H. R. 302—388 
credentialed airport populations regarding insider threats to avia-
tion security and best practices related to airport access controls. 
(b) CREDENTIALING STANDARDS.—Not later than 180 days after 
the date of enactment of this Act, the Administrator, in consultation 
with air carriers, foreign air carriers, airport operators, and labor 
unions 
representing 
credentialed 
employees, 
shall 
assess 
credentialing 
standards, 
policies, 
and 
practices, 
including 
implementation of relevant credentialing updates required under 
the FAA Extension, Safety, and Security Act of 2016 (Public Law 
114–190; 130 Stat. 615), to ensure that insider threats to aviation 
security are adequately addressed. 
(c) SIDA APPLICATIONS.— 
(1) SOCIAL SECURITY NUMBERS REQUIRED.— 
(A) IN GENERAL.—Not later than 60 days after the 
date of enactment of this Act, the Administrator shall 
revise the application submitted by an individual applying 
for a credential granting access to the Secure Identification 
Area of an airport to require the social security number 
of such individual in order to strengthen security vetting 
effectiveness. 
(B) FAILURE TO PROVIDE NUMBER.—An applicant who 
does not provide such applicant’s social security number 
may be denied such a credential. 
(2) SCREENING
NOTICE.—The Administrator shall issue 
requirements for an airport operator to include in each applica-
tion for access to a Security Identification Display Area notifica-
tion to the applicant that an employee holding a credential 
granting access to a Security Identification Display Area may 
be screened at any time while gaining access to, working in, 
or leaving a Security Identification Display Area. 
(d) SECURED AND STERILE AREAS OF AIRPORTS.—The Adminis-
trator shall consult with airport operators and airline operators 
to identify advanced technologies, including biometric identification 
technologies, that could be used for securing employee access to 
the secured areas and sterile areas of airports. 
(e) RAP BACK VETTING .—Not later than 180 days after the 
date of enactment of this Act, the Administrator shall identify 
and submit to the appropriate committees of Congress the number 
of credentialed aviation worker populations at airports that are 
continuously vetted through the Federal Bureau of Investigation’s 
Rap Back Service, consistent with section 3405(b)(2) of the FAA 
Extension, Safety, and Security Act of 2016 (49 U.S.C. 44901 note). 
(f) INSIDER THREAT EDUCATION AND MITIGATION.—Not later 
than 180 days after the date of enactment of this Act, the Adminis-
trator shall identify means of enhancing the TSA’s ability to lever-
age the resources of the Department and the intelligence community 
(as defined in section 3 of the National Security Act of 1947 (50 
U.S.C. 3003)) to educate Administration personnel on insider 
threats to aviation security and how the TSA can better mitigate 
such insider threats. 
(g) EMPLOYEE INSPECTIONS.—Consistent with the FAA Exten-
sion, Safety, and Security Act of 2016 (Public Law 114–190; 130 
Stat. 615), the Administrator shall ensure that TSA-led, random 
employee physical inspection efforts of aviation workers are tar-
geted, strategic, and focused on providing the greatest level of 
security effectiveness. 
(h) COVERT TESTING.—
H. R. 302—389 
(1) IN
GENERAL.—Consistent with the FAA Extension, 
Safety, and Security Act of 2016 (Public Law 114–190; 130 
Stat. 615), the Administrator shall continue to conduct covert 
testing of TSA-led employee inspection operations at airports 
and measure existing levels of security effectiveness. 
(2) REQUIREMENTS.—The Administrator shall provide— 
(A) the results of such testing to— 
(i) the airport operator for the airport that is the 
subject of any such testing; and 
(ii) as appropriate, to air carriers and foreign air 
carriers that operate at the airport that is the subject 
of such testing; and 
(B) recommendations and technical assistance for air 
carriers, foreign air carriers, and airport operators to con-
duct their own employee inspections, as needed. 
(3) ANNUAL REPORTING.—The Administrator shall for each 
of fiscal years 2019 through 2021, submit to the appropriate 
committees of Congress a report on the frequency, methodology, 
strategy, and effectiveness of employee inspection operations 
at airports. 
(i) CENTRALIZED DATABASE.— 
(1) IN GENERAL.—Not later than 180 days after the date 
of enactment of this Act, the Administrator, in consultation 
with ASAC, shall— 
(A) subject to paragraph (2), establish a national, cen-
tralized database of the names of each individual who— 
(i) has had an airport-issued badge revoked for 
failure to comply with aviation security requirements; 
or 
(ii) has had an aircraft operator-issued badge 
revoked for failure to comply with aviation security 
requirements; 
(B) determine the appropriate reporting mechanisms 
for air carriers, foreign air carriers, and airport operators— 
(i) to submit to the Administration data regarding 
an individual described in subparagraph (A); and 
(ii) to access the database; and 
(C) establish a process to allow an individual whose 
name is mistakenly entered into the database to correct 
the record and have the individual’s name expunged from 
the database. 
(2) LIMITATION.—The database shall not include the name 
of any individual whose badge has been revoked as a result 
of a termination or cessation of employment unrelated to— 
(A) a violation of a security requirement; or 
(B) a determination that the individual poses a threat 
to aviation security. 
SEC. 1935. LAW ENFORCEMENT OFFICER REIMBURSEMENT PROGRAM. 
