2. Protecting Canadian Air Travellers
2.1 Canada's Aviation Security Agenda
2.2 The International Dimension: ICAO
2.3 The North American Dimension
2.4 Anatomy of Canada's Aviation Security System
2.5 Risks and Layers: Envisioning Aviation Security
2.5.1 Risk-based security
2.5.2 Layered security
2.6 Intelligence
2.6.1 The intelligence function in the Government of Canada
2.6.2 CATSA’s need for intelligence
2.6.3 Widening the links
2.7 Coordinating Security
2.7.1 Security Watch Program
2.7.2 Airport Security Advisory Group
2.7.3 Airport Security Committee
2.8 Gaps and Vulnerabilities in the Aviation Security System
2.8.1 Air cargo
2.8.2 General Aviation / Fixed Base Operations
2.8.3 Difficult-to-detect substances
2.8.4 Gaps and vulnerabilities at airports
2. Protecting Canadian Air Travellers
The Canadian public expects commercial air travel to be safe
and secure. It is evident from the recovery of passenger volumes, following the
dramatic decline after the attacks of September 11, 2001, that the Canadian
travelling public is showing confidence in the security measures that have so
far been implemented. Canadians are also aware of the ever-changing threats
posed to civil aviation by terrorists and terrorist networks operating on a
global scale, and of the need for resilience and resourcefulness in anticipating
and countering these evolving threats.
The travelling public is not exclusively concerned with security, but wishes
to see security as part of an efficient and comfortable air travel system.
The Panel heard concerns about long lines, bottlenecks and backlogged queues
at the security screening checkpoints in Canadian airports, and we heard the
concerns of passengers with disabilities and special needs. We also heard
the concerns of the air carriers, the airport authorities and other
stakeholders about the economic viability of the civil aviation sector and
its ability to serve the public while retaining the highest standards of
security. With an appropriate level of awareness on the part of both the
public and the authorities, and the right mix of policies in operation, we
believe that it is possible to serve both the requirements of security and
the requirements of a viable and efficient civil aviation industry.
There is a considerable security agenda to fulfill in the uncertain world that
faces us in the early 21st century. It is being addressed in the
context of national security policies, as well as our international commitments.
2.1 Canada's Aviation Security Agenda
The National Security Policy of 2004 proposed an agenda to protect Canadian air travellers in the new post-9/11 environment. Many of the steps set out in the Policy have already been acted upon. In the same year, the Public Safety Act,
2002, received Royal Assent. This statute, among other things, clarified and strengthened authorities for the RCMP, the Canadian Security and Intelligence Service (CSIS) and Transport Canada to request passenger information to assess threats to transportation security.
The National Security Policy also promised the development of strategies to enhance the security of air cargo. Budget 2006 followed through on this with the allocation of $26 million over two years for the design and pilot testing of an air cargo security initiative, including the “development of measures to ensure cargo security throughout the supply chain, as well as the evaluation of screening technologies.”
[ 1 ]
Another step forward promised in the National Security Policy was a commitment to “work with the United States and with our G8 partners to develop further security measures, including co-operation on threat and vulnerability assessment methodology.”
[ 2 ] Specifically cited was the assessment of “risks and effective countermeasures for potential attacks from shoulder-fired missiles” (MANPADS), a new threat that continues to draw the close attention of Canada and its allies. Clearly, these and other challenges remain outstanding.
2.2 The International Dimension: ICAO
Canada is a contracting state to the Convention on International Civil Aviation that codifies the principles of international air navigation and supports the planning and development of international air transportation. Canada is a member state of the International Civil Aviation Organization (ICAO), with its headquarters in Montreal. The ICAO Council adopts standards and recommended practices concerning air navigation, prevention of unlawful interference and facilitation of border-crossing procedures for international civil aviation. In addition to national audits, ICAO also conducts periodic security audits of member states.
Annex 17 to the Convention on International Civil Aviation, entitled Security: Safeguarding International Civil Aviation Against Acts of Unlawful Interference [ 3 ] lays out the minimum security standard expected of all contracting states. Under the Annex, each contracting state is required to establish a civil aviation security organization and to develop and implement regulations, practices and procedures to respond rapidly to security threats and to safeguard persons and civil aviation against acts of “unlawful interference taking into account the safety, regularity and efficiency of flights.” [ 4 ]
Annex 17 requires each member state to establish and implement a written civil aviation security program, and to ensure that airports and air carriers have written security programs that meet the requirements of the national program. Canada maintains that Transport Canada’s legislation, regulations and security orders offer the equivalent of a national aviation security program.
