Evidence Of Security Layers Not Effective???

TSA Criticized for Delay, Mismanagement of Secure Flight Program
News Story by Linda Rosencrance - ComputerWorld

"FEBRUARY 10, 2006 (COMPUTERWORLD) - The assistant secretary of the Transportation Security Administration (TSA) took it on the chin yesterday as members of a Senate committee and the Government Accountability Office (GAO) criticized the agency for the delay and mismanagement of its Secure Flight program. Secure Flight is the government's second attempt at a preflight screening program for domestic airlines following the terrorist attacks of Sept. 11, 2001. An earlier system, called the Computer-Assisted Passenger Prescreening System, was created in 2003 then abandoned in 2004 because of privacy concerns (See "GAO: Secure Flight antiterror program violates privacy laws")."

One of the reasons this type of program is hitting the skids is that there seems to be an effort to emphasize the second layer of an effective security plan--the part that relies heavily upon technology--without implementing an effective first layer of security (c.f. previous post on security layers). The CAPPS not only failed due to privacy concerns, but also because it could adversely affect the pocketbooks of the airlines. But beyond those considerations, we need to emphasize the first layer of security over the use of technology. Without that essential first layer, the technology used in the second layer is ineffective and offers exponentially diminishing returns on the time, money and manpower invested in it.

"For his part, Kip Hawley, the assistant secretary of the TSA, told the Senate Committee on Commerce, Science and Transportation that he has asked the TSA's Information Technology Office to conduct an IT system security audit of Secure Flight to address weaknesses identified by the GAO. The audit would also ensure that the program fully addresses security and privacy concerns."

But we need a similar audit to determine why the basic security measures are not working.

"While he supported the TSA's efforts to secure all modes of transportation, Committee Chairman Ted Stevens (R-Alaska) noted that the program has been in development for a number of years but for various reasons has not yet been implemented. Stevens said the committee wants answers about the viability of the program as well as a timetable for its launch."

How much is this costing us? One system has failed and another is taking years to develop, never mind implement. Still, we do not have adequate protection for railroads, commuter lines, rapid transit, ports, borders, industrial depots, energy production centers, nuclear power plants... and the list goes on. Mein Gott! We could be at risk for major terrorist attacks...