How can TSA ensure the security of personal information it collects?
TSA takes a number of steps to ensure the security of personal information it collects about individuals. TSA’s Office of Privacy Policy & Compliance collaborates with the Chief Information Security Office (CISO) to work with program offices during the design and implementation of systems to ensure compliance with the Federal Information Security Management Act (FISMA) and the Privacy Act, 5 U.S.C. ยง552a. In addition to design and implementation standards, the CISO ensures that the systems are secured against unauthorized use through the use of a layered, defense-in-depth security approach involving procedural and information security safeguards as mandated by FISMA following National Institute of Standards and Technology (NIST) guidance. Periodic audits of systems are undertaken.TSA ensures personnel accessing the system have security training commensurate with their duties and responsibilities. All personnel are trained through TSA’s Security and Awareness Training Program as well as
