,i  #aai? ,,congress  #a/ ,session  ,h4 
,r4 #dabf  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,june #be1 #bjbe,mr4  
,crane introduc$ ! foll[+ bill2 :i* 0   
ref]r$ to ! ,committee on ,homel&       
,security  ,a ,,bill  ,to direct !      
,transportation ,security ,adm9i/ration 
to c>ry out cov]t te/+ & risk mitigation
 improvem5t ( aviation security         
op]ations1 & = o!r purposes4  #a4 ,%ort 
title ,?is ,act may be cit$ z !         
,aviation ,risk ,mitigation & ,security 
,act or ! ,,arms ,act4  #b4 ,,tsa cov]t 
te/+ & risk mitigation improvem5t  7a7  
,9 g5]al ,n lat] ?an #ahj days aft] !   
date ( ! enactm5t ( ?is ,act1 !         
,adm9i/rator ( ! ,transportation        
,security ,adm9i/ration 7,,tsa7 %all    
e/abli% ! foll[+ to /r5g!n aviation     
security op]ations3  7#a7 ,9 accordance 
) subsection 7b71 a sy/em = conduct+    
risk-in=m$1 headqu>t]s-bas$ cov]t te/+  
project sc5>ios = aviation security     
op]ations1 includ+ relat+ to airport    
pass5g] & baggage security scre5+       

op]ations1 t c yield /ati/ically valid  
data t c be utiliz$ to id5tify & assess 
! nature & ext5t ( any vuln]abilities to
 su* op]ations t are n mitigat$ by      
curr5t security op]ations4  7#b7 ,a     
long-t]m headqu>t]s-bas$ cov]t te/+     
program1 employ+ /atic b risk-in=m$     
?reat vectors1 bas$ on annual risk      
assessm5ts ( em]g+ ?reats1 design$ to   
assess ! effectiv5ess ( aviation        
security op]ations on an annual basis4  
7b7 ,me?odology ,! ,adm9i/rator ( !     
,,tsa %all conduct ! risk-in=m$1        
headqu>t]s-bas$ cov]t te/+ project      
sc5>ios = aviation security op]ations "u
 p>agraph 7#a7 ( subsection 7a7 bas$ on 
annual risk assessm5ts ( em]g+ ?reats4  
,! ,adm9i/rator %all-- 7#a7 conduct n   
few] ?an ?ree su* cov]t te/+ project    
sc5>ios to id5tify any sy/emic          
vuln]abilities 9 aviation security      
op]ations1 & ensure t ea* ,category ,x  
airport 9 ! ,unit$ ,/ates is includ$ 9  
su* cov]t te/+ project sc5>ios at lea/  
once p] fiscal ye>2 &  7#b7 docum5t !   

me?odology1 assumptions1 & rationale    
guid+ ! selection & execution ( su*     
cov]t te/+ project sc5>ios to ensure    
/ati/ical validity & actionable results4
  7c7 ,mitigation  7#a7 ,9 g5]al ,!     
,adm9i/rator ( ! ,,tsa %all e/abli% a   
process to address & mitigate any       
vuln]abilities to aviation security     
op]ations id5tifi$ & assess$ pursuant to
 ! cov]t te/+ project sc5>ios conduct$  
"u p>agraph 7#a7 ( subsection 7a74  7#b7
 ,analysis ,n lat] ?an #ij days aft]    
id5tify+ a vuln]ability ref]r$ to 9     
p>agraph 7#a71 ! ,adm9i/rator ( ! ,,tsa 
%all conduct a root cause analysis to   
det]m9e ! orig9 & contribut+ factors    
relat+ to su* vuln]ability4  7#c7       
,det]m9ation ,n lat] ?an #aej days aft] 
conduct+ ! analysis "u p>agraph 7#b71 ! 
,adm9i/rator ( ! ,,tsa %all make a      
det]m9ation reg>d+ :e!r or n to mitigate
 ! vuln]ability ref]r$ to 9 su*         
p>agraph1 & %all prioritize mitigat+ su*
 vuln]ability bas$ on ! ability to r$uce
 risk4 ,if ! ,adm9i/rator det]m9es--    

7,a7 to n mitigate su* vuln]ability1 !  
,adm9i/rator %all docum5t ! ju/ification
 relat+ !reto2 or  7,b7 to mitigate su* 
vuln]ability1 ! ,adm9i/rator %all       
e/abli% & docum5t--  7i7 key mile/ones  
appropriate = ! level ( ef=t requir$ to 
s mitigate su* vuln]ability2 &  7ii7 a  
date by :i* measures to s mitigate su*  
vuln]ability %all be implem5t$ by !     
,,tsa4  7#d7 ,rete/+ ,n lat] ?an #ahj   
days aft] ! date on :i* measures to     
mitigate a vuln]ability are complet$ by 
! ,,tsa pursuant to p>agraph            
7#c77;,b77ii71 & to ! ext5t applicable1 
! ,adm9i/rator ( ! ,,tsa %all conduct a 
cov]t te/+ project sc5>io 9 accordance )
 subsection 7a77#a7 = ! aviation        
security op]ation ) respect to :i* su*  
vuln]ability 0 id5tifi$ to assess !     
effectiv5ess ( su* measures to mitigate 
su* vuln]ability4  7d7 ,annual report+  
7#a7 ,compilation ( te/ results ,n lat] 
?an ,novemb] #cj ( ! fir/ full fiscal   
ye> t beg9s aft] ! date ( ! enactm5t (  
?is ,act & annually !reaft]1 !          

