The Transportation Security Administration’s (TSA) Secure Flight program is being hindered by serious managerial challenges, according to a report released today by the Government Accountability Office (GAO).Secure Flight is the Department of Homeland Security’s (DHS) planned passenger prescreening program, where airline travelers are screened against terrorist watch lists to determine if additional security measures are necessary.According to the highlights report, “TSA has not followed a disciplined life cycle approach to manage systems development, or fully defined system requirements…Without following a more rigorous and disciplined life cycle process, including defining system requirements, the Secure Flight program is at serious risk of not meeting program goals.”Though the report notes that the Department has made some progress towards past GAO Secure Flight recommendations it still has a ways to go before it addresses all pertinent recommendations. Here’s a list of additional pain points the GAO identified:Key program stakeholders, like the U.S. Customs and Border Protection and the Terrorist Screening Center, say they need more definitive information on system requirement from TSA in order to support Secure FlightTSA has conducted name-matching tests that compare passenger and terrorist screening data to determine the system’s effectiveness; however, TSA has not made key policy decisions that could impact program operations, like what types of data air carriers need to provide and the specific technologies it will use to match namesSecure Flight’s system development documentation does not completely explain how privacy protections for passengers are to be met, or how TSA will protect passenger data once it’s gleaned from travelersDon’t forget to keep checking in at our CSO Security Feed page for updated news coverage. Related content news Multibillion-dollar cybersecurity training market fails to fix the supply-demand imbalance Despite money pouring into programs around the world, training organizations have not managed to ensure employment for professionals, while entry-level professionals are finding it hard to land a job By Samira Sarraf Oct 02, 2023 6 mins CSO and CISO CSO and CISO CSO and CISO news Royal family’s website suffers Russia-linked cyberattack Pro-Russian hacker group KillNet took responsibility for the attack days after King Charles condemned the invasion of Ukraine. By Michael Hill Oct 02, 2023 2 mins DDoS Cyberattacks feature 10 things you should know about navigating the dark web A lot can be found in the shadows of the internet from sensitive stolen data to attack tools for sale, the dark web is a trove of risks for enterprises. Here are a few things to know and navigate safely. By Rosalyn Page Oct 02, 2023 13 mins Cybercrime Security news ShadowSyndicate Cybercrime gang has used 7 ransomware families over the past year Researchers from Group-IB believe it's likely the group is an independent affiliate working for multiple ransomware-as-a-service operations By Lucian Constantin Oct 02, 2023 4 mins Hacker Groups Ransomware Cybercrime Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe