Report on TSA security control procedures released by GAO

The Government Accountability Office (GAO) released a report on Tuesday that found that the Transportation Security Administration (TSA) airport perimeter and access control security would benefit from a risk assessment and strategy updates.

The report noted that the TSA has made progress since the last such report in 2009, including developing a Comprehensive Risk Assessment of Perimeter and Access Control Security – risk assessment of airport security – in May 2013. The TSA, however, has not updated the assessment to reflect changes in the airport security risk environment. This is reflected by the TSA’s subsequent determination of risk from an insider threat, including the potential of rogue aviation workers exploiting their credentials, access and knowledge of security procedures throughout the airport for personal gain or to inflict damage on travelers.

The report also found that the TSA has not comprehensively assessed the vulnerability of TSA-regulated airports system-wide though its joint vulnerability assessment (JVAs) process, which is one of three components that determine risk. From FY 2009-15, the TSA conducted JVAs at 81 of the 437 commercial airports nationwide, which officials say is due to budget constraints.

The GAO report recommended that the TSA update its risk assessment of airport security, develop and implement a method for conducting a system-wide assessment of airport vulnerability, and update its National Strategy for Airport Perimeter and Access Control Security.