SUPPLEMENTARY INFORMATION:

Comments Invited

In accordance with the Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.), an agency may not conduct or sponsor, and a person is not required to respond to, a collection of information unless it displays a valid OMB control number. The ICR documentation will be available at https://www.reginfo.gov upon its submission to OMB. Therefore, in preparation for OMB review and approval of the following information collection, TSA is soliciting comments to—

(1) Evaluate whether the proposed information requirement is necessary for the proper performance of the functions of the agency, including whether the information will have practical utility;

(2) Evaluate the accuracy of the agency's estimate of the burden;

(3) Enhance the quality, utility, and clarity of the information to be collected; and ( printed page 21832)

(4) Minimize the burden of the collection of information on those who are to respond, including using appropriate automated, electronic, mechanical, or other technological collection techniques or other forms of information technology.

Information Collection Requirement

Under the Aviation and Transportation Security Act, TSA is responsible for security in all modes of transportation, including screening operations for passenger air transportation and for carrying out such other duties it considers appropriate relating to transportation security.^[1] Under DHS Instruction 262-05-002, “ Information Sharing and Safeguarding: Insider Threat Program, ” issued on October 1, 2019, DHS established requirements, standards, and assigned responsibilities for DHS agencies to implement an insider threat detection and prevention program. This documents also defines “Insider Threat” and “Insider.” An “insider” is any person who has or who had authorized access to any DHS facility, information, equipment, network, or system. An “Insider Threat” is defined as the threat that an insider will use his or her authorized access, wittingly or unwittingly, to do harm to the Department's mission, resources, personnel, facilities, information, equipment, networks, or systems.

TSA created the Insider Threat Program in compliance with the DHS Instruction's requirements for DHS components. The program's purpose is to detect, deter, and mitigate threats that an individual with authorized access to sensitive areas and/or information, wittingly or unwittingly misuse or allow others to misuse this access to exploit vulnerabilities in an effort to compromise security, facilitate criminal activity, terrorism, or other illicit actions that inflict harm to people, organizations, the transportation system, or national security, including transportation sector personnel, operations, information, systems and critical infrastructure. The program operates as a partnership among TSA, aviation, mass transit, and maritime sectors, as well as with state and local law enforcement.

To ensure consistency with the directive, TSA created the Insider Threat Reporting Tool, which collects information on potential insider threats. TSA is requesting OMB's approval of the Insider Threat Incident Reporting Tool as a Common Form to permit Federal agency users beyond the agency that created the form ( e.g., DHS or U.S. Office of Personnel Management) to streamline the information collection process in coordination with OMB.

Purpose and Description of Data Collection

The Insider Threat Incident Reporting Tool is an online application where the public can submit inquiries regarding potential insider threats by providing personal information and other specific data regarding the person or situation deemed to be an insider threat. TSA uses the information collected to review the potential insider threats and to determine if further evaluation and follow-up is necessary. The collection may include individual personal information and/or appearance, and the details surrounding the situation alleged to be the potential insider threat. TSA requires submitters to attest that all information submitted is true.

The likely respondents to this proposed information collection are any person who has or who had authorized access to any DHS facility, information, equipment, network, or system, including individuals detailed or assigned to DHS. TSA estimates that an average of approximately 312 respondents will be completing the Insider Threat Incident Reporting Tool annually. TSA estimates that it takes approximately 10 minutes (0.16667 hours) to complete and submit the report, resulting in the annual burden of 52 hours.

Use of Results

TSA Insider Threat Reporting Tool will use the reported information to detect, prevent and mitigate threats. In compliance with the Government Paperwork Elimination Act, the collection uses an online web tool, available at https://www.tsa.gov/​travel/​insider-threat. All submissions are sent through a secure TSA internal network drive accessible only by authorized personnel. TSA will protect the information in accordance with DHS Directive 262-05-002.

91 FR 21831