ICAO also produces the Security Manual for Safeguarding Civil Aviation Against Acts of Unlawful Interference (DOC 8973). This document provides detailed procedures and guidance on aspects of aviation security and is intended to assist states in the implementation of their respective national civil aviation security programs required by the specification in the Annexes to the Convention on International Civil Aviation. ICAO DOC 8973 is a guidance manual, not a standard or practice.
Annex 17 encourages international cooperation and the exchange of information and intelligence on threats. Standard 3.1.3 specifies that “Each Contracting State shall keep under constant review the level of threat to civil aviation within its territory, and establish and implement policies and procedures to adjust relevant elements of its national civil aviation security programme accordingly, based upon a security risk assessment carried out by the relevant national authorities.” [ 5 ] This is especially important, as it indicates two basic principles for national aviation security policy.
Firstly, any effective program must be intelligence-led, based upon up-to-date threat assessments and resilient enough to adapt to new threats as they emerge. Secondly, risk analysis and assessment are the basis for effective use of security resources. Annex 17 specifies a number of minimum security requirements that all states must meet, but in some cases, additional security measures need be triggered only when a national security risk assessment deems it necessary. A security risk analysis based on the best available intelligence can and should be used to indicate the most effective deployment of resources and security measures.
Under the Annex, contracting states are required to establish a national aviation security committee to coordinate the security activities of entities involved in the national civil aviation security program. [ 6 ] Airports must also designate an authority for coordinating security procedures and establish a security committee at each airport to assist the authority. States should ensure that security requirements are integrated into the design and construction of new facilities and alterations to existing facilities. [ 7 ] Airports must also have emergency plans to coordinate the response of all relevant agencies to an emergency, designate an emergency operations centre and a mobile command post, and periodically test these procedures by emergency exercises. [ 8 ]
Standards for pre-board screening of passengers and their carry-on luggage and the screening of hold baggage are specified. [ 9 ] Of particular interest to Canada are those which deal with passenger-baggage reconciliation, an issue on which Canada took the initiative following the Air India
Flight 182 disaster in 1985 to prevent the threat of bombs in unaccompanied hold baggage. [ 10 ]
ICAO requirements for quality control of screening personnel include security clearance procedures, performance standards, certification and periodic recertification of screening personnel, periodic “audits, tests, surveys and ICAO requirements for quality control of screening personnel include security clearance procedures, performance standards, certification and periodic recertification of screening personnel, periodic “audits, tests, surveys and inspections” to verify compliance with the national security program, and the authority to require remedial actions where appropriate.
[ 11 ]
Annex 17 also stipulates that security controls be applied to cargo and mail prior to their being loaded onto an aircraft engaged in passenger commercial air transport operations.[ 12 ] As passenger aircraft are the primary means of cargo transportation in this country, the Panel considers the development of a security regime for cargo and mail air transport in Canada to be an urgent priority.
ICAO requires identification systems for authorized personnel to access restricted areas of airports, as well as checkpoints for verifying their identity when entering restricted areas.
[ 13 ] Random screening of persons and vehicles accessing restricted areas is also stipulated, the proportion to be based upon a risk assessment carried out by the appropriate national authority.[ 14 ]
Extracts from other annexes to the Convention relate to security of aircraft, including secured cockpit doors to prevent unauthorized entry by force; [ 15 ] security of travel documents to gain entry to aircraft, including machine-readable digitized biometric indicators (face recognition, iris scan and/or fingerprint) embedded in documents; [ 16 ] and airport perimeter security. [ 17 ]
In-flight security measures, including the handling of disruptive passengers and provision of armed in-flight security officers (air marshals), are discussed in Standard 4.7 of the Annex, while Standard 5 relates to management of response to acts of unlawful interference, such as dealing with a hijacked aircraft landing on national territory.
In summary, the five chapters of Annex 17, together with 12 relevant extracts from other ICAO annexes, instructions and procedures, form a comprehensive document available to states for implementation of the prescribed security measures.
[ 18 ] Transport Canada’s regulatory framework for air transport and aerodromes and its confidential security measures are designed to comply with ICAO’s security standards as set out in Annex 17. Canada meets the standards set by ICAO and, in some cases, exceeds them.
