Transcripts For CSPAN TSA 20240705 : vimarsana.com

CSPAN TSA July 5, 2024

[applause] good afternoon, everyone. It is an incredible honor for me to be here with you this afternoon an mark, thank you very much for that very kind introduction. In particular, i appreciate you recognizing our legal team in tsa. Francine is our chief council as you know. Mark called her an icon. You would call her an institution. She was one of the very first employees of tsa in 2001. Has served consistently through. She is now a member of the Leadership Council of our organization. The very top seven people in tsa that determine the course we follow going forward. I really could adopt my job without the experts of francine. She continues to serve as well. Francine, thanks very much. [applause] and i appreciate the recognition of nikki and susan too. Two fantastic members over the chief couple team. They contribute to our performance against the entire spectrum of what we do. Day in and day out. It is a privilege for me to keynote following joel. Joel is a great friend. We worked very, very closely together when he was with the department of transportation. Tsa as many of you know has its roots in the department oftransportation. We were established in 2001. The law establishing tsa, the aviation and transportation and security act signed by george w. Bush on november 19, 2001. Think of that in context to 9 11 to november. 69 days. A significant piece of legislation that established an agency that is responsible for ensuring our transportation security. Our tice with d. O. T. Endure. Our founding secretary had an influence on tsa from the very beginning all the way through to his passing late last year. Just a remarkable individual. Our top Leadership Award in tsa is the Leadership Award to recognize his key influence on the formation of a new agency. As mark mentioned we have responsibility not just for Aviation Security although thats what most people associate with us but also for Service Transportation security. If you think to have Service Transportation modes, we have a parallel security responsibility for each one of those modes and im really happy to say to all of you that our work with the department of transportation is very, very strong. We reenforce each other. Think of this if, you think of a coin and you have a coin on one side said safety and the flip side of that coin would say security because things we do in security can have a safety impact and things that the Safety Agency is doing have k have a security impact. It is very important we stay closely aligned with each other. It is a privilege for me and ill focus now on the aviation sector of transportation for the balance of my remarks. I will divert a little bit when i talk about cyber security. I found the Aviation Industry really a great industry to work with. We have established very strong partnerships across the board. It helps everybody when that curse because that means that the government makes better decisions and when we implement decisions we implement them together with the same understanding of the reason why. And i have found the Aviation Industry to be incredibly innovative in things they view day in and day out even through the pamed, a high level of innovation across the entire industry to include Passenger Transport and cargo transport. That is really important to us. Because we in tsa, i would submit to all youve, are a very, very innovative federal agency and i believe we are the only federal agency that has an innovation doctrine that says this is how we are going to approach innovation and this is what were going to do. These are the guidelines and characteristics ofour innovatio. I firmly believe those officers you see at the screen check opponents in blue uniforms as you travel, they know best what makes a good process for security. We should make sure they have a key, clear avenue to provide their recommendations for consideration and then for scaling potentially across the entire agencies. Process innovation. The other Spice Technology ino vague. I hope you see as you travel the progress we have made in technology that is in our screen checkpoints. I can remember before i came into this position, i would go into the tsa line and go up to the first officer i would see and that officer would ask me for my drivers license or passport. I remember handing over my drivers license and literally seeing a loop and a light being pulled out to verify whether or not that was an authentic drivers license. I always wondered how in the heck can you possibly know all of the characteristics of all of the drivers licenses in the United States. And make the decision to allow a passenger to proceed. We now have technology that does that and does it particularly well. That is kind over the core of one of the things that i have been been focused onto embed more and more technology into our system. When we look at technology there are three things that i consider, any technology sleult solution has to do these three things. It has to improve our effectiveness in Security First and foremost and secondly it has to improve the efficiency of security. There is no reason they cant make it much more efficient and third, more importantly, it has to enhance the customer or Passenger Experience. That is very important to all of us to make sure as passenger goes through our system, they look at the processes we have in the screening process and say to themselves, there is a lot of value in that. I pay for it. There is a lot of value in it and i appreciate the fact that those officers i just encountered have the right tools to do their job and they are doing it in most professional manner possible. One of the other things i would emphasize right upfront is the partnerships that we have across the aviation sector. I think they are incredibly strong. I dont know