The Importer Security Filing, known as ISF or 10+2, is the data submission US Customs and Border Protection requires before ocean cargo is loaded at the foreign port. The rule is simple to state and operationally demanding to meet: ten data elements from the importer and two from the carrier, filed at least 24 hours before the cargo is laden aboard the vessel destined to the United States. Late, inaccurate, or incomplete filings expose the importer to liquidated damages of up to $5,000 per violation, plus cargo holds and examinations that cost more than the penalty.

Before an ocean import program can be ISF-compliant at scale, a few operational factors decide whether the filings will be on time and accurate:

  • Where each of the ten importer data elements actually originates in the supply chain
  • How early suppliers and consolidators provide stuffing location and consolidator details
  • Whether the filing timeline is tied to the origin cargo cutoff or left to run separately
  • Who files: the importer directly, the customs broker, or a mix across lanes
  • How amendments and updates are handled when booking details change
  • Bond coverage for ISF liability under the continuous bond
  • Filing volume and whether the process runs on data feeds or manual entry
  • How ISF performance is measured and reported inside the import program

ISF looks like a customs formality and behaves like a data supply chain problem. Most of the ten elements do not live with the importer. They live with the overseas supplier, the consolidator, and the freight partner: who manufactured the goods, where the container was stuffed, who stuffed it. The importer is legally responsible for filing data it does not naturally possess, on a deadline set by someone else's vessel schedule.

That mismatch is why ISF penalties cluster on importers with fragmented origin operations. When every supplier ships through a different forwarder and no one owns the data chain, filings run late or carry placeholder data, and the exposure compounds silently across hundreds of shipments a year. The fix is structural, not clerical: put the filing inside the same workflow that controls the cargo.

WCM Worldwide files and manages ISF as part of its integrated customs brokerage service, inside the same workflow that books and controls the ocean freight.

What the ISF 10+2 Filing Actually Is

The ISF applies to ocean cargo arriving in the United States by vessel. The importer, or its agent, files ten data elements. The carrier separately files two: the vessel stow plan and container status messages. The combination gives CBP a security picture of the cargo before it is loaded at the foreign port, which is the point of the rule: the screening happens before lading, not on arrival.

Filing Party Data Elements
Importer (10 elements) Seller, buyer, importer of record number, consignee number, manufacturer or supplier, ship-to party, country of origin, commodity HTSUS number, container stuffing location, consolidator
Carrier (2 elements) Vessel stow plan, container status messages

Two nuances matter operationally. The container stuffing location and consolidator may be filed later than the other eight, no later than 24 hours before the vessel arrives in the US, because CBP recognizes these details firm up late. And four elements, manufacturer, ship-to party, country of origin, and HTSUS number, may initially be filed on a best-available basis and then updated as the data firms up. Flexibility is not exemption: the update obligation is real, and stale placeholder data is a violation pattern CBP recognizes.

WCM structures its ISF work around these timing layers, filing the core elements against the booking data at origin cargo cutoff and tracking the flexible elements to their own deadlines rather than treating the ISF as a single one-time event.

The Timing Rule That Drives Everything

The ISF must be accepted by CBP at least 24 hours before the cargo is laden aboard the vessel at the foreign port. Not 24 hours before sailing, and not 24 hours before arrival: before lading. In practice, that ties the true ISF deadline to the origin terminal's container gate-in and loading operations, which run days before the published sailing date.

The lading that starts the clock is the lading onto the vessel that carries the cargo to the United States. On a direct routing, that is the origin port. On a transshipment routing, it is the last foreign port, where the container is loaded onto the vessel that proceeds to the first US port of discharge. At the latest, the ISF has to be accepted 24 hours before that lading takes place.

Reading that outer limit as the working deadline is where transshipment lanes catch importers out. Carriers run do-not-load screening at the origin terminal, and a container can be held at the first port long before it ever reaches the hub. The rule sets the last permissible moment. A disciplined program works to an earlier one.

The operational consequence is that ISF data has to be complete around the same time as the origin cargo cutoff. An import program that collects ISF data after the container gates in is structurally late, and the filing either misses the window or goes in with placeholder data. Both are violations.

This is why WCM anchors the ISF milestone to the booking and cutoff calendar it already controls as the freight operator. The filing deadline is not tracked as a separate compliance calendar. It is a checkpoint inside the same operational timeline that moves the cargo, with exceptions escalated while the container is still at the yard. On transshipment lanes, WCM tracks the origin cutoff and the connecting vessel at the last foreign port together, so the filing is accepted well before either event can turn into a hold.

Where the Ten Elements Actually Come From

The importer of record number and consignee number come from the importer's own records. Almost everything else originates overseas. The seller, manufacturer, country of origin, and ship-to party come from the purchase order and the supplier. The stuffing location and consolidator come from whoever physically loads the container, which on consolidated cargo means the consolidation facility, and on factory-loaded containers means the supplier's own site.

The HTSUS number deserves its own discipline. The ISF requires classification to at least the six-digit level, and the classification filed on the ISF should match the classification filed on the entry. Divergence between the two is a data quality signal CBP can see. Maintaining one classification file per importer program, used by both the ISF and the entry, removes the divergence at the source.