2.3 The North American Dimension
For Canada, the North American context for aviation has special significance. The United States is by far Canada’s largest air transportation market, with an estimated 19.8 million passengers travelling between the two countries in 2005 (31 per cent of the total Canadian air passenger traffic). [ 19 ] In November 2005, the U.S. and Canada negotiated an Open Skies agreement, which liberalizes the previous 1995 Air Transport Agreement and creates a more open framework for air services between and beyond the two countries. The Open Skies agreement will enable U.S. and Canadian
air carriers to pick up passenger and/or all-cargo traffic in each other’s territory and carry it to a third country as part of a service to or from their home territory; operate stand-alone all-cargo services between each other’s territory and third countries; and offer the lowest prices for services between each other’s territory and a third country. The agreement will not, however, permit a U.S. carrier to carry domestic traffic between Canadian cities or vice-versa.
There are many close and special arrangements between Canada and the United States in aviation security matters, and it is a high priority of Canadian national security policy to ensure that the Canadian aviation sector is not viewed as a security threat to our neighbour. ICAO Annex 17 requires member states, whenever practicable, to accommodate requests from other states for additional security measures for specific flights.[ 20 ] After the events of September 11, 2001, the American government required special arrangements for foreign flights to Ronald Reagan Washington National Airport, including mandatory provision of air marshals, additional advance passenger information and extra security requirements for the preparation and take-off of aircraft. Canada has made adjustments to its aviation security regime to accommodate these requirements. Canada has also accommodated national airlines with special security requirements, including Air India and Israel’s El Al.
Shortly after 9/11, on December 12, 2001, Canada and the United States signed the
Smart Border Declaration and its 30-point Action Plan to enhance the security of our shared border while facilitating the legitimate flow of people and goods. The
Declaration includes elements relevant to aviation security, such as the development of common standards for biometric identifiers on travel documents (the NEXUS Air program uses biometric recognition technology to identify pre-approved, low-risk Canadian and U.S. travellers for facilitated entry to both countries).
[ 21 ] Also included are mutual recognition of each other's national aviation security standards and the coordination of measures essential to protecting the citizens of both countries. The
Declaration shares and analyzes transborder and international passenger information and implements and extends the Pre-clearance Agreement signed in January 2001.
Cooperation has also been extended to Mexico, the third partner in the North American Free Trade Agreement. The
Security and Prosperity Partnership of North America, between Canada, the United States and Mexico, includes a Security Agenda with two broad aims, each with relevance to aviation security: to secure North America from external threats and to prevent and respond to threats within North America.
[ 22 ]
Since June 2005, the United States, Canada and Mexico have completed training on principles to protect aircraft from terrorism threats, on marksmanship skills and on emergency procedures. On March 31, 2006, in Cancun, Mexico, a Leaders' Joint Statement on ‘North American Smart, Secure Borders’ declared:
Our vision is to have a border strategy that results in the fast, efficient and secure movement of low-risk trade and travelers to and within North America, while protecting us from threats including terrorism. In implementing this strategy, we will encourage innovative risk-based approaches to improving security and facilitating trade and travel. These include close coordination on infrastructure investments and vulnerability assessments, screening and processing of travelers, baggage and cargo, a single integrated North American trusted traveler program, and swift law enforcement responses to threats posed by criminals or terrorists.
[ 23 ]
Several Canadian government departments and agencies, including Transport Canada, are working with U.S. and Mexican officials to achieve these goals.
2.4 Anatomy of Canada’s Aviation Security System
Transport Canada is the designated national civil aviation security authority (under ICAO Annex 17), and represents Canada in the development of ICAO standards. The
Department has the lead role for developing aviation security policy (including the policy by which airports are designated and made subject to CATSA screening); develops the
Canadian Aviation Security Regulations for Governor-in-Council approval; adopts security measures, orders, emergency directions and interim orders regarding aviation security; monitors the aviation industry to ensure compliance with the regulations; manages the airport restricted area security clearance program; and works with intelligence agencies
[ 24 ] to provide intelligence information to CATSA, airport operators and air carriers. In the early 1990s, Transport Canada began to transfer operational responsibilities for airports to local airport authorities. Transport Canada is no longer the owner/operator of airports, but the landlord, policy-maker, regulator and compliance monitor. The airport authorities are now partners in security, as well as in the other operational aspects of Canadian airports.
