Combating Insider Threats in the Aviation Industry

Richard L. Duncan, CPP, IAP Assistant General Manager, Public Safety and Security

Hartsfield-Jackson Atlanta International Airport

Agenda • Overview • Responsibilities • Definition • Major Threats • Notable U.S. Incidents • Mitigations • Closing Comments

Hartsfield-Jackson Atlanta International Airport Overview

101.4 million Total Passengers in 2015

63,000 Employees

6.8 m-sq-ft Terminal Complex 3,700-Acre Campus

Employee Direct Access Points

Airport Operators’ Responsibilities Providing for the safety and security of person and property on an aircraft operating in the air transportation system against an act of: • criminal violence • aircraft piracy • introduction of an unauthorized weapon, explosive or

incendiary device onto an aircraft. (TSR 1542.101)

What is “Insider Threat” An insider threat is a malicious threat to an organization that comes from people within the organization such as employees, former employees, contractors or business associates who have inside information concerning the organization's security practices, data and computer systems.

Wikipedia, the free encyclopedia

Major Insider Threats to Aviation • Failing to Comply with Policies, Procedures or

Regulations • Committing Theft of Goods or Services • Committing Acts of Violence • Committing Acts of Smuggling • Committing Acts of Sabotage • Committing Acts of Hijacking • Allowing Others to Commit Criminal or Terrorist Acts

against Airport, Airlines or Others Entities

Notable U.S. Incidents

• 1999: Workers Smuggled Weapons, Drugs and Other Contraband on board Aircraft

• 2007: Workers Smuggled Weapons and Drugs on board Aircraft

• 2014: Current and Former Employees Smuggled Weapons through U.S. Airports

Miami – 1999

“Miami began screening all employees through checkpoints after a 1999 drug smuggling plot in which dozens

of ramp and food workers were arrested.”

“…Miami, which has 30,500 workers with access to cargo and ramp areas, began its screening in 1999…”

“Miami began physically screening its workers every day in 1999, after a rash of thefts and concerns about smuggling.”

Orlando – 2007 Summary “… baggage handlers used their uniforms and identification cards to enter restricted areas and avoid security screeners.”

“Orlando International Airport officials unanimously approved $7 million in security plans that will be used to screen

all employees with access to secure areas.”

“…16,000 employees are being checked whenever they enter a secure area...in response to arrests of airline workers accused of smuggling guns aboard a commercial airliner."

Atlanta – 2014 Summary “… Six people have been arrested as part of a ring smuggling guns and ammunition on planes from Atlanta to New York, in an investigation that revealed a "devastating breach of security,"

“A gun-smuggling ring that brought illegal firearms into Brooklyn via commercial airline flights was dismantled...at least some of those guns were ferried in carry-on bags on flights from Atlanta’s Hartsfield-Jackson Airport..."

“… a man carrying a backpack containing 16 firearms with ammunition flew aboard a Delta Air Lines passenger jet to Kennedy International Airport in New York from Hartsfield-Jackson Atlanta.”

Insider Threat Mitigations Risk-Based Security Measures

• Intelligence and Information

Sharing Program • Employee Vetting • Security Awareness Training • Identity Management System • Access Control • Surveillance System • Compliance and Enforcement

Actions • Random or Full Inspections • Random or Full Employee

Screening

Combating Insider Threats in the Aviation Industry

Richard L. Duncan, CPP, IAP Assistant General Manager, Public Safety and Security

Hartsfield-Jackson Atlanta International Airport