Government Technology

TSA to Supply Information on Possible Web Security Oversight



February 26, 2007 By

On Friday, the House of Representatives Committee on Oversight and Government Reform requested documentation from the Transportation Security Administration regarding the security of its Web site.

According to a letter (PDF) sent by the committee to the TSA Assistant Secretary, Edmund Hawley, the Travel Verification Identity Program Web site section, where people dispute their presence on the "no-fly" list, "lacked basic measures to ensure the security and privacy of information submitted" when it was first launched. This site collected personal information such as Social Security numbers, dates of birth, hair and eye color. It is alleged that site lacked basic security measures, including a lack of encryption which could result in personal information being put at risk.

Representative Henry Waxman, Head of the Oversight Committee, stated in the letter that it was also thought that because of poor quality and errors, the site may have been an attempt at phishing. "In addition, security experts pointed out that the Web site text had numerous spelling errors and that the attached form did not have an OMB number, which all federal government forms are required to have."

The TSA has until March 9th to supply the proper documentation to the committee.

Photo Courtesy of CBP.


| More

Comments

Add Your Comment

You are solely responsible for the content of your comments. We reserve the right to remove comments that are considered profane, vulgar, obscene, factually inaccurate, off-topic, or considered a personal attack.

In Our Library

White Papers | Exclusives Reports | Webinar Archives | Best Practices and Case Studies
Redefining Citizen Engagement in a Mobile-First World
Today’s consumers are embracing the ease and convenience of anytime, anywhere access to the Internet from their mobile devices. In order for government and public sector organizations to fully engage with their citizens and provide similar service quality as their consumer counterparts, the time is now to shift to mobile citizen engagement. Learn more
McAfee Enterprise Security Manager and Threat Intelligence Exchange
As a part of the Intel® Security product offering, McAfee® Enterprise Security Manager and McAfee Threat Intelligence Exchange work together to provide organizations with exactly what they need to fight advanced threats. You get the situational awareness, actionable intelligence, and instantaneous speed to immediately identify, respond to, and proactively neutralize threats in just milliseconds.
Better security. Better government.
Powering security at all levels of government with simpler, more connected IT.
View All

Featured Papers