Responsibility for civil aviation security in Canada does not rest solely with Transport Canada, but is shared among several federal government departments and agencies, air carriers and airport operators. It is an integrated system involving various governmental and private sector organizations. A great number of government entities, as well as many tenants, from retail to general aviation and ground-handling service providers, have a role in airport security. For example, at Canada’s busiest airport, Lester B. Pearson International Airport in Toronto, there are more than 45,000 employees with Restricted Area Passes. The task of developing and maintaining a security awareness culture with so many players is massive, but nevertheless essential for good airport security. The complexity is more evident when examining the different organizations involved in security at the airport level (see illustration 2.1).
[ 25 ]
2.1 The airport security environment

As one of the major players, CATSA is responsible for screening persons who access aircraft or restricted areas through screening points, the property in their possession or control and the baggage that they give to the air carrier for transport. CATSA manages funding agreements with the RCMP for the Canadian Air Carrier Protective Program and with airport authorities for enhanced airport policing. It also manages the acquisition, installation and maintenance of equipment required for security screening and is responsible for implementation of the Restricted Area Identification Card (RAIC) program.
Air carriers are responsible for ensuring the security of their aircraft, as well as the security of cargo, mail, catering and provisions carried on board. They must train their security personnel; institute procedures for the handling of threats to an aircraft or a flight; ensure the security of passengers, carry-on bags and checked baggage; and perform baggage reconciliation to ensure that bags are not loaded without the passenger being on the flight.
[ 26 ]
Airport operators hold important responsibilities for making airports secure and aviation security policies effective. They coordinate response to security threats, establish and maintain restricted areas of the airport and their pass systems and are responsible for physical security, including perimeter security. Airports provide facilities for pre-board screening (PBS) and hold bag screening (HBS) operations, and arrange for armed police response to these checkpoints. They ensure a police response capability for the various Canadian inspection services, and a presence in U.S. pre-clearance areas, as well as any other police services required. Airports are also responsible for developing, maintaining and exercising airport emergency plans and procedures.
The Royal Canadian Mounted Police (RCMP) is responsible for the Canadian Air Carrier Protective Program, which places specially trained police officers on board selected Canadian commercial aircraft. The RCMP provides policing at airports where it is the police of local jurisdiction. It is responsible for the investigation and prosecution of national security criminal offences, including terrorist acts, and it provides information about police record checks to Transport Canada for persons applying for an airport Restricted Area Pass.
Local police forces provide armed response to alarms from the security screening points, armed police officers to stand by for departures for Ronald Reagan Washington National Airport and armed police presence at all U.S. pre-clearance locations at Canadian airports. They are responsible for investigating bomb threats on the airport premises, provide police response to Canadian Border Services Agency (CBSA) inspection points and carry out non-aviation-related activities at airports.
The Canadian Security Intelligence Service (CSIS) provides threat assessments to the Government of Canada, including Transport Canada, based on current intelligence and information drawn from a wide variety of sources. It is up to the recipient department to determine how it should respond to the assessment. Security assessments are provided to Transport Canada for persons applying for an airport restricted area pass. CSIS also maintains a presence at some airports for non-aviation security matters.
The Integrated Threat Assessment Centre (ITAC) is a functional component of CSIS. It is a community resource, staffed by representatives of a number of government departments and agencies, whose primary objective is to produce comprehensive threat assessments, focussed on terrorism, for timely distribution within the intelligence community. ITAC distributes its assessments to its core partners, including Transport Canada, and relies on them for further distribution to their key stakeholders. [ 27 ]
The Canadian Forces, under the Department of National Defence (DND), are responsible for surveillance and control of Canadian territory and airspace, search and rescue, civil defence and protection of infrastructure. The Canadian Forces assist with emergency preparedness, are equipped to deal with terrorist threats in Canada, and support the civil authorities of other federal departments and agencies with respect to counter-terrorism.
Another player in Canada’s aviation security regime is the Canadian Border Services Agency (CBSA), which is responsible for providing integrated border services that support national security and public safety priorities. CBSA is an important presence at all Canada’s international airports, managing clearance for immigration and customs/excise programs for passengers arriving in Canada. It also uses advance passenger information to identify high-risk travellers before they reach Canada, and detains and removes from the country those people who may pose a threat. The CBSA is developing pre-approval programs, such as CANPASS and FAST, and NEXUS jointly with U.S.A. Customs and Border Protection,
[ 28 ] to facilitate the approval for entry of low-risk travellers who have agreed to undergo a background check. CANPASS Air kiosks are now in use at several airports across Canada.