On multi-vendor programs, this data problem is exactly the problem that PO management solves. When every purchase order carries its supplier, origin, and classification data from the start, the ISF is assembled from records that already exist rather than chased from suppliers shipment by shipment. WCM runs the two disciplines as one: the PO data that plans the cargo is the data that files the ISF.

Penalties, Holds, and What CBP Enforcement Actually Looks Like

The formal exposure is liquidated damages of up to $5,000 per violation for late, inaccurate, or incomplete filings, assessed against the importer's bond. Mitigation is available, particularly for first violations and documented compliance programs, but mitigation is a remedy, not a strategy.

The operational exposure is usually larger than the penalty. Cargo with no ISF on file can be refused loading at origin under a do-not-load instruction. Cargo arriving with late or mismatched filings draws holds and examinations, and an exam on a consolidated container delays every purchase order in the box. For importers running lean inventories, the exam delay costs more than the liquidated damages ever will.

CBP also reads ISF performance as a signal of importer discipline. A clean filing history supports broader trusted-trader positioning, while a violation pattern invites scrutiny across the rest of the import program. ISF is the most visible recurring compliance event an ocean importer generates, simply because it happens on every shipment.

WCM manages this exposure by treating the filing metrics as program KPIs: filings accepted on time, filings amended, and filings that drew holds are reported alongside the freight performance on the same cadence, through the same ocean freight program reporting the importer already reviews.

ISF in Consolidation and Multi-Vendor Programs

Consolidated cargo raises the ISF stakes in both directions. Each shipment in a consolidated container carries its own ISF obligation, so one container can represent many filings, each with its own supplier data. A single non-compliant vendor inside the box can draw an exam that delays every vendor's cargo. The container is shared. The risk is shared with it.

The same structure that makes consolidation efficient also makes ISF compliance manageable. The consolidation point knows the stuffing location and the consolidator identity by definition, because it is both. The booking windows and cargo cutoffs that discipline the vendors also discipline the data. A managed consolidation program produces ISF data as a byproduct of its own operations.

WCM runs ISF for its buyer's consolidation programs on exactly this basis. The consolidation facility's receiving records supply the stuffing and consolidator elements, the PO records supply the supplier and classification elements, and the filings go in against the same cutoff calendar that closes the container. The importer sees one compliance view across every vendor in the program.

Building an ISF Compliance Discipline That Scales

Importers that file a handful of ISFs a year can manage by attention. Importers filing hundreds or thousands need structure. Four elements make the discipline scale.

  • One data chain: the PO, booking, ISF, and entry all built from the same records, so accuracy is inherited rather than re-keyed
  • One calendar: the ISF milestone anchored to the origin cargo cutoff inside the freight timeline, not tracked on a separate compliance spreadsheet
  • One classification file: HTSUS maintained at the importer program level and used consistently across ISF and entry
  • One scoreboard: on-time filing rate, amendment rate, and hold incidence reported with the freight KPIs every cycle

The common thread is integration. Every handoff between the freight workflow and a separate compliance workflow is a place where data is re-keyed, timing is lost, and accountability blurs. Importers with the cleanest ISF records are almost always the ones whose customs broker and freight operator are the same accountable team.

Why ISF Filings Fail

Most ISF compliance problems are preventable. The common failures include:

  • Collecting ISF data after the container has gated in at origin, guaranteeing late or placeholder filings
  • Measuring the deadline against the feeder sailing on transshipment routings rather than the lading at the last foreign port
  • Chasing supplier data shipment by shipment instead of capturing it once at the purchase order level
  • Filing ISF classifications that diverge from the entry classifications, creating a visible data quality signal
  • Treating the flexible elements as optional rather than as obligations with their own update deadlines
  • Splitting the ISF between a standalone filer and a separate freight forwarder, with no shared booking data or cutoff calendar
  • Leaving vendor ISF data quality out of vendor compliance programs on consolidated cargo
  • Ignoring amendment discipline when bookings roll or routings change, leaving stale filings on record
  • Measuring nothing, so the first visibility of a violation pattern is the liquidated damages claim itself

These failures rarely appear as a single dramatic event. They compound. A late data chase produces a placeholder filing, the placeholder is never updated, the mismatch draws a hold, and the hold lands on a consolidated container where one vendor's data problem delays ten vendors' cargo. By the time the penalty arrives, the operational cost has already been paid several times over.

How WCM Worldwide Handles ISF Compliance

WCM runs ISF as an integrated discipline inside the freight program, filed by the same team that books and controls the cargo.

