DHS OIG Finds Gaps in TSA Airport-Worker Vetting Controls

A Department of Homeland Security Office of Inspector General (DHS OIG) review identified weaknesses in the Transportation Security Administration’s (TSA) vetting of airport workers. The screening process covers workers such as baggage handlers, restaurant employees, and shop attendants, and includes identity verification, security threat assessment, and checks related to whether an applicant is legally present in the United States. When a person fails the assessment, TSA can issue a “Do Not Issue” notice. The findings raise operational and oversight concerns because airport access decisions depend on accurate applicant information and timely completion of required checks.

Auditors found that, between fiscal years 2022 and 2024, some workers received badges before TSA completed security threat assessments that resulted in “Do Not Issue” notices. The number of affected workers was redacted. In one documented case, a worker retained an active badge for 177 days before it was revoked. The report attributed many lapses to airport operators or applicants not responding to TSA requests for additional information or corrections to applicant records. This points to process-control challenges at the interfaces among TSA, airport operators, applicants, and the systems used to collect and verify screening data.

The review also cited mismatches between biographical information collected by airport operators and the information TSA used to screen applicants, creating a risk that the agency could assess the wrong person or miss disqualifying information. In some cases, workers who supplied inaccurate Social Security numbers received access to restricted airport areas where the most sensitive operations occur. Auditors also found that some workers who were required to participate in the FBI’s Rap Back program were not enrolled. Rap Back is intended to notify airport operators if an enrolled worker commits an offense that could disqualify that person from the position, making enrollment and ongoing record accuracy important components of continued vetting.

For GovCon firms, the report identifies capability areas that may be relevant to future TSA or airport-security requirements, including screening workflow improvements, identity-data validation, case management for missing information, compliance monitoring, and Rap Back enrollment support. These are potential areas of need, not announced procurements: the review provides no contract value, solicitation, procurement timeline, or named vendor. TSA has agreed to implement all four recommendations, including improving enforcement and record accuracy. The findings also underscore the role of enforcement: TSA may require corrective action plans, issue fines, or suspend airport operations for premature badge issuance, but auditors found 19 violations across 14 operators that resulted in no penalties.

• TSA screening includes identity verification, security threat assessment, and checks related to an applicant’s legal status in the United States.
• From fiscal years 2022–2024, some airport workers received badges before TSA completed assessments that resulted in “Do Not Issue” notices; the number of workers was redacted.
• One worker retained an active badge for 177 days before the badge was revoked.
• Auditors linked many lapses to unanswered TSA requests for additional information or corrections to applicant records.
• Biographical information collected by airport operators did not always match the data TSA used, creating a risk of screening the wrong person.
• Workers who supplied inaccurate Social Security numbers were granted access in some cases to restricted areas containing the airport’s most sensitive operations.
• Some workers required to join the FBI Rap Back program were not enrolled, weakening ongoing notification of potentially disqualifying offenses.
• TSA counseled one operator, required corrective action plans from two, and issued four warnings to three others; 19 violations across 14 operators resulted in no penalties.
• TSA agreed to implement all four DHS OIG recommendations, including steps to improve enforcement and record accuracy.
• Potential contractor capabilities include screening workflow support, identity-data validation, compliance monitoring, and Rap Back enrollment assistance; no solicitation or contract details were announced.