Changeflow GovPing Transportation TSA Insider Threat Reporting Tool Information C...
Routine Notice Added Final

TSA Insider Threat Reporting Tool Information Collection Request

Favicon for www.regulations.gov Regs.gov: Transportation Security Administration
Published
Detected
Email

Summary

TSA published a 60-day notice under the Paperwork Reduction Act seeking public comment on the Insider Threat Reporting Tool, an online application where individuals may report potential insider threats to DHS facilities, information, equipment, networks, or systems. The notice estimates approximately 312 respondents annually, with each submission taking approximately 10 minutes, resulting in an estimated annual burden of 52 hours. Comments are due by June 22, 2026.

“The Insider Threat Incident Reporting Tool is an online application where the public can submit inquiries regarding potential insider threats by providing personal information and other specific data regarding the person or situation deemed to be an insider threat.”

TSA , verbatim from source
Published by TSA on regulations.gov . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

About this source

GovPing monitors Regs.gov: Transportation Security Administration for new transportation regulatory changes. Every update since tracking began is archived, classified, and available as free RSS or email alerts — 14 changes logged to date.

What changed

TSA published a 60-day notice in the Federal Register announcing a new Information Collection Request (ICR) for the Insider Threat Reporting Tool under the Paperwork Reduction Act. The tool is an online application allowing individuals to submit information about potential insider threats to DHS facilities, information, equipment, networks, or systems. TSA estimates 312 annual respondents with an average 10-minute completion time and a total annual burden of 52 hours.

Affected parties include any person with authorized access to DHS facilities, information, equipment, networks, or systems. While this is a routine administrative notice seeking comment rather than imposing new compliance obligations, organizations with DHS access should be aware of the reporting mechanism and ensure employees understand insider threat reporting procedures.

Archived snapshot

Apr 23, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Content

ACTION:

60-Day notice.

SUMMARY:

The Transportation Security Administration (TSA) invites public comment on a new Information Collection Request (ICR) abstracted
below that we will submit to the Office of Management and Budget (OMB) for approval in compliance with the Paperwork Reduction
Act (PRA). The ICR describes the nature of the information collection and its expected burden. The collection involves the
submission of details by the public, concerning potential insider threats, as well as any pertinent information regarding
the person(s) involved in the reported event.

DATES:

Send your comments by June 22, 2026.

ADDRESSES:

Comments may be emailed to TSAPRA@tsa.dhs.gov or delivered to the TSA PRA Officer, Information Technology, TSA-11, Transportation Security Administration, 6595 Springfield
Center Drive, Springfield, VA 20598-6011.

FOR FURTHER INFORMATION CONTACT:

Christina A. Walsh at the above address, or by telephone (571) 227-2062.

SUPPLEMENTARY INFORMATION:

Comments Invited

In accordance with the Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.), an agency may not conduct or sponsor, and a person is not required to respond to, a collection of information unless it
displays a valid OMB control number. The ICR documentation will be available at https://www.reginfo.gov upon its submission to OMB. Therefore, in preparation for OMB review and approval of the following information collection,
TSA is soliciting comments to—

(1) Evaluate whether the proposed information requirement is necessary for the proper performance of the functions of the
agency, including whether the information will have practical utility;

(2) Evaluate the accuracy of the agency's estimate of the burden;

(3) Enhance the quality, utility, and clarity of the information to be collected; and

(4) Minimize the burden of the collection of information on those who are to respond, including using appropriate automated,
electronic, mechanical, or other technological collection techniques or other forms of information technology.

Information Collection Requirement

Under the Aviation and Transportation Security Act, TSA is responsible for security in all modes of transportation, including
screening operations for passenger air transportation and for carrying out such other duties it considers appropriate relating
to transportation security. (1) Under DHS Instruction 262-05-002, “ Information Sharing and Safeguarding: Insider Threat Program, ” issued on October 1, 2019, DHS established requirements, standards, and assigned responsibilities for DHS agencies to implement
an insider threat detection and prevention program. This documents also defines “Insider Threat” and “Insider.” An “insider”
is any person who has or who had authorized access to any DHS facility, information, equipment, network, or system. An “Insider
Threat” is defined as the threat that an insider will use his or her authorized access, wittingly or unwittingly, to do harm
to the Department's mission, resources, personnel, facilities, information, equipment, networks, or systems.

