ABSTRACT

Review of FAA's Progress in Enhancing Air Traffic Control Systems Security   [open pdf - 328KB]

"This report presents the results of our review of FAA's renewed initiatives in addressing air traffic control (ATC) systems security weaknesses discussed in our FY 2007 audit report of the Department's information security program. [...] Our objectives were to determine FAA's progress in correcting security weaknesses previously identified in the air traffic control system by assessing (1) the status of BCP [business continuity plan] implementation and (2) the enhanced methodology used in the certification and accreditation of air traffic control systems security at operational sites. This performance audit was conducted in accordance with generally accepted government auditing standards prescribed by the Comptroller General of the United States and included such tests as we considered necessary to detect fraud, waste, or abuse. Details of our scope and methodology can be found in Exhibit A. FAA has designated the William J. Hughes Technical Center in Atlantic City as the recovery site where operations would be resumed if any en route center became inoperable. It has made good progress in preparing the Technical Center to serve as the recovery site, such as establishing a duplicate en route system environment on-site and installing additional emergency power at the center. Yet several unresolved technical challenges, staffing issues, and funding requirements could delay recovery site readiness. Beyond this, FAA has not assessed how activating the recovery plan during an emergency would affect air travel and the economy across the country-a key concern in HSPD-7. Further, while FAA has enhanced the process of reviewing ATC systems security, the reviews were not properly carried out to ensure security protection of operational ATC systems."

Report Number:
Report No. FI-2010-006; FI-2010-006
Publisher:
Date:
2009-11-02
Copyright:
Public Domain
Retrieved From:
United States Department of Transportation Office of Inspector General: http://www.oig.dot.gov/
Format:
pdf
Media Type:
application/pdf
URL:
Help with citations