A Department of Homeland Security watchdog found weaknesses in the Transportation Security Administration’s internal IT account controls that could leave its network and sensitive information more vulnerable to attack. FedScoop reported on October 2, 2026, that the audit identified gaps in privileged-account security, annual access reviews and the removal of accounts for employees who had left.
What the watchdog reportedly found
According to FedScoop’s account of the DHS Office of Inspector General (OIG) audit, TSA did not adequately secure privileged accounts, did not conduct annual reviews of user access and did not consistently disable accounts belonging to separated employees. These are weaknesses in access to IT systems and accounts—not findings about airport security badges or physical entry controls.
As an Amazon Associate I earn from qualifying purchases.
Access controls help ensure that people can use only the systems and information their roles require, and that access is reassessed or removed when circumstances change. The reported gaps involved three distinct points in that process:
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11- Privileged accounts: Accounts with elevated permissions were not adequately secured.
- Periodic review: TSA was not conducting annual reviews of access, according to the report as described by FedScoop.
- Account removal: Access was not consistently disabled when employees separated from the agency.
FedScoop reported that the audit attributed these shortcomings to staff shortages, resource constraints, time limitations and inadequate policies. That is the audit’s reported explanation; the available reporting does not quantify how much each factor contributed.
#1 Best Overall
- HARDWARE PLUS SECURITY SERVICES: FortiGate-60F Firewall Appliance bundled with 3 year of FortiCare Premium and FortiGuard Unified Threat Protection.
- UNIFIED THREAT PROTECTION (UTP): Secures against advanced online threats with comprehensive web filtering and anti-botnet technologies.
- OPTIMIZED FOR MEDIUM-SIZED BUSINESSES: Tailored for businesses needing robust security without the infrastructure of larger enterprises.
- RELIABLE CUSTOMER SUPPORT: FortiCare Premium ensures high-quality support and service continuity.
- EFFECTIVE PROTECTION: Employs advanced filtering technologies to safeguard against sophisticated threats.
Why the weaknesses matter to TSA
The OIG warning, as reported by FedScoop, was about potential consequences: an attacker might compromise TSA’s network, obtain sensitive information or cause serious or catastrophic damage to agency operations and assets. The news report does not say that such an attack occurred.
The auditors connected the risk to TSA’s broad mission, not just passenger screening. They wrote that “TSA’s approximately 60,000 employees require secure and reliable information technology (IT) to screen passengers; detect explosives and other dangerous items at airports; and work with partners to secure roadways, railroad tracks, and pipelines,” according to the quotation published by FedScoop. The auditors also described TSA systems and networks as “high-visibility targets for attackers who aim to disrupt mission-essential operations or steal sensitive information.”
Rank #2
- Enterprise-grade prevention, detection, correlation and response from the perimeter to the endpoint with our Total Security Suite.
- Gain critical insights about network security, from anywhere and at any time, with WatchGuard Cloud.
- Built-in compliance reports, including PCI and HIPAA, mean one-click access to the data you need to ensure compliance requirements are met.
- Up to 18 Gbps firewall throughput. Turn on all additional security services and still see up to 2.4 Gbps throughput.
The approximately 60,000 figure is the auditors’ estimate quoted in the 2026 reporting; it is not a separately verified headcount for a specified fiscal year. The operational concern is that access weaknesses can matter well beyond an individual account if an attacker uses that access to reach systems or information supporting the agency’s work.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →What TSA had done about the findings
FedScoop reported that, after the audit was completed, TSA evaluated permissions for privileged accounts and implemented monthly access-control reviews. The monthly cadence is the reported change; the article does not describe the scope, results or effectiveness of those reviews.
Rank #3
- Entry-Level Privacy Gateway: Designed for users who want simple online privacy protection at an affordable level—ideal for basic home networking and daily internet use.
- Secure Browsing for Everyday Needs: Perfect for email, social media, online shopping, and standard streaming—protecting your connection while keeping setup and operation easy.
- Lightweight Protection Against Common Online Threats: Helps reduce exposure to unwanted ads, trackers, and risky websites, improving online safety for your household.
- Simple Setup, No Technical Skills Required: Plug it in, follow the quick steps, and start using—an excellent choice for beginners who don’t want complicated network configurations.
- Decentralized VPN (DPN) Included – No Monthly Payments: Get built-in decentralized VPN access with lifetime free usage, helping you stay private without paying recurring subscription fees
TSA was also developing a formal process intended to help IT rescind access more promptly when employees left their roles. FedScoop’s report does not establish that this process was completed, so it should be understood as work in development at the time of the report.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What remains unclear
The current final OIG audit report was not available in the materials located for this account. DHS OIG’s project listing describes the audit’s objective as determining the extent to which TSA applies IT access controls to help prevent unauthorized access to its information and systems, but it does not provide the final report number or recommendations. As a result, the full recommendation language, TSA’s formal response and the status of any recommendation closures are not established here.
Rank #4
- Single appliance with integrated firewalling, SD-WAN and Wi-Fi controller reduces complexity of WLAN management. Its zero-touch deployment helps optimize your onboarding experience.
- Built on a patented secure processor, this compact network firewall delivers the highest level of security and performance in its class – 800 Mbps IPS | 500 Mbps threat protection.
- User-friendly management console gives you centralized visibility and simplifies policy enforcement across your network. Its zero-touch deployment helps you optimize your onboarding experience.
- Compact and fanless design equipped with 4 GE RJ45 ports (1 WAN port and 3 internal ports) provide essential connectivity and flexibility for various network configurations in a small-scale environment.
- Including award-winning FortiGate hardware and 3-year FortiGuard AI-powered UTP security services. Services cover IPS, Advanced Malware Protection, Application Control, URL, DNS & Video Filtering, Antispam Service, and FortiCare Premium customer support.
A separate DHS OIG audit, report OIG-23-44, published in August 2023, examined one selected TSA high-value asset. It raised concerns about privileged users who had not logged into that system for an extended period and lacked documented account disablement, as well as difficulty confirming that access for separated employees and contractors had been removed. That earlier, system-specific review is historical context only; it is not the same audit as the one described in the 2026 coverage.
Sources: FedScoop’s October 2, 2026 report; DHS OIG report OIG-23-44; DHS OIG project listing for the TSA access-controls audit.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
