[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-297593-105":59,"doc-detail-297593-en":131},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":124,"head_meta":126,"extra_data":128,"updated_unix":130},105,"en","tsa-took-steps-to-reduce-security-and-privacy-risks-to-watchlist-data-final-report","TSA Took Steps to Reduce Security and Privacy Risks to Watchlist Data - Final Report","","Final report on a TSA audit assessing controls protecting watchlist data shared with external partners and stakeholders. Triggered by media reporting of an alleged January 2023 hacker access to shared watchlist data, the audit evaluates how TSA safeguards information used to vet airline passengers and employees. TSA implemented procedural changes, internalized watchlist data matching, and removed aircraft operators’ access. The report states no recommendations and notes TSA declined management comments.",{"@graph":69,"@context":123},[70,84,106],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/tsa-took-steps-to-reduce-security-and-privacy-risks-to-watchlist-data-final-report/297593/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/tsa-took-steps-to-reduce-security-and-privacy-risks-to-watchlist-data-final-report/297593.png","ImageObject",300,407,{"name":92,"@type":93},"Terk","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-11","2026-09-18",true,{"@type":102,"interactionType":103,"userInteractionCount":105},"InteractionCounter",{"@type":104},"ViewAction",17,{"@type":107,"mainEntity":108},"FAQPage",[109,115,119],{"name":110,"@type":111,"acceptedAnswer":112},"Why did the Office of Inspector General conduct this audit?","Question",{"text":113,"@type":114},"TSA uses watchlist data to vet airline passengers and employees. The audit was conducted to determine the extent of TSA’s controls safeguarding watchlist data shared with external partners after media reported an alleged January 2023 breach.","Answer",{"name":116,"@type":111,"acceptedAnswer":117},"What did TSA do to reduce security and privacy risks?",{"text":118,"@type":114},"TSA adjusted watchlist data matching and fully implemented planned procedural changes, fully assuming responsibility for vetting. TSA also issued a directive requiring destruction of unnecessary watchlist documents and later removed aircraft operators’ access by internalizing matching functions.",{"name":120,"@type":111,"acceptedAnswer":121},"Did the report include recommendations?",{"text":122,"@type":114},"No. The report states it contains no recommendations and that TSA’s actions led to no recommendations being made.","https://schema.org",{"og:url":83,"og:type":125,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":127,"canonical":83},"index,follow",{"doc_id":129,"site_id":62},297593,1789746002,{"code":4,"msg":5,"data":132},{"doc_id":129,"user_id":133,"nickname":92,"user_avatar":134,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":105,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":140,"language":141,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":142,"faqs":143,"seo_title":144,"seo_description":67,"update_tm":130,"read_time":145,"preview_page_count":4},1099525198933,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d","SENSITIVE SECURITY INFORMATION  \nOIG-26-16 July 28, 2026  \nFINAL REPORT  \nTSA Took Steps to Reduce Security and Privacy Risks to Watchlist Data (REDACTED )  \nSENSITIVE SECURITY INFORMATION  \n~~WARNING: This document contains Sensitive Security Information that is controlled under 49 CFR parts 15 and 1520. Do not disclose any par~~t ~~ofthis report to persons without a “need to know~~,”~~as defined in 49 CFR Parts 15 and 1520~~,~~ without the expressed written permission ofthe Administrator ofthe Transportation Security Administration or the Secretary ofthe Department of Homeland Security~~.  \n[www.oig.dhs.gov](www.oig.dhs.gov) OIG-XX  \n~~SENSITIVE SECURITY INFORMATION~~  \nDHS OIG HIGHLIGHTS  \nTSA Took Steps to Reduce Security and Privacy Risks to Watchlist Data  \nJuly 28 , 2026  \nWhy We Did This Audit  \nTSA uses watchlist data to vet airline passengers and employees to prevent known or suspected terrorists or other dangerous persons from boarding aircraft.  \nAccording to media reporting, in January 2023, a hacker allegedly accessed a version of watchlist data that had been shared with an external partner. We conducted this audit to determine the extent to which TSA has implemented controls to safeguard watchlist data shared with external partners and stakeholders.  \nWhat We Recommend  \nThe report does not contain recommendations.  \nOIG Access  \nDuring this audit, TSA provided timely responses to our requests for information and did not delay or deny access to information we requested.  \nWhat We Found  \nThe Transportation Security Administration (TSA) has adjusted how it conducts watchlist data matching, thereby reducing security and privacy risks related to the previous practice of sharing watchlist information with aircraft and airport operators. TSA addressed concerns associated with an alleged January 2023 breach of watchlist data by fully implementing planned procedural changes and assuming full responsibility for vetting employee and passenger populations.  \n• As part of its initial response to this alleged breach, TSA issued a security directive for all aircraft operators to destroy documents and files containing copies of watchlist data no longer needed for security measures, limited access to watchlist data, and implemented procedures to prevent unauthorized access.  \n• Shortly thereafter, TSA fully internalized watchlist data matching functions, and finalized and implemented internal programs and systems to remove all aircraft operators’ access to watchlist data. As of July 2024, aircraft operators could no longer access watchlist data because TSA performed all watchlist data-related vetting.  \nGiven TSA’s actions on this matter, we made no recommendations.  \nTSA Response  \nTSA declined to submit management comments.  \nBackground  \nThe Transportation Security Administration (TSA) oversees aviation security and protects the Nation’s transportation systems, in part, by identifying high-risk passengers to prevent known or suspected terrorists or other dangerous persons from boarding aircraft. TSA works with a global network of hundreds of external partners 1 and stakeholders, including the Federal Bureau of Investigation’s (FBI) Threat Screening Center (TSC), which manages and shares terrorist watchlist information with TSA.2  \nThe Terrorist Screening Dataset, commonly known as the “terrorist watchlist,” is a consolidated database that includes information about individuals known to be or reasonably suspected of being involved in terrorist activity. The watchlist contains subsets of information, including the No-Fly List and Selectee List, used by TSA.3 The No-Fly List is composed of individuals who are not allowed to board aircraft, and the Selectee List is composed of individuals who require additional screening before being allowed to board an aircraft.  \nTSA’s Passenger Vetting Process  \nTSA in 2008 created the Secure Flight program4 to identify and prevent known or suspected terrorists from boarding aircraft or acce","cbCaikjlBXuZjKSG","https://ap.wps.com/l/cbCaikjlBXuZjKSG","pdf",1676728,13,"English","# Why We Did This Audit\n# What We Recommend\n# OIG Access\n# What We Found\n# TSA Response\n# Background\n# TSA’s Passenger Vetting Process","[{\"question\":\"Why did the Office of Inspector General conduct this audit?\",\"answer\":\"TSA uses watchlist data to vet airline passengers and employees. The audit was conducted to determine the extent of TSA’s controls safeguarding watchlist data shared with external partners after media reported an alleged January 2023 breach.\"},{\"question\":\"What did TSA do to reduce security and privacy risks?\",\"answer\":\"TSA adjusted watchlist data matching and fully implemented planned procedural changes, fully assuming responsibility for vetting. TSA also issued a directive requiring destruction of unnecessary watchlist documents and later removed aircraft operators’ access by internalizing matching functions.\"},{\"question\":\"Did the report include recommendations?\",\"answer\":\"No. The report states it contains no recommendations and that TSA’s actions led to no recommendations being made.\"}]","TSA Took Steps to Reduce Security and Privacy Risks to Watchlist Data - Final Report | PDF",33]