance posture.

Driver files complete + scored. Drug + alcohol testing 49 CFR 382 evidence captured continuously. New-entrant or compliance review ready.

Security Director (TSA + C-TPAT)

Owns TSA Surface Transportation Security Directive compliance, C-TPAT MSC posture, and corporate-security cross-mode program.

TSA SD-Surface evidence captured year-round. C-TPAT MSC pillars scored continuously. Annual security profile + portal updates built from live data.

Customs / C-TPAT Coordinator

Owns CBP C-TPAT MSC, AEO mutual recognition, foreign-trade-zone compliance, and trade-compliance pillar.

C-TPAT validation ready. Trade-compliance pillar evidence captured. AEO mutual-recognition equivalencies tracked.

HazMat / Dangerous Goods Manager

Owns PHMSA 49 CFR 171-180 HazMat, security plans, driver training (49 CFR 172.704), and HM-181/HM-126F endorsements.

HazMat security plans current. Driver HazMat training tracked. PHMSA OSHA + IATA + IMDG endorsement evidence captured continuously.

Operations Risk Manager

Owns multi-mode operational risk, vendor + 3PL + broker + drayage risk, and chain-of-custody assurance.

3PL + broker + drayage scoring live. Carrier-vetting program tracked. Chain-of-custody evidence captured at every handoff.

Built For Your Segment

Transportation segments we serve

Motor Carriers (Truckload + LTL)

Truckload + LTL motor carriers under FMCSA 49 CFR 350-399 + DOT 49 CFR 380/382 + PHMSA HazMat (where applicable) + state PUC oversight.

Logistics + 3PL (third-party logistics)

Third-party logistics providers + freight brokers + freight forwarders under FMCSA broker authority + C-TPAT MSC + TAPA FSR + AEO.

Maritime + Port Operators

Port authorities + terminal operators + vessel agents under USCG MTSA (33 CFR 105) + CBP C-TPAT + IMO ISPS Code + ISO 28000.

Rail Operators (Class I + II + III)

Class I, II, and III railroads + intermodal operators under FRA Part 270 SSP + TSA Surface Transportation Security Directives + PHMSA rail HazMat.

Aviation + Cargo Airlines

Cargo airlines + ground-handling agents + air-cargo terminals under FAA Part 107/121 + TSA Air Cargo Security Program + IATA DGR.

Last-mile + Courier + Parcel

Last-mile + courier + parcel carriers + 4PL coordinators under FMCSA driver requirements + state regulations + customer-imposed C-TPAT vendor programs.

Frameworks We Cover

Transportation frameworks built into the library

RiskWatch ships with pre-built libraries for every major US transportation regulation + customs program + industry standard. Map controls once. Score against the framework that matters this audit cycle.

Regulatory Frameworks

FMCSA Safety Management Cycle
49 CFR 350-399, Federal Motor Carrier Safety Regulations + Safety Management Cycle 6-element framework.
TSA Surface Security Directives
TSA Surface Transportation Security Directives (post-Colonial era) for freight rail, motor-carrier HazMat, and pipeline cybersecurity.
CBP C-TPAT MSC
Customs-Trade Partnership Against Terrorism Minimum Security Criteria, supply-chain security partnership program.
DOT 49 CFR 380 / 382
DOT driver-qualification (49 CFR 380, 391) + drug + alcohol testing (49 CFR 382) for CDL motor-carrier operations.
PHMSA HazMat 49 CFR 171-180
Hazardous Materials Regulations, packaging, marking, labeling, shipping papers, security plans, and driver training.
FAA Part 107 + Part 121
FAA aviation operator regulations, small UAS (Part 107) + commercial air-carrier operations (Part 121).

Industry + Recommended Practices

TAPA FSR 2024
TAPA Worldwide Facility Security Requirements (2024 revision), Class A/B/C facility-security standard.
ISO 28000:2022
Supply Chain Security Management Systems, international management-system standard for security in supply chains.
AEO
Authorized Economic Operator, World Customs Organization SAFE Framework trade-compliance status.
C-TPAT MSC Trade Compliance
Trade Compliance Pillar of CBP C-TPAT MSC, duty + drawback + HTS + ACE compliance evidence.
NIST CSF 2.0
Cybersecurity Framework 2.0 (Feb 2024), TSA SD-Surface aligns to NIST functions.
SAE J3061 / ISO 21434
Vehicle cybersecurity engineering, connected-vehicle + telematics + ADAS + EV-charging cyber lifecycle.

Trusted by 1,500+ risk and compliance teams

Aon
Bose
The Coca-Cola Company
Iberdrola USA
Johnson & Johnson
Pfizer
Puma North America
SeaWorld Entertainment
TE Connectivity
Aon
Bose
The Coca-Cola Company
Iberdrola USA
Johnson & Johnson
Pfizer
Puma North America
SeaWorld Entertainment
TE Connectivity
We had three program owners running FMCSA, C-TPAT, and TSA SD-Surface on three different tools, plus driver-qualification files in a fourth. Now it's one platform. FMCSA Safety Management Cycle scoring, C-TPAT MSC pillars, TSA SD-Surface overlay, and HazMat security plans all run from the same evidence vault. Our last new-entrant audit closed cleanly and we maintained C-TPAT Tier 3 status into the next cycle.
M. Kowalski
Director of Compliance, Mid-cap motor carrier · 5,800 employees · 4,100 power units · 38 terminals
Tier 3C-TPAT Tier 3 status maintained through MSC validation cycle
−12 ptsFMCSA CSA BASIC percentile improvement (Unsafe Driving)
30 daysfrom kickoff to first FMCSA SMC + C-TPAT MSC scoring live
FAQ

Frequently asked questions

Truck · Rail · Maritime · Aviation · Last-mile

See RiskWatch run an FMCSA + C-TPAT + TSA cycle live

30-minute walkthrough of the transportation library, your fleet + facility + regulator inputs, and the single evidence-trail output. No slideware, no consulting upsell.

Or call US: +1 941-500-4525

Request a Demo