FAA Has Not Adequately Implemented Security Requirements for Its Automatic Dependent Surveillance-Broadcast System
This report presents the results of OIG’s review of the Federal Aviation Administration’s (FAA) Automatic Dependent Surveillance-Broadcast (ADS-B) system. OIG conducted this review in response to a request from the Chairmen and Ranking Members of the House Committee on Transportation and Infrastructure and its Subcommittee on Aviation. ADS-B is the satellite-based navigation and surveillance system that supplements radar as the surveillance method for monitoring and controlling aircraft. This integral component of FAA’s Next Generation Air Transportation System (NextGen) program will allow controllers to track aircraft with greater accuracy and integrity than the current radar-based system. Our audit objectives were to determine whether: (1) FAA’s contract for ADS-B’s development properly specifies the system’s security requirements, and if the contractor has satisfied them, including security risk identification and mitigation, and (2) the contractor follows FAA’s security architecture in its development of ADS-B.
DOT has determined that this entire report is sensitive security information (SSI) that is controlled under 49 C.F.R. Parts 15 and 1520. No part of this record may be disclosed to any person without a “need to know” as defined in 49 C.F.R. Parts 15 and 1520, except with the written permission of the Administrator of the Transportation Security Administration or the Secretary of Transportation. Unauthorized release may result in civil penalty or other action. For U.S. Government agencies, public disclosure is governed by 5 U.S.C. § 552 and 49 C.F.R. Parts 15 and 1520.