how they could get much stronger than they are today. We have very frank dialogue between the air carriers, the airports and the organized labor unions that represent organized labor within the aviation sector and other Partner Organizations across the spem spectrum. I think it is really health i didnt mean i think we collectively make much better decision and i think we all pull much more in the same direction when we do that i would just highlight those partnerships of our stake holders but also highlight in the federal sector the key relationships that with with we have across the board. Ill explain that more when we get to cyber. I think that is a really good use case of how were viewing federal collaboration and how federal collaboration translates to a more responsive federal government, owners and operators of the system. The thing highlight upfront is we have a terrific Advisory Committee formed by congress. It provides very, very good advice to us on a continuous basis. I just attended the meeting yesterday and spent 2 1 2 hours in the meeting with all of the members of oured a visit Advisory Committee. They gave us candid feedback on things that we are doing and i think it makes us stronger as a result. I think it is very, very important for any federal agency, even in some cases more so for a Security Agency to be as transparent as they can with the public. And so if you go on our public webpage tsa. Gov you will see our strategy and the direction that i have given. Called the administrators intercept how were going to execute on that strategy over the next two or threeyear period. You will see a series of road maps on topics that we find of particular concern that we need together to move forward. The other thing with respect to transparency is we have made very, very good use of social media. I think we have one of the very best instagram accounts in the federal government. It has a really good i think it is a really good sense of humor in it. The idea is to get people to read it. Because we want to prevent passengers from bringing something into a checkpoint that we dont allow, infinite checkpoint operations. When that happens, that chris inefficiencies and a passenger didnt creates infirst quarter sis. A passenger didnt e do that just from being a passenger. It creates something we really, really try to avoid. We use our social media platforms to get out as much as we can. I know you have a session this afternoon on advanced air mobility. There has been a lot of investment on the part of companies already. Some of the considerations we have with advanced air mobility you will have a high volume of low altitude flights over urban areas. You will have an increase in aircraft volume over Critical Infrastructure. The most significant events with respect to the number of people gathered. The super bowl is an event every year as is the state of the union. Youll have nontraditional airport locations. These might be parking lot roofs. Roofs of buildings for air mobility transport. There will be a need for passenger and employee screening and vetting within this sector, the aviation sector. I will say to all of you, we have a very Good Relationship with the manufactures of these systems, the companies that endeavor to operate these systems. I think that is really beneficial to all oust is trying early onto embed into the design of these systems which i think well see operating in the not too distant future. Fa has done a great job putting out rule making, updating the definition of some terms that are going to be different in the context of aviation. Certainly in airmen certification standards and air worthiness criteria. We have worked very closely with the faa and what they are proceeding on. I think it is a very Good Partnership we have with them. We have advanced air Mobility Work group within that committee i just mentioned to you a few minutes ago. We are part of department of transportations inner agency group on advanced air mobility fully engaged within the industry. I think this is going to be a robust discussion for a good number of years. Im glad were having it now and are having it where we can just lay out what the issues are and figure out what the best path forward is and really thinking of this capability and what it could mean to transportation within the United States. I know the unmannedded aerial systems or drones is of key concern for its the first of january of 2021. We have a law called the preventing emerging threats act of 2018 that gives us the authority to conduct counter operations as part of an Emergency Response to a security incident. Just listening to those words, its a fairly limiting grant of authority. What it means is we cant proactively and persistently protect transportation infrastructure at this point in time. We have been working very hard to close that gap and continuing to develop our national capability. Some of the things we are doing with the authority we have is a couple of testbeds in operation, one in Miami International airport and one at lax. It tests the track and identify technologies on the market. Our role is to test the technology, to assess whether or not it meets the requirements that the manufacturer has listed, and that it provides and meets the guidelines that the fcc and faa will have for the technology. It is really beneficial as a service we think to make sure what is out there and people can make decisions on that track and identify technology and make them with more information done by totally independent and is asian. Independent organization. The other thing we are doing is developing a concept of operations. Have an initial one four if there was a uis incident around one of the 30 largest airports in the country, how would we, the agencies and response agencies from the federal state, local, tribal, and territorial level responded