Airport tenants, such as caterers, cargo handlers, retailers and fixed base operators, must ensure their facilities have a controlled security barrier to the airport restricted area. They are also responsible for ensuring that any persons entering the restricted area have the necessary authority and that any goods leaving their premises are safe to enter the restricted area.
In our many public consultations and bilateral meetings, there was near-unanimous opinion that the current division of responsibilities for aviation security should remain largely the same. However, we learned that the precise lines of responsibility among the different players in the process are not always clearly drawn and may need some adjustments. The present system, after all, is only a few years old, and has been under considerable pressure. In the circumstances, adjustments are inevitable and desirable.
Australia, in revamping its aviation security system from the previously dispersed responsibilities, shifted primary responsibility for airport security and counter-terrorism first response at the major airports to the Australian Federal Police. We did not see the need to have the RCMP take a similar role at Canadian airports at this time, but this could be considered in the years ahead, depending upon the evolution of the future threat environment.
As indicated above, Transport Canada has been designated as Canada’s national civil aviation security authority. This resembles the situation in the United Kingdom, where the Department for Transport is the designated national authority, but differs from arrangements in the United States, where the Transportation Security Administration is part of the Department of Homeland Security, separate and distinct from the U.S. Department of Transportation.
One option this Panel considered was whether responsibility for aviation transportation security in Canada should be more appropriately assigned to the Department of Public Safety and Emergency Preparedness, which was created after the events of September 11, 2001. The Senate Standing Committee on National Security and Defence has made such a recommendation.
[ 29 ] However, we heard very little support and few compelling arguments for this idea from stakeholders or interested parties with whom we consulted publicly or privately, or in the submissions we received. The consensus appears to be that Transport Canada, with its wider mandate for the transportation sector as a whole, is the most appropriate authority for aviation security, permitting a better level of integration of security with more general transportation policy. Since one of the major themes of this report is the need to integrate security more seamlessly into the aviation sector as a whole, we see an advantage in Transport Canada retaining responsibility for aviation security, along with the other related aspects of aviation.
Recommendation 2.1
We recommend that responsibility for aviation security remain with the Minister of Transport.
2.5 Risks and Layers: Envisioning Aviation Security
Two phrases are most often employed to describe the Canadian aviation security system: that it is risk-based and that it is layered. These concepts cast light upon the nature of our security system; they offer standards to emulate but they can also serve to mislead if not properly understood.
2.5.1 Risk-based security
Risk is a function of the likelihood and feasibility of the threat, plus the vulnerability of and the impact on the target. Resources, financial and human, are not unlimited and should be allocated according to assessed risk. In some cases, administrative and political measures may lack sufficient legitimacy to be accepted.
[ 30 ] Security measures taken should be proportionate to the risk.
As indicated earlier, ICAO prescribes a risk-based approach for member states in applying international security measures to their domestic situation. Domestic application of the measures “to the extent practicable” should be “based upon a security risk assessment carried out by the relevant national authority.”
[ 31 ] The Auditor General is equally insistent that a risk-based approach is required, and has indicated her disappointment that Transport Canada “has not fully implemented formal risk management.”
[ 32 ] In presentations to the Panel, CATSA referred to its concept of security screening as risk-based. It is widely understood that absolute security is an illusory goal; priorities must be established, and these should be based on assessments of the relative level of risk.
In our consultations, many stakeholders spoke favourably of risk assessment as the most appropriate method of applying security measures, often in the context of recommending a more risk-based approach for the screening operations managed by CATSA. For instance, many of our interveners advocated an approach to screening that would focus on higher-risk passengers, rather than on the objects carried by all passengers. It was argued that the vast majority of travellers do not present a security threat and, with appropriate personal information and background vetting, could be processed through a more streamlined screening process, such as a Registered Traveller Program.
To the extent that quantitative risk assessments [ 33 ] are feasible, they must be based on data that inspire confidence. But we have to ask:
to what extent is such confidence justified? Risk assessments must come with very high standards of accuracy when the margin for error is so small.