  • ISF filing through WCM's integrated customs brokerage, built from the booking and PO records rather than re-keyed from documents
  • Filing milestones anchored to origin cargo cutoffs inside the operational timeline, with exceptions escalated while the container is still at the yard
  • Flexible elements tracked to their own deadlines, with amendment discipline when bookings roll or details firm up
  • One classification file per importer program, used consistently across ISF and entry to eliminate divergence
  • Supplier and origin data captured at the purchase order level through PO management, so the ten elements exist before the shipment does
  • Consolidation program ISF built from the consolidation facility's own receiving records for stuffing location and consolidator elements
  • Vendor ISF data quality enforced inside vendor compliance, with exception reporting to the importer each cycle
  • ISF KPIs, on-time rate, amendment rate, and hold incidence, reported alongside ocean freight performance on the same program cadence
  • A global network of 496 offices in 97 countries, placing WCM teams at the origins where the ISF data is actually created

The value of this structure is that the filing is produced by the workflow that controls the cargo, so timing and accuracy are inherited rather than chased. WCM's leadership team carries 100+ years of combined experience built at FedEx Logistics, CEVA, COSCO, CMA CGM, and Kuehne+Nagel, running import programs where compliance performance was measured as seriously as freight performance. ISF is not paperwork that follows the shipment. It is the first deliverable of a well-run ocean import program.

Final Considerations for US Importers

ISF compliance matters most when import volume is high, origins are fragmented, and cargo runs through consolidation. The program either produces accurate filings as a byproduct of disciplined operations, or it produces violations as a byproduct of fragmented ones. The penalty exposure is visible. The hold and exam exposure is larger.

A practical checklist for evaluating ISF readiness on an ocean import program:

  • Is the ISF milestone anchored to the origin cargo cutoff inside the freight timeline?
  • Are the ten elements captured at the purchase order level rather than chased per shipment?
  • Does one classification file serve both the ISF and the entry?
  • Is amendment discipline in place for rolled bookings and firmed-up details?
  • On consolidated cargo, is vendor ISF data quality part of vendor compliance?
  • Are on-time rate, amendment rate, and hold incidence measured and reported?

If your ocean import program files ISFs at volume, or has absorbed penalties and holds it could not trace to a root cause, the WCM customs team can review your filing structure against the framework above. The conversation typically starts with annual shipment count, origin mix, current filing responsibility, and the last twelve months of holds and amendments.

Frequently Asked Questions

What is an ISF filing in ocean freight?

The Importer Security Filing, known as ISF or 10+2, is a data submission required by US Customs and Border Protection for ocean cargo arriving in the United States. The importer or its agent files ten data elements covering the parties, origin, classification, and container stuffing details of the shipment, and the carrier files two more: the vessel stow plan and container status messages. The filing must be accepted at least 24 hours before the cargo is laden aboard the vessel destined to the United States at the last foreign port, which makes it a pre-loading security screen rather than an arrival formality.

What are the 10 data elements of the ISF?

The ten importer elements are the seller, the buyer, the importer of record number, the consignee number, the manufacturer or supplier, the ship-to party, the country of origin, the commodity HTSUS number to at least the six-digit level, the container stuffing location, and the consolidator. The stuffing location and consolidator may be filed as late as 24 hours before the vessel arrives in the US, and four elements may initially be filed on a best-available basis with an obligation to update. The carrier separately files the vessel stow plan and container status messages.

What is the penalty for a late or inaccurate ISF?

CBP may assess liquidated damages of up to $5,000 per violation for late, inaccurate, or incomplete ISF filings, claimed against the importer's bond. Mitigation is available in many cases, particularly for first violations and importers with documented compliance procedures. The operational consequences frequently cost more than the penalty: cargo can be refused loading at origin, and arriving cargo with late or mismatched filings draws holds and examinations that delay every shipment in a consolidated container.

When does the ISF have to be filed?

The ISF must be accepted by CBP at least 24 hours before the cargo is laden aboard the vessel destined to the United States. On transshipment routings, that lading happens at the last foreign port, where the container is loaded onto the vessel that proceeds to the first US port of discharge, so the latest permissible filing point sits 24 hours before that event rather than 24 hours before the feeder sailing. Because container loading runs days ahead of the published sailing date, the practical deadline is tied to the origin terminal's cutoff calendar rather than to the sailing itself. An import program that collects ISF data after the container gates in is structurally late, which is why the filing milestone should sit inside the freight timeline at the cargo cutoff rather than on a separate compliance calendar.

Who is responsible for filing the ISF, the importer or the forwarder?

Legal responsibility sits with the importer of record, regardless of who transmits the filing. The importer may file directly or authorize an agent, typically a licensed customs broker, to file on its behalf. The structural choice that matters is whether the filer works from the same booking and purchase order data that controls the cargo. When the customs broker and the freight operator are the same accountable team, timing and accuracy are inherited from the operational workflow instead of depending on document handoffs between separate vendors.

How does ISF work for consolidated containers with multiple vendors?

Each shipment inside a consolidated container carries its own ISF obligation, so one container can represent many filings, each depending on a different vendor's data. One vendor's late or inaccurate filing can draw an exam that delays every purchase order in the box. A managed consolidation program turns this risk around: the consolidation facility supplies the stuffing location and consolidator elements from its own receiving records, the purchase order data supplies the supplier and classification elements, and vendor data quality is enforced through the same compliance discipline that manages booking windows and cargo cutoffs.