Audit of IT Management Challenges Continues in TSA's Security Technology Integrated Program (Redacted).pdf

We conducted this audit to determine whether the Transportation Security Administration (TSA) planned, implemented, and managed its Quiet Skies program to accomplish its mission as intended. The program uses enhanced screening procedures on higher risk passengers, and Federal Air Marshal Service (FAMS) officers observe these individuals at airports and during flights. TSA did not: develop performance goals and measures to demonstrate program effectiveness, or always adhere to its own Quiet Skies guidance. Without sufficient metrics, analysis, and controls, TSA cannot be assured the Quiet Skies program enhances aviation security through FAMS as intended.

(Redacted): Summary Report on Audits of Security Controls for TSA Information Technology Systems at Airports (Redacted)

The Aviation and Transportation Security Act of 2001 requires the screening of all passengers and property transported on passenger planes. The Act gives the Transportation Security Administration (TSA) responsibility for overseeing aviation security and ensuring the safety of the air-traveling public. TSA continues to improve air cargo security using a risk-based, layered approach to enhance security without impeding the flow of commerce. The Federal Aviation Administration created the Known Shipper Program (KSP) before the September 2001 terrorist attacks and the creation of the Department of Homeland Security. The KSP is one of TSAs key components for strengthening air cargo security. The program establishes procedures for differentiating between shippers that are known and unknown for air carriers and indirect air carriers who tender cargo for air transportation. Title 49 of the Code of Federal Regulation provides that, with limited exceptions, domestic and foreign passenger aircraft operators, all-cargo aircraft carriers, or indirect air carriers, also known as freight forwarders, operating under an approved TSA Standard Security Program may tender cargo for transport on passenger aircraft only from shippers that are verified as known.

Summary report on audits of security controls for TSA information technology systems at airports (redacted)