Audit: Security problems seen in ID plan for port workers

USA TODAY
Audit: Security problems seen in ID plan for port workers

WASHINGTON (AP) — A Homeland Security plan to require port workers to carry tamperproof photo ID cards has numerous security problems that threaten to delay it, investigators said Thursday.

In an audit, Homeland inspector general Richard Skinner said his review of prototype systems at participating U.S. ports identified several vulnerabilities in the Transportation Worker Identification Credential program, known as TWIC.

The weaknesses, some of which were deemed "high risk," included instances of "false positives" in detecting which workers might pose a security risk as well as cases in which the system inadvertently disclosed sensitive personal information inappropriately.

The report is redacted to prevent public disclosure of specific weaknesses.

"TWIC prototype systems are vulnerable to various internal and external security threats," Skinner wrote. "Until remedied, the significant security weaknesses jeopardize the certification and accreditation of the systems prior to full implementation of the TWIC program."

In a written response, the Transportation Security Administration, which runs TWIC, said that it had expected to encounter some problems with its test program and was now working to fully address them.

"It was acknowledged in discussions with (Skinner) that a prototype system will always need further enhancements and additional work to ready it for production," wrote TSA deputy assistant secretary Robert Jamison.

A call to the TSA seeking additional comment was not immediately returned Thursday.

Congress ordered the administration to develop the card as part of port security legislation passed in late 2002. Under the plan, the Transportation Security Administration would collect biographic information including fingerprints, name, birth date, address and phone number; alien registration number if applicable; and photo, employer and job title.

Before issuing a card, the government would conduct a background check on the worker, including a review of criminal history records, terrorist watch lists, legal immigration status and warrants. In May, the Homeland Security Department said it would soon ask outside contractors to bid on handling the project.

In his audit, Skinner recommended that TSA create a formal office to oversee TWIC security to ensure weaknesses are fixed.

The program at first is expected to cover 750,000 workers who have unescorted access to secure port areas, including longshoremen, port employees, truck drivers and rail workers.