Transport Canada and CATSA both speak of moving toward adoption of a Security
Management Systems (SeMS) approach, [ 34 ]
analogous to the Safety Management System (SMS) being put in place for aviation,
marine and rail safety. [ 35 ] SMS is based on a
less prescriptive, more results-based regulatory framework for safety purposes;
proponents of SeMS similarly point towards a more results-based regulatory
framework for security. SeMS is certainly a valid management objective, and we
will examine it further in this report.
It must be noted, however, that the degree of certainty and confidence about what is required to maintain safety is greater than that regarding threats to aviation security. Paraphrasing the often-quoted words of
former U.S. Defence Secretary Donald Rumsfeld, threats to safety are “known unknowns,” but threats to security are “unknown unknowns.” Threats to safety are malignant, the result of such measurable matters as design flaws, environmental stress, human error, etc. Threats to security are malevolent, by human design, and are calculated to evade detection and prevention.
In responding to malevolent threats, those responsible for maintaining security are often vulnerable to human error. Underestimating the threat before it actually materializes is a common reaction. The magnitude of the mistakes by both organizations and individuals that led to the fatal Air India
Flight 182 bombing was revealed only in hindsight.
Once a malevolent threat has materialized, human error comes into play in different ways. There is a natural tendency in security planning to focus on past, and thus known, threats - to be reactive rather than proactive. Although the actions taken after the Air India bombing, the events of 9/11 and the recent alleged plot at Heathrow were appropriate responses to specific threats, we must expect that terrorists will be looking for new methods of attack calculated to evade the existing security controls. In short, the next terrorist threat will quite likely be the ‘unknown unknown.’ This puts pressure on the intelligence capacity for threat assessment.
We are also aware of criticism of the risk-based approach to security policy as providing a cover or excuse for inaction. Members of the Senate Standing Committee on National Security and Defence have expressed doubt that a risk-based approach is an adequate solution for what the Committee believes to be serious security shortcomings. [ 36 ] We do not entirely agree with this argument. The Senate Committee does have a valid point if risk assessment is superficially conducted or is used as an ex-post facto rationalization for inaction. However, government resources are not unlimited; security is not the only policy priority that the Canadian public expects; and all threats to security are not of equal magnitude and urgency. It is therefore imperative that careful risk assessments be made and resources deployed accordingly.
The Panel is of the opinion that a risk-based approach, such as the SeMS, is the necessary basis for any effective aviation security system, and we make a recommendation to this effect later on in the report. It is imperative, however, that risk assessments be based on solid data and on the appropriate level of intelligence. We are encouraged by the commitment of the Canadian government to a risk-based approach, but we would like to see more substantial evidence that this commitment is supported by effective and timely follow-through by CATSA and, in particular, by Transport Canada.
2.5.2 Layered security
The other phrase we heard most frequently describing the Canadian aviation security system is ‘layered.’ This is a relatively simple concept:
security around airports and aircraft is multi-layered, so that if one layer is penetrated by a would-be terrorist, other layers will remain as barriers. An example of layered security is the hold bag screening (HBS) process, in which bags may pass through five levels of searching, each more intrusive, ending with Level 5, where a passenger is summoned to witness their bag being opened for direct physical inspection. Another way of describing layering is to delineate the various authorities, each with specific security responsibilities, through which passengers and their luggage may proceed: advance intelligence; special security operations; airport operators; air carriers; CATSA; police with airport jurisdiction; and RCMP Aircraft Protective Officers. Another aspect of layering involves security checkpoints or barriers: airline ticket counters; pre-board and hold bag screening lines; non-passenger screening checks; departure gates; reinforced cockpit doors, etc.
Some observed that the layered model simply makes a virtue of necessity. The Canadian system has evolved in a series of reactions to attacks or threats. First there was the era of aircraft hijackings, followed by the bombing of Air India Flight 182, the commandeering of aircraft as weapons on September 11, 2001, and more recently, the August 2006 alleged terrorist plot at Heathrow. Each threat has brought forth a specific set of remedies, which remain as part of a cumulative system. These constitute ‘layers’ of security, but do not appear to add up to a coherent system by design. Again, the Canadian government has been reactive rather than proactive. There is also a danger of a lack of accountability arising from many layers of security.
