Audit Reports

To help manage the most complex air traffic system in the world, the Federal Aviation Administration (FAA) operates approximately 160 Terminal Radar Approach Control (TRACON) facilities, which provide air traffic control services to pilots in the airspace immediately surrounding major airports. FAA’s 11 largest TRACON facilities handle about 33 percent of all U.S. TRACON traffic; as such, effective security controls and contingency plans are critical to maintaining the safety and efficiency of the National Airspace System. Because the air traffic controllers at these facilities rely heavily on information systems to keep aircraft safely separated, we initiated this audit to determine if  (1) FAA is identifying security risks within TRACON information systems and properly mitigating them; and (2) FAA’s contingency plans for these facilities limit the effects of the loss of availability.

THE DEPARTMENT HAS DETERMINED THAT THIS REPORT CONTAINS SENSITIVE SECURITY INFORMATION (SSI) that is controlled under 49 CFR parts 15 and 1520. No part of this record may be disclosed to persons without a ‘‘need to know,’’ as defined in 49 CFR parts 15 and 1520, except with the written permission of the Administrator of the Transportation Security Administration or the Secretary of Transportation. Unauthorized release may result in civil penalty or other action. For U.S. Government agencies, public disclosure is governed by 5 U.S.C. 552 and 49 CFR parts 15 and 1520.  If you would like a copy of this report with SSI redacted, please contact our Freedom of Information Act Office.