As outlined in Biometric Update, a recent Department of Homeland Security (DHS) inspector general audit has uncovered significant vulnerabilities in the Transportation Security Administration’s (TSA) controls over access to sensitive information, raising concerns about potential unauthorized access and data compromise.
The audit identified critical deficiencies in TSA's IT access management, including improper handling of privileged computer accounts, creation of service accounts without proper approval, and failure to consistently disable accounts for former employees. These weaknesses could enable attackers to compromise TSA's network, access sensitive data, and cause substantial damage to agency operations. This follows a separate report that found a contractor could extract passenger driver's license and passport images from biometric screening equipment without TSA's knowledge. While the two audits examined different issues, together they highlight broader concerns about TSA's ability to safeguard sensitive information, including biometric and identity data processed through its expanding airport screening infrastructure. The findings have prompted calls for stronger protections against unauthorized use and retention of biometric information, with privacy advocates urging travelers to exercise their right to decline facial comparison at TSA checkpoints.
Source: Biometric Update