,adm9i/rator ( ! ,,tsa1 9 consultation )
 ! ,secret>y ( ,homel& ,security1 %all  
produce a report detail+ ! results ( all
 cov]t te/+ project sc5>ios = aviation  
security op]ations "u subsection 7a77#a7
 conduct$ 9 ! imm$iately prec$+ fiscal  
ye> by ! ,,tsa4 ,ea* su* report %all--  
7,a7 be submitt$ 9 unclassifi$ =m1 b may
 conta9 a classifi$ annex 9 accordance )
 p>agraph 7#b72 &  7,b7 include--  7i7 a
 summ>y ( all vuln]abilities to aviation
 security op]ations t 7 id5tifi$ & !    
respective dates ( su* id5tifications2  
7ii7 ! /atus ( mitigation ef=ts "u      
subsection 7c71 includ+ key mile/ones & 
expect$ completion dates2  7iii7 !      
results ( rete/+ "u su* subsection on   
previ\sly mitigat$ vuln]abilities2  7iv7
 ju/ifications = vuln]abilities t rema9 
unmitigat$ "u su* subsection1 & a       
det]m9ation ( :e!r full mitigation is   
feasible2 &  7v7 an assessm5t ( security
 improvem5ts bas$ on cov]t te/+ data    
tr5ds4  7#b7 ,submission to ,congress ,!
 ,adm9i/rator ( ! ,,tsa %all submit to !

 ,committee on ,homel& ,security ( !    
,h\se ( ,repres5tatives & ! ,committee  
on ,comm]ce1 ,sci5ce1 & ,transportation 
( ! ,s5ate ea* report requir$ "u        
p>agraph 7#a7 toge!r ) ! ,transportation
 ,security ,adm9i/ration's annual budget
 reque/4 ,ea* su* report may include    
classifi$ & s5sitive security in=mation1
 & any su* in=mation %all be submitt$ z 
a classifi$ annex4  7#c7 ,public        
disclosure ( cov]t te/+ p]=mance at     
,category ,x airports  7,a7 ,9 g5]al ,n 
lat] ?an ,novemb] #cj ( ! fir/ full     
fiscal ye> t beg9s aft] ! date ( !      
enactm5t ( ?is ,act & annually !reaft]1 
! ,adm9i/rator ( ! ,,tsa %all publi%1 & 
ma9ta9 on a publicly accessible website 
( ! ,,tsa1 a summ>y ( p]=mance data     
acquir$ z a result ( cov]t te/+ project 
sc5>ios conduct$ at ,category ,x        
airports "u subsection 7b77#a7 dur+ !   
imm$iately prec$+ fiscal ye>4 ,ea* su*  
summ>y %all-- 7i7 include1 at a m9imum--
  7,i7 ! total numb] ( te/s c>ri$ out z 
"p ( su* cov]t te/+ project sc5>ios     

conduct$ at ,category ,x airports2      
7,,ii7 ! aggregate pass rate & failure  
rate1 express$ z p]c5tages1 = all su*   
cov]t te/s1 calculat$ across all te/$   
locations & cov]t te/+ project sc5>ios2 
&  7,,iii7 g5]al obs]vations or tr5d    
data reg>d+ *anges 9 p]=mance comp>$ to 
! prior fiscal ye>2 &  7ii7 n include   
te/ sc5>io details1 me?odologies1 or    
airport-specific data t c\ld compromise 
aviation security op]ations4  7,b7      
,exception ,clause 7ii7 ( subp>agraph   
7,a7 %all n apply ) respect to          
summ>y-level /ati/ics reg>d+ ! ov]all   
p]=mance ( ,,tsa scre5+ op]ations at    
,category ,x airports = purposes (      
public availability ( ! annual summ>ies 
"u su* subp>agraph4  7e7 ,,gao review ,n
 lat] ?an ?ree ye>s aft] ! date ( !     
enactm5t ( ?is ,act1 ! ,comptroll]      
,g5]al ( ! ,unit$ ,/ates %all submit to 
! ,adm9i/rator ( ! ,,tsa1 ! ,committee  
on ,homel& ,security ( ! ,h\se (        
,repres5tatives1 & ! ,committee on      
,comm]ce1 ,sci5ce1 & ,transportation ( !

 ,s5ate a report on ! effectiv5ess ( !  
,,tsa's processes = conduct+ cov]t te/+ 
t yields /ati/ically valid data t c be  
utiliz$ to assess ! nature & ext5t ( any
 vuln]abilities to aviation security    
op]ations t are n effectively mitigat$  
by curr5t security op]ations4