Proponents of layering point to Israel as the model. Ben Gurion International Airport outside Tel Aviv features concentric circles of security, beginning with vehicle inspection and sniffer dogs at road-entry checkpoints to the airport; two circles of perimeter security with high-tech surveillance; behavioural profiling of passengers at airport entry and triage into three streams according to risk assessment; armed surveillance of the entire concourse; and so on.
The Israeli model – a kind of gold standard in aviation security – is not perhaps translatable into the very different Canadian environment. Israeli society has lived for many years with a threat environment that is almost unimaginably high by Canadian standards. As a result, Israelis have accepted levels of everyday security controls that would not be acceptable in Canada.
Boston Logan Airport was the starting point for the two flights that struck the Twin Towers on September 11, 2001, and has since adopted some elements of Israeli-style layered security. Logan has gone to considerable lengths to respond to the grave flaws in its previous security regime revealed on that day. The authorities have developed a layered defence of their facility, instituting informal passenger interviews and even deputizing clam diggers who work in the surrounding shore area as additional eyes and ears of airport security.
Despite the Air India Flight 182 bombing over 20 years ago, and in the absence of a post-9/11 terrorist attack on Canadian aviation, we doubt that the Canadian public would be prepared to expend the resources, or give up the degree of privacy and civil liberties that would be involved in enacting a full Israeli-style layered security regime. An objective risk assessment of the threat to Canadian airports and Canadian flights is unlikely to conclude that an Israeli approach can be justified at this time, especially given the costs involved. [ 37 ]
That being said, there is a lesson for Canada: wherever possible, multiple layers of security are desirable. The concept of layered security certainly presents significant advantages. Layering builds in redundancy, so that if one level fails, others may still come into play, and encourages resiliency and recovery in the face of threats and challenges. As well, layering answers to the ‘unknown unknown’ factor in threats to aviation, to the extent that different layers respond to different potential threats.
From time to time in our public consultations, we heard the suggestion that certain layers of security at Canadian airports were unnecessary, or not justified by risk analysis, and might be dispensed with in favour of concentrating resources on higher-risk threats. There are instances where such suggestions are justified, and later we make specific recommendations for dealing with them. But in the broader picture, we are reluctant to recommend removal of existing layers of security, unless the case is clearly demonstrable. The principle of layering, of building in redundancy, is a good one, and should be retained along with risk-based decision making. Both are required to maintain an acceptable level of security.
2.6 Intelligence
The Panel heard variable, even conflicting, views from players and stakeholders in the aviation and security fields concerning the timely provision of intelligence and threat assessments to CATSA, airport authorities and air carriers. Some believed there was insufficient intelligence provided to front-line personnel to support fully effective responses to security threats. Others asserted that the intelligence provided was robust and adequate. Still others suggested that while now adequate, greater access to intelligence in the future would be desirable and necessary to meet the multiple challenges of the evolving terrorist threat.
2.6.1 The intelligence function in the Government of Canada
Intelligence is a process traditionally shrouded in secrecy. Thus it is hardly surprising that there is a certain amount of confusion concerning the nature of intelligence, its uses and its place in the governmental structure. We begin with a brief sketch of the contemporary role of intelligence in the Government of Canada.
Although a growing proportion of intelligence in the contemporary ‘information age’ is drawn from open sources, intelligence as a specialized function within government is generally associated with the acquisition of information that is held in secret – that is, protected from outside scrutiny. Thus, intelligence may involve the acquisition of information protected by foreign states, or by non-state actors such as terrorist groups, through means usually described as ‘espionage’ – that is, penetrating secretive states or organizations either through human or technical means. Security intelligence is intelligence on threats to national security, defined in the
CSIS Act as: [ 38 ]
a) espionage or sabotage that is against Canada or is detrimental
to the interests of Canada or activities directed toward or in
support of such espionage or sabotage,
b) foreign-influenced activities within or relating to Canada that are detrimental to the interests of Canada and are clandestine or deceptive or involve a threat to any person,
c) activities within or relating to Canada directed toward or in support of the threat or use of acts of serious violence against persons or property for the purpose of achieving a political, religious or ideological objective within Canada or a foreign state, and
d) activities directed toward undermining by covert unlawful acts, or directed toward or intended ultimately to lead to the destruction or overthrow by violence of, the constitutionally established system of government in Canada,
but does not include lawful advocacy, protest or dissent, unless carried on in conjunction with any of the activities referred to in paragraphs (a) to (d).
