Audits

We tested access control at several major U.S. airports and found airport operators and air carriers operating at those airports had not successfully implemented procedures for limiting access to and within secure airport areas to only authorized persons. The access control vulnerabilities we identified were due to airport operators and air carriers not successfully implementing procedures for controlling access, employees not meeting their responsibilities for airport security, the FAA not successfully implementing its oversight program for ensuring compliance with access control requirements, and FAA policies that contribute to weaknesses in access control.