GAO offers TSA testing, vulnerability update

The Government Accountability Office (GAO) said the Transportation Security Administration (TSA) is acting upon GAO recommendations offered to enhance airport screening tests while also addressing vulnerabilities.

In order to test screening at airports, TSA personnel regularly covert tests to sneak guns and simulated bombs through checkpoints. The GAO specifically noted covert tests at five airports in its report, reviewing how test results are used.

The GAO determined the TSA’s ability to implement covert tests has improved but could do a better job of choosing what to test. The TSA also has a new process to address vulnerabilities found through the tests, but the process has not yet resolved any identified security vulnerabilities.

The GAO recommended TSA document its rationale for key decisions related to its risk-informed approach for selecting test scenarios, with officials adding TSA recently altered its processes to address the recommendation, which GAO is in the process of reviewing.

The GAO reported in April 2019 Security Operations was not fully considering risk information when determining what tests to run and issued a recommendation TSA incorporates a more risk-informed approach for selecting covert test scenarios.

TSA has since begun selecting scenarios for Security Operations’ tests using an analysis tool that incorporates information from TSA risk assessments.

The Department of Homeland Security requires agencies to use risk information to make decisions, officials said, and TSA issues annual risk assessments of threats that its offices should consult when making risk-based decisions.