(a) IN GENERAL.—In accordance with section 44903(c)(1) of 
title 49, United States Code, the Administrator shall increase the 
number of awards, and the total funding amount of each award, 
under the Law Enforcement Officer Reimbursement Program— 
(1) to increase the presence of law enforcement officers 
in the public areas of airports, including baggage claim, ticket 
counters, and nearby roads;
H. R. 302—390 
(2) to increase the presence of law enforcement officers 
at screening checkpoints; 
(3) to reduce the response times of law enforcement officers 
during security incidents; and 
(4) to provide visible deterrents to potential terrorists. 
(b) COOPERATION
BY ADMINISTRATOR.—In carrying out sub-
section (a), the Administrator shall use the authority provided 
to the Administrator under section 114(m) of title 49, United States 
Code, that is the same authority as is provided to the Administrator 
of the Federal Aviation Administration under section 106(m) of 
that title. 
(c) ADMINISTRATIVE BURDENS.—The Administrator shall review 
the regulations and compliance policies related to the Law Enforce-
ment Officer Reimbursement Program and, if necessary, revise such 
regulations and policies to reduce any administrative burdens on 
applicants or recipients of such awards. 
(d) AUTHORIZATION OF APPROPRIATIONS.—There is authorized 
to be appropriated to carry out section 44901(h) of title 49, United 
States Code, $55,000,000 for each of fiscal years 2019 through 
2021. 
SEC. 1936. AIRPORT PERIMETER AND ACCESS CONTROL SECURITY. 
(a) RISK ASSESSMENTS OF AIRPORT SECURITY.— 
(1) IN GENERAL.—The Administrator shall— 
(A) not later than 180 days after the date of enactment 
of this Act, update the Transportation Sector Security Risk 
Assessment (referred to in this section as the ‘‘TSSRA’’); 
and 
(B) not later than 90 days after the date the TSSRA 
is updated under subparagraph (A)— 
(i) update with the most currently available intel-
ligence information the Comprehensive Risk Assess-
ment of Perimeter and Access Control Security 
(referred to in this section as the ‘‘Risk Assessment 
of Airport Security’’); 
(ii) establish a regular schedule for periodic 
updates to the Risk Assessment of Airport Security; 
and 
(iii) conduct a system-wide assessment of airport 
access control points and airport perimeter security. 
(2) CONTENTS.—The security risk assessments required 
under paragraph (1)(B) shall— 
(A) include updates reflected in the TSSRA and Joint 
Vulnerability Assessment findings; 
(B) reflect changes to the risk environment relating 
to airport access control points and airport perimeters; 
(C) use security event data for specific analysis of 
system-wide trends related to airport access control points 
and airport perimeter security to better inform risk 
management decisions; and 
(D) consider the unique geography of and current best 
practices 
used 
by 
airports 
to 
mitigate 
potential 
vulnerabilities. 
(3) REPORT.—The Administrator shall report the results 
of the TSSRA and Risk Assessment of Airport Security under 
paragraph (1) to— 
(A) the appropriate committees of Congress;
H. R. 302—391 
(B) relevant Federal departments and agencies; and 
(C) airport operators. 
(b) AIRPORT SECURITY STRATEGY DEVELOPMENT.— 
(1) IN GENERAL.—Not later than 90 days after the date 
of enactment of this Act, the Administrator shall update the 
2012 National Strategy for Airport Perimeter and Access Con-
trol Security (referred to in this section as the ‘‘National 
Strategy’’). 
(2) CONTENTS.—The update to the National Strategy shall 
include— 
(A) information from the Risk Assessment of Airport 
Security; and 
(B) information on— 
(i) airport security-related activities; 
(ii) the status of TSA efforts to address the objec-
tives of the National Strategy; 
(iii) finalized outcome-based performance measures 
and performance levels for— 
(I) each activity described in clause (i); and 
(II) each objective described in clause (ii); and 
(iv) input from airport operators. 
(3) UPDATES.—Not later than 90 days after the date the 
update to the National Strategy is complete, the Administrator 
shall establish a regular schedule for determining if and when 
additional updates to the strategy under paragraph (1) are 
necessary. 
Subtitle D—Passenger and Cargo Security 
SEC. 1937. PRECHECK PROGRAM. 
(a) IN GENERAL.—Section 44919 is amended to read as follows: 
‘‘§ 44919. PreCheck Program 
‘‘(a) IN GENERAL.—The Administrator of the Transportation 
Security Administration shall continue to administer the PreCheck 
Program in accordance with section 109(a)(3) of the Aviation and 
Transportation Security Act (49 U.S.C. 114 note). 
‘‘(b) EXPANSION.—Not later than 180 days after the date of 
enactment of the TSA Modernization Act, the Administrator shall 
enter into an agreement, using other transaction authority under 
section 114(m) of this title, with at least 2 private sector entities 
to increase the methods and capabilities available for the public 
to enroll in the PreCheck Program. 
‘‘(c) MINIMUM CAPABILITY REQUIREMENTS.—At least 1 agree-
ment under subsection (b) shall include the following capabilities: 
‘‘(1) Start-to-finish secure online or mobile enrollment capa-
bility. 
‘‘(2) Vetting of an applicant by means other than biometrics, 
such as a risk assessment, if— 
‘‘(A) such means— 
‘‘(i) are evaluated and certified by the Secretary 
of Homeland Security; 
‘‘(ii) meet the definition of a qualified anti-ter-
rorism technology under section 865 of the Homeland 
Security Act of 2002 (6 U.S.C. 444); and