Radio Frequency Identification Security at USCIS Is Managed Effectively, But Can Be Strengthened

Radio frequency identification technology is a form of automatic identification and data capture teclogy that uses electric or magnetic fields at radio frequencies to transmit information. Our overall objective was to determine whether USCIS has effectively managed the implementation of radio frequency identification technology. We determined that USCIS has effectively managed the implementation of radio frequency identification technology by establishing an information technology infrastructure to secure personal information and implementing safeguards to minimize the risk of using radio frequency identification-enabled permanent resident cards. For example, USCIS has granted its card production system the authority to operate, evaluated privacy implications of using the system, and ensured that no personal data is transmitted by permanent resident cards. However, USCIS had not deployed timely security patches on the servers and workstations that support radio frequency identification processes, assessed annually the effectiveness of security controls implemented on the system that produces radio frequency identification cards, or ensured employees producing these cards receive the mandatory annual privacy awareness training.