TSA created the Insider Threat Program in compliance with the DHS Instruction's requirements for DHS components. The program's
purpose is to detect, deter, and mitigate threats that an individual with authorized access to sensitive areas and/or information,
wittingly or unwittingly misuse or allow others to misuse this access to exploit vulnerabilities in an effort to compromise
security, facilitate criminal activity, terrorism, or other illicit actions that inflict harm to people, organizations, the
transportation system, or national security, including transportation sector personnel, operations, information, systems and
critical infrastructure. The program operates as a partnership among TSA, aviation, mass transit, and maritime sectors, as
well as with state and local law enforcement.

To ensure consistency with the directive, TSA created the Insider Threat Reporting Tool, which collects information on potential
insider threats. TSA is requesting OMB's approval of the Insider Threat Incident Reporting Tool as a Common Form to permit
Federal agency users beyond the agency that created the form (e.g., DHS or U.S. Office of Personnel Management) to streamline the information collection process in coordination with OMB.

Purpose and Description of Data Collection

The Insider Threat Incident Reporting Tool is an online application where the public can submit inquiries regarding potential
insider threats by providing personal information and other specific data regarding the person or situation deemed to be an
insider threat. TSA uses the information collected to review the potential insider threats and to determine if further evaluation
and follow-up is necessary. The collection may include individual personal information and/or appearance, and the details
surrounding the situation alleged to be the potential insider threat. TSA requires submitters to attest that all information
submitted is true.

The likely respondents to this proposed information collection are any person who has or who had authorized access to any
DHS facility, information, equipment, network, or system, including individuals detailed or assigned to DHS. TSA estimates
that an average of approximately 312 respondents will be completing the Insider Threat Incident Reporting Tool annually. TSA
estimates that it takes approximately 10 minutes (0.16667 hours) to complete and submit the report, resulting in the annual
burden of 52 hours.

Use of Results

TSA Insider Threat Reporting Tool will use the reported information to detect, prevent and mitigate threats. In compliance
with the Government Paperwork Elimination Act, the collection uses an online web tool, available at https://www.tsa.gov/travel/insider-threat. All submissions are sent through a secure TSA internal network drive accessible only by authorized personnel. TSA will protect
the information in accordance with DHS Directive 262-05-002.

Dated: April 20, 2026. Christina A. Walsh, Paperwork Reduction Act Officer, Information Technology, Transportation Security Administration. [FR Doc. 2026-07857 Filed 4-22-26; 8:45 am] BILLING CODE 9110-05-P

Footnotes

(1) See sec. 101(a) of the Aviation and Transportation Security Act, Public Law 107-71 (115 Stat. 597-598, Nov. 19, 2001), as codified
at 49 U.S.C. 114(d) and (f). See also Memorandum, Expanding the Scope of the Department of Homeland Security Insider Threat Program (submitted Dec. 7, 2016, approved Jan. 3, 2017); Presidential Memorandum, National Insider Threat Policy and Minimum Standards for Executive Branch Insider Threat Programs (Nov. 21, 2012); Executive Order 13587, Structural Reforms To Improve the Security of Classified Networks and the Responsible Sharing and Safeguarding of Classified
Information,
76 FR 63811 (October 7, 2011).

Download File

Download

Citations

49 U.S.C. 114(d) statutory authority for TSA security mandate
Executive Order 13587 structural reforms for classified network security
Public Law 107-71 Aviation and Transportation Security Act

Get daily alerts for Regs.gov: Transportation Security Administration

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from TSA.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
TSA
Published
April 20th, 2026
Comment period closes
June 22nd, 2026 (59 days)
Compliance deadline
June 22nd, 2026 (59 days)
Instrument
Notice
Branch
Executive
Legal weight
Non-binding
Stage
Final
Change scope
Minor

Who this affects

Applies to
Transportation companies Employers Government agencies
Industry sector
4811 Air Transportation 4831 Maritime & Shipping 4841 Trucking & Logistics
Activity scope
Insider threat reporting Information collection Security reporting
Geographic scope
United States US

Taxonomy

Primary area
Transportation
Operational domain
Compliance
Topics
Cybersecurity

Get alerts for this source

We'll email you when Regs.gov: Transportation Security Administration publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!