US Airport Vetting Failures Expose Risks of Incomplete Employee Background Checks

A federal investigation into airport worker security screening has identified weaknesses that allowed some employees to receive access credentials before their required security assessments were completed.

A report issued by the Department of Homeland Security (DHS) Office of Inspector General on November 5, 2026, found that the Transportation Security Administration (TSA) did not consistently ensure airport operators followed security vetting requirements.

In one case, an employee retained an active airport security badge for 177 days before it was revoked.

The investigation also identified inaccurate applicant information, gaps in ongoing criminal history monitoring and weaknesses in the enforcement of security requirements.

For organizations employing individuals in security-sensitive positions, the findings highlight an important distinction: initiating a background check is not the same as completing it and confirming that an individual is eligible for access.

What Did the TSA Investigation Find?

The DHS Inspector General examined TSA procedures for assessing airport workers requiring access to secure and restricted areas.

These individuals can include baggage handlers, maintenance personnel, contractors and employees working in airport retail or hospitality operations.

Federal aviation security requirements establish screening processes intended to determine whether workers are eligible to receive particular security credentials.

However, the audit found instances where badges had been issued before TSA completed assessments that subsequently resulted in instructions not to issue credentials.

One individual continued to hold an active badge for 177 days before it was revoked.

The report also identified inconsistencies between information held by airport operators and records used by TSA to conduct security assessments.

These discrepancies created risks that screening could be conducted using inaccurate information or against an incorrect access category.

The public report redacts some figures, meaning the full number of affected individuals cannot be established from the published findings.

The audit identifies weaknesses in security controls; it does not establish that every affected employee engaged in wrongdoing.

Why Screening Must Be Completed Before Access Is Granted

One of the clearest lessons from the investigation concerns the timing of background checks.

An organization may have an established screening process, but its effectiveness can be undermined if access is granted before the necessary results have been received and assessed.

For airport workers, this is particularly significant because access credentials can permit entry into areas that are not available to the general public.

The same principle applies to businesses operating sensitive facilities, financial institutions, technology companies and other organizations handling confidential information or valuable assets.

Employers should distinguish between several stages of screening:

• A background check being requested.
• Candidate information being collected and verified.
• Required searches and assessments being completed.
• Relevant discrepancies being resolved.
• An appropriate clearance or employment decision being recorded.
• Physical or digital access being authorized.

These stages should not be treated as interchangeable.

A screening application marked as submitted or in progress does not necessarily mean that the individual has been satisfactorily screened.

Professional Pre-Employment Background Checks can assist employers with the independent verification of relevant candidate information before important hiring and access decisions are made.

The Importance of Accurate Identity Information

The investigation also identified weaknesses in the accuracy of information used to screen airport workers.

Auditors compared 457 airport worker records from five airports with information held in TSA's screening systems.

Discrepancies included differences in identifying details and the categories of access requested.

In some cases, workers were granted access despite inaccurate Social Security information in their applications.

These findings demonstrate why Identity Verification is a fundamental part of effective background screening.

Criminal history searches, employment verification and other checks depend on the accurate identification of the individual being assessed.

Incorrect names, dates of birth, identifying numbers or other material information can affect the reliability of subsequent searches.

Where discrepancies arise, they should be investigated and resolved rather than automatically accepted.

Organizations should also ensure that the identity information used during screening corresponds with the information used to create employee records and access credentials.

Ongoing Monitoring and the FBI Rap Back Program

The Inspector General identified further weaknesses involving ongoing criminal history monitoring.

The FBI's Rap Back program allows authorized participating agencies to receive notifications when new criminal history information becomes available concerning enrolled individuals.

For covered airport workers, this provides a mechanism for identifying relevant developments after initial fingerprint-based screening.

However, the audit found that some workers who should have been enrolled in the program were not.

Of the 457 records examined, 451 workers were subject to Rap Back enrollment requirements. Auditors identified missing enrollments and cases where enrollment status could not be established from available records.

The findings highlight why screening should not always be regarded as a one-time administrative exercise.

For regulated or security-sensitive positions, continuing eligibility may depend on appropriate ongoing checks, notification processes and the timely review of relevant information.

However, the availability and legality of continuous criminal history monitoring vary by role, jurisdiction and authorized program.

Employers should not assume that the FBI Rap Back service is available for general private-sector screening.

Why Access Control and Background Screening Must Work Together

Background screening and physical access control are often managed through different systems or departments.

Recruitment teams may coordinate employment verification, security teams may issue building credentials, and operational managers may approve access to particular areas.

This separation can create risk if information is not communicated accurately between those responsible for each stage.

The TSA investigation demonstrates how screening requirements can be weakened when credentialing decisions are not properly aligned with eligibility assessments.

Organizations should establish clear responsibilities for confirming that required screening has been completed before access is authorized.

Where a screening result changes an individual's eligibility, there should also be a reliable procedure for reviewing or revoking access promptly.

This is particularly important for contractors, temporary workers and employees whose responsibilities or access requirements change over time.

Regulatory Oversight and Enforcement Failures

The Inspector General also identified weaknesses in TSA's handling of airport operator noncompliance.

According to the audit, some violations continued without appropriate enforcement action, and certain cases remained unresolved for extended periods.

The report identified 19 violations across 14 airport operators for which no penalties were imposed.

The Inspector General made four recommendations addressing enforcement procedures, the accuracy of applicant records, monitoring of credentialing decisions and ongoing criminal history enrollment.

TSA agreed to implement all four recommendations.

The findings illustrate that effective workforce security depends not only on establishing screening standards, but also on ensuring that those standards are consistently followed.

Lessons for Employers Beyond Aviation

Although the audit concerns the aviation sector, the underlying issues are relevant to many organizations.

Businesses may employ individuals who require access to sensitive financial information, confidential commercial records, vulnerable people or restricted premises.

Where employees or contractors have elevated responsibilities, the consequences of incomplete screening can be significant.

Organizations should consider whether their existing procedures provide clear answers to several questions:

• Are the required background checks defined for each position?
• Is candidate identity verified using reliable information?
• Are relevant checks completed before restricted access is granted?
• Who is responsible for assessing and approving screening results?
• Are material discrepancies investigated before decisions are finalized?
• Can access be suspended or revoked promptly when required?
• Are ongoing screening obligations reviewed where legally applicable?

These controls should reflect the risks associated with the position and comply with applicable federal, state and local requirements.

For private employers, background screening may also involve obligations under the Fair Credit Reporting Act and relevant employment and privacy laws.

The objective is not to subject every employee to unnecessary scrutiny, but to ensure that appropriate checks support the decisions they are intended to inform.

How Conflict International USA Can Assist

Conflict International USA provides domestic and international Pre-Employment Background Checks for organizations seeking greater confidence in their hiring decisions.

Our screening services can be tailored to the responsibilities, jurisdiction and risk profile of the position.

Depending on the authorized scope, checks may include Identity Verification, Employment History Verification, education and professional credential verification, relevant criminal record searches and other appropriate background enquiries.

We also provide access to a secure vetting portal, enabling clients to manage applications, monitor screening progress and access completed reports.

Our approach emphasizes independent verification, clear reporting and the identification of discrepancies requiring further assessment.

While no screening process can eliminate every risk, effective procedures can help organizations make informed recruitment decisions and avoid treating incomplete checks as completed clearance.

For businesses reviewing their workforce screening arrangements, contact Conflict International USA to discuss an appropriate Pre-Employment Background Checks program.