The U.S. Government Accountability Office has identified gaps in federal oversight of the Transportation Worker Identification Credential program, including a risk that revoked cards could still be used to enter secure maritime facilities.
TWIC is a tamper-resistant biometric credential for workers who need unescorted access to designated secure areas of U.S. ports, vessels and related facilities. The Transportation Security Administration enrolls applicants and conducts security threat assessments, while the Coast Guard inspects regulated facilities for compliance. About two million people held the credential as of mid-2025.
GAO found that the Coast Guard lacked a method to mitigate the risk of people presenting cards listed on the program’s Canceled Card List. It recommended that the agency develop such a method and work with TSA to obtain TWIC readers for inspectors. The Coast Guard was also asked to finalize regulations specifying which facilities must install readers.
Biometric readers can check the card’s status and compare its stored fingerprint template with the person presenting it. The Coast Guard has previously sought handheld readers supporting multiple TWIC card versions, while an earlier deployment used Integrated Biometrics fingerprint sensors in mobile verification devices.
The audit also found weaknesses in how compliance information moves through the program. GAO counted 888 TWIC-related deficiencies and 83 more serious violations in Coast Guard inspection data from fiscal years 2019 through 2024. Examples included personnel performing security duties without the required qualifications and unescorted people entering secure areas.
Coast Guard officials did not provide all of that data to field inspectors because they concluded it did not point to changes needed in the program. GAO said sharing the information could improve inspectors’ awareness of recurring risks and recommended adding deficiencies to performance reporting.
TSA, meanwhile, relied on an ad hoc approach to communicating program updates. Some port stakeholders told auditors that engagement had declined and important information had been delayed. GAO called for a documented communication plan.
The watchdog made seven recommendations in total. The Department of Homeland Security agreed with all of them, although each remained open when the report was released.
Sources: U.S. Government Accountability Office
–
By the ID Tech Editorial Team