to the incident . We had that in place and have been testing it to make sure that should Something Like this happened, the public will have confidence that collectively amongst all levels of government, the owners and operators of the airports and the carriers are working together. They see that synchronization among us. We are continuing to work to get more robust counter uis authority for us. The way i look at this is mark mentioned i served in the coast guard for 33 years. Midpoint through my 33 year career, we were worried in the coast guard about the ua s operations and around maritime facilities. I would say all these years later, we made some progress but not progress you would expect for that. That period of time. This is something we need to pay close attention to. The next topic to mention to you is on cybersecurity. We have done i think an incredible amount of work over the past year and a half on cybersecurity and we started out working cybersecurity in the pipeline sector. We had one of the major pipelines in the country suffer a Ransomware Attack in may of 2021, and as a result of that, one of the things that we saw that we needed to remedy right away was there was no universal reporting requirement for Ransomware Attacks or Cyber Attacks that the federal government had imposed on the terms rotation sector. When the owner and operator of that Pipeline System would call and say this is what happened to me, is this happening to other people or how many other people has this happened to you . Nobody really had the answer except for anecdotal responses. One of the first things we did in may the very same month was put out a requirement that established the cybersecurity reporting regime for pipelines. We required that pipeline owners and operators identify point of contact. Will got the report, we would have somebody that we could call evan by 24 seven by 24 to learn more information about that incident. Two important things that we did this past year is when we chose to regulate the pipeline sector we only rightly to pipelines that were the most critical to the infrastructure in the country. Agency called cis and art of department of Homeland Security work on identifying within each Critical Infrastructure sector, all 16 sectors, which were the most radical owners and operators. We took that list and put a regulation out that applied to just that list of owners and operators, which is also a fluid list. As a new company that might come in and meet criteria for criticality in that sector, they would be covered by those requirements your debts when the first things we did was focus on the most critical owners and operators. The second thing we did was decided that the reporting needs to come to one place in the federal government rather than multiple federal agencies. We decided that in our directive that reporting would go to cisa who would have the response would to provide the information not just to tsa but to the pipeline and Hazardous Materials agency and permanent transportation and energy and the fbi. We were all aware at the same time of what was happening and that was easier and simpler for Owner Operators to be able to put in place. One of the things going on down the federal government as you look across entire government in all critical instructor sectors, what is the current required cybersecurity reporting regime . How soon do owners and operators need to report and what is the criteria for reporting, and where those reports go . The effort is to harmonize as much as we can those cybersecurity reporting requirements. That will be going on for several more months, and with the report due up to congress. The other thing we required was owners and operators do a vulnerability assessment, do their own assessment which we assisted with and the fbi helped with two the able to determine for themselves where they were most vulnerable from a cyber perspective. Once they knew that, to submit to us the Incident Response plan. I have identified bible abilities. If one of my voter abilities is excluded, how would i respond as the owner and operator of the system . We have all the information. Then we decided that we needed to put more specific cybersecurity protections in place. You might remember back in july of 2021, we put another directive that was quite specific as to things that in Owner Operator needed to do with respect to Access Control, with respect to network and things like that. That was not widely viewed as positive on the part of the industry because their position, which we fully understand, was you are being way too specific. You might be forcing us to abandon some things that we think we are doing that are effective. We might have to change our entire Business Model based on what you are requiring. Could we find a better way . Over the. Period of the next year, there were roundtables and other engagements were totally revamp our cybersecurity regulations. Susan did incredible work in this regard. Now our cyber regulations for pipelines are issued for rail systems as well, same criteria. Soon to be issued for aviation systems. Basically it says you have to do the things that i mentioned before, but on those specific cybersecurity prevention measures, we went to a performancebased approach. We said there are four outcomes that you need to achieve. You tell us, Owner Operator, how you think best that you are going to achieve those outcomes. Submit a plan to do that to us. We will review it along with system and the bureau and cisa and the bureau and Permanent Energy and transportation on the pipeline case, and we will come back to you and tell you whether we approve, disapprove, or we would like you to modify the cybersecurity implementation plan. We have gone to the entire process with the sector, pipelines and we are largely through the rail sector. Once we p

© 2025 Vimarsana