Latest Announcements
Trial versions of the C&A DocWriter are now available.  Join FISMAcontrols.com for free to download the trial version of the Windows client, or access our demo version of the web module live.
SANS Institute - 20 Critical Security Controls
SANS Institute releases Version 2.3: November 13, 2009 - Twenty Critical Security Controls for Effective Cyber Defense: Consensus Audit Guidelines http://www.sans.org/critical-security-controls/cag.pdf.  
CNSS Instruction No. 1253
Committee on National Security Systems (CNSS) releases Instruction No. 1253 - Security Categorization and Contol Selection for National Security Systems http://www.cnss.gov/Assets/pdf/CNSSI-1253.pdf.    
Starpoint Software Announces FISMAcontrols.com Sneak Preview
December 5, 2009
Starpoint Software Inc. is proud to announce the sneak preview of their new Information Assurance control web site - FISMAcontrols.com.  The site will support unlimited free access for this preview period only!
C&A DocWriter is backed by a proven history of commercial software development for science and engineering markets. Since 1994, Starpoint Software Inc. has been developing and marketing and critically acclaimed and commercially successful Windows software applications for the demanding customers in science and engineering. Out customer base ranges from small firms to Fortune 500 companies, from universities to government agencies in over thirty-five countries around the world.

Get Started with No Risk!  Download our C&A DocWriter Windows client free trial version or try our C&A DocWriter Web Module live!

Sign-in now to download the C&A DocWriter Windows client trial version, or try out our special demo version the C&A DocWriter Web Module. Not a member of FISMAcontrols.com? Sign-up now for free access to the C&A DocWriter web module running live in demo mode and free trial downloads.

Download our animated training video on the C&A DocWriter Web Module.

Buy with no risk! This is your chance to test drive all of the features available to you in our web-based Certification & Accreditation toolsuite.

C&A DocWriter Enterprise Level Reporting

with Microsoft SQL Server Reporting Services

One of the advantages of using a open-database software toolsuite like C&A DocWriter is the ability to create your own custom reports using business intelligence tools like Microsoft's SQL Server Reporting Services (SSRS).

SSRS is a powerful tool to create custom reports from your database.  Build reports using the report designer.  Once deployed, reports can show real time data analysis in tables and graphs from the convenience of your web browser.  SSRS reports integrate with the C&A DocWriter Web Module for easy access.  Reports can be exported to a variety of formats including Microsoft Excel and Adobe Acrobat.

Best of all is that there are no additional costs.  MS SQL Server includes SSRS.  Because reports are web based, it is only natural to integrate your reports into the C&A DocWriter Web Module, however, you can use SSRS completely independently of C&A DocWriter if you choose.

Getting Started

Microsoft choose to change the way reports were created and deployed in SQL Server 2005 and SQL Server 2008.  Both work with C&A DocWriter, but the examples below were created for the 2005 version.

Start by installing SSRS if you have not done so already.  SSRS is actually a web site, so it should be hosted on your web server if that is not the same as your database server.

Reports are stored in RDL files (for 2005).  You create and edit RDL files in Microsoft Visual Studio or Microsoft Business Intelligence Studio (a version of Visual Studio limited to SSRS required features).  From the link below, you can download the RDL files for the sample reports you see here.

SSRS is one of the easier reporting tools to use but there is a learning curve.  If your organization does not have experience with SSRS, it is often not difficult to find short-term contractors with experience.

Other Business Intelligence Tools


Also remember that you can use other BI reporting tools such as Business Objects or Crystal Reports to achieve the same goals.

Sample C&A DocWriter SSRS Reports

Below are some of examples of the reports you can create using Microsoft SQL Server Reporting Services (SSRS).  SSRS displays all reports in a web browser.  Reports can then be exported to a variety of formats, including Adobe Acrobat as presenting here.

Download Component Level POA&M Sample Report PDF
This report shows how you can create highly customized Plans of Actions and Milestones (POA&M) reports.
Download Control Result Chart For System Sample Report PDF
This report shows the number and percentages of controls in each of four status states - Unspecified, Compliant, Non-Compliant, and Not Applicable.
Download Control Result Charts by Asset Sample Report PDF
This report shows the number and percentages of IA controls in each of the four status states organized by asset.
Download Control Result Failures Sample Report PDF
This report show which controls have failures and the count of control failures across all systems.
Download Control Result Pie Charts For System Sample Report PDF
This report shows the number and percentages of IA controls in various states for a system, grouped by status and risk level.
Download DIACAP Scorecard For System Sample Report PDF
This report shows how you can create a nicely formatted DIACAP scorecard using Microsoft Reporting Services.
Download Issues By Role Sample Report PDF
This report shows the issues for each role.
Download POA&M List Sample Report PDF
This report shows another method of presenting your Plans of Actions & Milestones (POA&M).
Download System Identification Profile Sample Report PDF
This report shows how you can create a traditional System Identification Profile (SIP).
Download System Identification Profile With Charts Sample Report PDF
This report shows how you can create a traditional System Identification Profile (SIP) with additional charts and graphs to show the states of IA controls.
Download Tasks By Role Sample Report PDF
This report shows how you can create a list of tasks assigned to each role.