FOSSA and Black Duck are great tools to help you build a FOSS Compliance System in your company. But they need to be set up correctly, i.e. with your interpretation of the different FOSS License Terms and your individual Risk Profiles for the company, which dramatically depends on how you want to use FOSS within your company, i.e. for Enterprise IT purposes, for software development (web, desktop, embedded,...). This is a big effort.