TSA submits insider-threat reporting ICR for OMB review
The useful change is standardization; the missing part is who must report, when, and what happens if they miss it.
TL;DR
The Transportation Security Administration sent a new insider-threat incident reporting tool information collection request to the Office of Management and Budget for Paperwork Reduction Act review. Organizations operating at TSA-regulated facilities face a mandatory reporting burden once OMB approves it, including details about potential insider threats and the people involved. TSA is moving from ad-hoc facility reporting toward structured incident data, but the approval timeline, covered entities and penalty structure remain unspecified.
TSA has put an insider-threat incident reporting tool into the Paperwork Reduction Act pipeline, sending a new information collection request to the Office of Management and Budget for review. The collection would require submissions from the public concerning potential insider threats and pertinent information about the person or people involved in the reported event.
For operators at TSA-regulated facilities, the point is not the paperwork label. Once approved, the tool creates a mandatory reporting channel where insider-threat information is captured in a standardized format rather than left to facility-level improvisation. That is a real shift, and a useful one if TSA wants comparable incident data across regulated environments.
The notice leaves the practitioner questions for later: which entities are definitively covered, when reporting starts after OMB approval, and how TSA will treat late or missing submissions. Until those details land, contractors, managed service providers and facility security teams should read this as an early warning, not an implementation checklist.
Published ·Deep Fathom