SUPPLEMENTARY INFORMATION:

Title: ACSMS System

Form Numbers: AC 1600-50 MMAC Visitor Request For & Visitor Log

Type of Review: Clearance of Renewal

Background:

Overview of the ACSMS

Aeronautical Center Security Management System (ACSMS), which is used by security forces to authenticate individuals attempting to access the Aeronautical Center. This system relates to the mission of the FAA by providing the Mike Monroney Aeronautical Center (MMAC) security forces with the ability to verify the identity of individuals entering the facility which ensures that only authorized personnel are admitted. The business functions provided by this Information System are:

• Temporary Access Badge creation. The system creates temporary access badges for federal personnel upon hire. This information system collects the following information:

○ Legal Name (First, Middle, Last, Suffix)

○ Routing Information or Company

• Key inventory. The system maintains an inventory of electronic and metal keys issued to personnel for access to varying parts of the facility. This information system collects the following information:

○ Legal Name (First, Middle, Last, Suffix)

○ Routing Information

• Parking Permit Tracking. The system tracks vehicle information associated with parking permits issued to federal employees and contractors. This information system collects the following information:

○ Legal Name (First, Middle, Last, Suffix)

○ Routing Information

○ Driver's License Number

○ Vehicle Information ( e.g. License Plate Number, Make, Model, Color, etc.)

• Visitor and vehicles not covered by permit tracking. This information system collects the following information:

○ Legal Name (First, Middle, Last, Suffix)

○ Routing Information or Company

○ Driver's License Number

○ Vehicle Information ( e.g. License Plate Number, Make, Model, Color, etc.)

Information, Including Personally Identifiable Information, in ACSMS

ACSMS collects information about visitors and contractors who work or attend classes at the MMAC.

This information system collects the following information:

• Legal Name (First, Middle, Last, Suffix)
• Routing information or company
• Driver's License Number

Vehicle Information (e.g. License Plate Number, Make, Model, Color, etc.)

This documentation is provided to the MMAC Security Forces for data entry into ACSMS.

Why ACSMS Collects PII Information

The FAA requires this information be stored in order to provide access to the MMAC campus by individuals. Parking permits are necessary to gain entry to the facility.

Key tracking is essential to ensure that only authorized personnel obtain keys to access buildings, etc., on the campus.

Legal Authority for Information Collection

The information is collected under the following:

5 U.S.C. 301 49 U.S.C. 322

How ACSMS Uses Information

The information collected by the system is used to create individual access passes and parking permits. It provides a ready concentration of employee personal data to facilitate issuance, accountability, and recovery of required identification media issued to employees, contractors and visitors.

An individual's information would be made unavailable in the event a record is archived due to specific events ( e.g. retirement, termination, resignation) which would negate the need for identification media to access the facility. In the event a record is archived, it could be reconstructed from backup media. This activity would be prompted by the request of the Information System Owner (ISO).

This Information System complies with the following System Of Record Notices:

• DoT/ALL 9 Identification Media Record System
• DoT/OST 035 Personnel Security Record System

How ACSMS Shares Information

PII contained in ACSMS is shared with the MMAC Security and Investigations Division (AMC-700 (ASH)) and Mike Monroney Aeronautical Center (MMAC) Security Forces members.

This information is utilized by AMC-700 to perform investigations, support litigation and validate personnel identity. Security Forces utilize the ( printed page 48485) system to validate personnel identity, track parking stickers and access key cards.

Both entities access the application via workstation through the FAA intranet.

The PII information collected by this system is not shared with any other system.

How ACSMS Provides Notice and Consent

For an individual's PII to be included in the ACSMS, that individual must have interest in working at the MMAC campus.

How ACSMS Ensures Data Accuracy

All information input into the system is done manually by Security Forces members. The system utilizes data validation to ensure accuracy of data entered from the documentation.

How ACSMS Secures PII Information

ACSMS takes appropriate security measures to safeguard PII and other sensitive data. The system is housed within the System Management Facility located at the MMAC. This location physically protects the system from access by unauthorized individuals through access via ID media to enter the campus controlled by an access token provided only to personnel authorized access. The system resides on the FAA network and is only accessible by the intranet. All communications with the system are performed through an SSL connection. By virtue of residing on the network, the system is protected by MMAC IAP's firewalls and CSMC's owned and managed Intrusion Detection System (IDS). Additionally, the system is protected with localized, FAA approved anti-virus and spyware software. The application protects itself from threats, such as SQL Injection, through coding methods built in by the developers. Remote access is only allowed from within the trusted network environment, utilizing Remote Desktop (RDP) and MMAC's internet access point (IAP) controlled Virtual Private Network (VPN).

Issued In Oklahoma City, Oklahoma on July 28, 2026.

James T Hildebrand,

Division Manager, Operations & Maintenance Division, AMP-300.

91 FR 48484