Audits

On November 2, we issued our final report on FAA’s Progress in Enhancing Air Traffic Control Systems Security. The audit objectives were to determine FAA’s progress in correcting security weaknesses previously identified in the air traffic control (ATC) system by assessing (1) the status of Business Continuity Plan implementation and (2) the enhanced methodology used in the certification and accreditation of air traffic control systems security at operational sites. The FAA made good progress in preparing the Technical Center to serve as the recovery site; yet several unresolved technical challenges, staffing issues, and funding requirements could delay recovery site readiness. Further, while FAA has enhanced the process of reviewing ATC systems security, the reviews were not properly carried out to ensure security protection of operational ATC systems.