The Integrated Security Management System (ISMS) is a commercially available Microsoft® Windows® based product that allows the user to control all aspects of an information security system.  It runs on Windows 98®, Windows NT® 4.0, Windows 2000®, Windows XP®, and Windows Vista® operating systems and utilizes Windows Server 2000 or later versions for the Terminal Services functionality.  The package accesses and manipulates a proprietary database schema that runs on Microsoft® SQL Server 2000, MSDE 2000, Microsoft® SQL Server 2005, or SQL Express 2005.

ISMS is based on functionality required by the current National Industrial Security Program Operating Manual (NISPOM) and the Joint Air Force - Army - Navy Manual (JAFAN).  It is a complete set of modular and fully integrated productivity tools that automate the most time consuming and error prone tasks associated with security management.  By combining the speed and power of computing technology with the reliability and efficiency inherent in bar code scanning, ISMS enables you to:

• Centralize and organize your security functions with one convenient, easy to use system;
• Comply with NISPOM requirements and other security guidelines;
• Meet requirements more quickly, accurately, and efficiently, with less paperwork;
• Eliminate errors through powerful automatic cross-checks;
• Save time, money, and manpower by expediting security management tasks;
• Support Collateral, Special Access, and SCI programs;
• Operate as a stand-alone PC or a large multi-user system;
• Exchange data between ISMS and foreign database.

Document Control All Classified material handling functions performed by a document control center are handled by the Document Control Module.  Document history allows you to track every document from the moment it enters your organization until its final disposition.	Personnel Management The Personnel Module consists of six basic screens which manage the information related to all aspects of personnel security.  This module may contain information for employees, consultants, and special category visitors, to include clearance and briefing history.
Outgoing Visits The Outgoing Visit Requests Module enables you to retrieve clearance and briefing information from the personnel record, eliminating errors and duplicate entries; check the completed Visit Request to ensure all required data is entered.	Facilities Management The Facility Management Module of ISMS maintains the files containing information on the ISMS user facility and the external facilities and organizations with which the user facility interacts with.
Containers The Storage Container Management Module provides efficient record keeping of the various containers used to store classified material within a facility, the personnel who have access to those containers, and when combination changes are required.  The Storage Container Management Module is designed to help the document control staff ensure that classified material is stored in appropriate containers.  For those customers in large organizations who have responsibility for physically managing the distribution and inventory of the actual containers, this module gives them an inventory of their containers and the status of those containers.	Contracts The Classified Contract Management Module of ISMS supports the management of classified contracts and the issuance of the form DD 254.  DD-254 management allows the input, updating, and printing of DD-254s that are received by the user facility from a government organization or a higher tier contractor, or are prepared for subordinate contractors by the user facility.  The following established reports are available with the Classified Contract module: DD-254, Classified Contracts, Classified Subcontracts, Subcontract Numbers by Contract Number, Contracts and Subcontracts by Special Access Program(s), and Subcontracts by Subcontractors' Names.
Incidents and Violations The Incidents and Violations Module records information relating to a failure to properly follow security procedures.  The information consists of both formatted data elements and free form textual material.  The various milestones in recording and investigation of the situation can be tracked and completed in a timely matter.	Plant Protection The Integrated Security Management System (ISMS) Plant Protection subsystem allows the security professional responsible for physical plant security to maintain a personnel roster of security personnel (including their qualifications), and a complete schedule including multiple shifts, personnel, and duty location, and a set of scheduled or as-needed logs.
Locks and Keys The Locks and Keys Module gives the Security Manager the capability of maintaining a list of all Key Sets and associated Locks for those Key Sets.  It also enables the Security Manager to assign individual keys to personnel and maintains a history of all transactions related to a particular key.	Known Visitor Control The Known Visitor Control Module streamlines the processing of incoming visit requests and visitors.  It cross checks visit clearances and briefings against received Visitor Authorization Letters.  Allows the easy management of conferences, printing visitor badges you design or use laminated badges, handling employee temporary badging, and accessing visitor data.
Visit Registration The visitor's Visit Authorization Letter information is retrieved during visitor registration.  The visitor information may be updated, and after visitor ID review, the registration is completed.  Badging of the visitor either records the assignment of a permanent visitor badge to the visitor for the visit or prints a temporary one-day paper badge containing visit information.  A record of each visit and its associated information is maintained.	Visit Requests The Visit Authorization Requests Module allows input of the information contained on a Visit Authorization Letter received from an external facility.  Common information is input first and then detail information for each visitor is added.  Information indicating visitors who require special handling can be entered and then promptly displayed during visitor registration.
Conference Registration The Conference Registration Module allows attendance recording of any individuals scheduled to attend or are currently attending conferences.	Conference The Conference Processing Module enables you to define conference activity and record conference attendees.  Visit Authorization Letters may be processed and clearances checked.  Special conference badges may also be used.
Calendar The Calendar Module displays a quick synopsis of items requiring attention, to include facilities whose clearance is expiring, visit requests needing updating, and personnel clearances and briefings due for review.	ISMS uses modular subsystems to manage document control, personnel clearance management, incoming or outgoing visitor control and authorization requests, facility management, container management, lock and key management, classified contract management, plant protection, and calendar features.

ISMS, with bar code technology, provides the following capabilities:

• Complete audit trails;
• Rapid and efficient periodic inventor;
• Accurate Records;
• Quick, efficient, and responsive transactions;
• Notification on overdue actions;
• Improved accountability;
• Need-To-Know verification before transfer/transmittal;
• Security to limit access to an ISMS module and function by user;
• Extensive security features to protect records.

For Wide Area Networks (WANs) ISMS recommends Microsoft Terminal Services.  Terminal Services enables the client to maintain the program and database in one central location, while providing access to users anywhere in the world.  It uses the same networking paths as a standard Internet connection, but offers the additional security of the Terminal Server.

Several optional subsystems are available:  AIS Manager enables the manager to distribute the workload for compliance with Chapter 8 of the NISPOM, and generate a Protection Profile based on a user-configurable template; ISMS Query enables read-only Internet Explorer access to browse the database from machines that do not have a client installation of ISMS.