TSA: Transportation Security Administration Overview
The Transportation Security Administration (TSA) is the federal agency responsible for protecting the nation's transportation systems from terrorist threats and security failures. Established under the Aviation and Transportation Security Act of 2001, TSA operates as a component of the Department of Homeland Security and screens more than 2 million passengers per day across approximately 440 commercial airports (TSA). This page covers TSA's definition and scope, its operational mechanisms, the scenarios it most commonly addresses, and the boundaries that define its jurisdiction.
Definition and scope
TSA's statutory authority derives from the Aviation and Transportation Security Act (ATSA), 49 U.S.C. § 44901, which assigned the federal government direct responsibility for civil aviation security screening — a function previously contracted to private airlines. Although TSA's mandate extends nominally to all modes of transportation, including rail, mass transit, highways, and pipelines, roughly 90 percent of its workforce and resources are concentrated in commercial aviation security.
TSA employs approximately 60,000 Transportation Security Officers (TSOs) and federal air marshals across domestic and international operations (TSA Workforce Data). The agency sits organizationally within DHS's component agency structure, reporting through the Secretary of Homeland Security. Its core functions include:
- Passenger and baggage screening at commercial airport checkpoints
- Cargo screening for all air cargo transported on passenger aircraft
- Federal Air Marshal Service (FAMS) deployment on domestic and international flights
- Surface transportation security assessments for rail, transit, and pipeline sectors
- Credentialing and vetting for transportation workers through programs such as TWIC (Transportation Worker Identification Credential)
TSA does not enforce immigration law, conduct criminal investigations, or manage border entry — those functions belong to U.S. Customs and Border Protection and ICE.
How it works
TSA's checkpoint operations rely on a layered security model that combines physical screening technology with behavioral detection and intelligence-driven targeting.
Screening technology layers at standard checkpoints include Advanced Imaging Technology (AIT) millimeter-wave scanners, X-ray conveyor systems for carry-on items, Explosive Trace Detection (ETD) swabs, and Credential Authentication Technology (CAT) units that verify the authenticity of government-issued IDs. As of 2023, TSA had deployed CAT units at more than 200 airports (TSA Innovation).
Risk-based screening distinguishes TSA's current model from the uniform-screening approach used before 2011. Passengers enrolled in TSA PreCheck — numbering over 17 million members as of 2024 according to TSA enrollment data — receive expedited screening and are not required to remove shoes, laptops, or liquids at dedicated lanes. This contrasts with standard screening lanes, where all carry-on liquids must comply with the 3-1-1 rule (containers of 3.4 ounces or less, in a single 1-quart bag, 1 bag per passenger) established under TSA liquid restrictions policy.
Intelligence integration channels threat information from the DHS Office of Intelligence and Analysis and the TSA's own Secure Flight program, which vets passenger reservation data against the Terrorist Screening Database maintained by the FBI's Terrorist Screening Center.
The Federal Air Marshal Service deploys armed plainclothes officers on flights assessed as elevated risk. The exact number of flights covered remains classified, but FAMS is administered entirely within TSA's organizational structure.
Common scenarios
TSA operations address four recurring scenario categories:
Checkpoint security events — The most frequent operational scenario involves the detection of prohibited items at passenger screening lanes. TSA officers encounter prohibited items at checkpoints regularly; in fiscal year 2022, TSA reported discovering more than 6,300 firearms in carry-on bags, of which approximately 88 percent were loaded (TSA FY2022 Year in Review).
Trusted Traveler program management — TSA administers the PreCheck program domestically while coordinating with DHS Trusted Traveler Programs such as Global Entry, NEXUS, and SENTRI, which are managed by CBP. Enrollment in PreCheck requires a background check and an $85 application fee (5-year membership) as of TSA's published fee schedule.
Surface transportation assessments — TSA's surface division conducts Visible Intermodal Prevention and Response (VIPR) operations, deploying teams to rail stations, bus terminals, and ferry ports. These operations do not involve passenger arrest authority; TSA officers may not conduct searches without law enforcement support unless within designated airport screening areas.
Cargo security enforcement — All cargo loaded onto passenger aircraft must be screened through TSA-approved methods or carried by entities certified under the Certified Cargo Screening Program (CCSP). This requirement, mandated by the Implementing Recommendations of the 9/11 Commission Act of 2007, achieved 100 percent screening of passenger aircraft cargo domestically by 2010.
Decision boundaries
Understanding what TSA does and does not control clarifies how the agency fits within the broader DHS homeland security framework.
| Function | TSA Authority | Alternate Authority |
|---|---|---|
| Passenger screening (domestic airports) | Yes — statutory mandate | N/A |
| International departure screening | Coordinated with foreign governments | Foreign national authority |
| Immigration enforcement at airports | No | CBP, ICE |
| Pilot certification and aircraft airworthiness | No | FAA |
| Criminal arrest authority (outside airports) | No | FBI, local law enforcement |
| Rail/transit daily operations | Assessment only | Operators and local agencies |
| Cybersecurity for pipeline operators | Directive authority since 2021 | CISA (coordination) |
TSA gained pipeline cybersecurity directive authority in 2021 following the Colonial Pipeline ransomware incident, issuing mandatory directives under 49 U.S.C. § 114. This marked a significant expansion beyond the agency's traditional physical-security focus into DHS's cybersecurity mission.
TSA jurisdiction ends at the airport security perimeter. Once a passenger clears screening and boards an aircraft, jurisdiction shifts to the FAA for airspace and aircraft safety, and to FAMS or the flight crew for in-flight security incidents. The aviation security policy coordinating these boundaries is maintained through interagency agreements between TSA, FAA, and DOJ.