Intelligence as used by governments is best understood in terms of an intelligence cycle: the process by which information is acquired, converted into intelligence, and made available to policy makers and decision-making authorities. This comprises five distinct, though interrelated, steps: direction
from the government; planning; collection; analysis; and dissemination. Depending on how they relate to this cycle, government departments and agencies may be seen mainly as producers or consumers of intelligence. Although the distinction is not hard and fast – producers are also consumers of other agencies’ and governments’ intelligence, and consumers may occasionally feed relevant information back to producers – it is important. When we examine the role of security intelligence in the aviation sector, the distinction between producers and consumers is key, especially when it is a matter of establishing the appropriate lines for the communication and dissemination of intelligence and defining the ‘need to know.’
In the post-9/11 environment, the Government of Canada has laid stress on the integration of intelligence operations and the wider sharing of timely intelligence. Integration is both horizontal and vertical, among producers and consumers.
Horizontal integration is exemplified in the Integrated Threat Assessment Centre (ITAC), mentioned earlier in this chapter. ITAC is based at CSIS but draws on a range of sources and serves the wider intelligence community with its security threat assessments, especially regarding terrorism. Transport Canada’s Security and Emergency Preparedness Directorate is represented on ITAC and disseminates ITAC assessments to other players and stakeholders in the transportation community, including CATSA, as it considers appropriate.
Vertical integration is shown in the institutionalized channels through which intelligence is received by the many consumers of intelligence within government – for example, the channels through which CATSA receives security threat assessments via Transport Canada, which in turn are based on ITAC and CSIS reports.
It is characteristic of this integrated vertical chain that intelligence is filtered. Information regarding sources stays with the originating agency that is best situated to verify the reliability and protect the identity of the source. Information regarding methods of operation is usually filtered out. Individual officials are not given access to classified information for which they lack appropriate security clearance. There is a potential problem here:
a decision not to disclose intelligence to a recipient is, in effect, also a decision defining the recipient’s intelligence needs. The latter, however, is unable to assess the degree to which needs are or are not being fulfilled. ITAC is attempting to address this problem by making classified intelligence available in a usable form to public officials who may lack appropriate security clearance but need actionable intelligence to fulfill their obligations.
Intelligence shared between national or international agencies often comes with caveats, indicating that it should not be shared further, or only shared under carefully specified conditions. Honouring these caveats is essential for ensuring the continuing flow of intelligence. For instance, if a Canadian agency receives intelligence from a foreign source with caveats and restrictions on its further distribution, failure to comply could lead to the Canadian agency losing future access to valuable foreign intelligence.
Nevertheless, the new threat environment does require that front-line actors be provided with strategic, real-time, actionable intelligence capable of warning against and pre-empting attacks. There must be greater interactivity and information-sharing among the Transport Canada partners and stakeholders, certainly an intensification of existing sharing arrangements. This may imply a significant change to the current approaches to intelligence-sharing in Transport Canada. As some have put it, there is an urgency to move from the old ‘need-to-know’ principle to a new ‘need-to-share’ principle. The need for more information must be balanced with the requirements for protecting secret intelligence and honouring attached caveats.
2.6.2 CATSA’s need for intelligence
CATSA has made clear a degree of dissatisfaction with its access to intelligence that it considers essential to its operations. We carefully considered CATSA’s case. In discussions with the Panel, CATSA emphasized that intelligence is a necessary tool and a specific type of information that it requires to help it gain a more precise picture of what is on its radar screen. CATSA noted that intelligence facilitates time-sensitive, strategic and mission-critical decision-making, and increases its ability to respond effectively to terrorist threats and security concerns. By fully integrating intelligence into its risk management approach to security, CATSA maintained, it is better able to assess vulnerabilities and prioritize resource allocation with the overall result of enhancing effectiveness.
CATSA emphasized to the Panel that it is an intelligence consumer, not a covert intelligence gatherer. It depends on its security partners to provide it with the timely, accurate and service-oriented intelligence data it needs to manage day-to-day operations and plan long-term strategic policy. CATSA stated that it needs access to intelligence so that it can help its front-line screening officers to do a better and safer job.
CATSA is aware that there are often institutional limitations to sharing information and intelligence. However, it noted that it is a firm believer in the value of making intelligence accessible, stating that while there are risks to sharing intelligence, they are outweighed by the benefits.
The formal line of communication of intelligence to CATSA comes via Transport Canada’s Security and Emergency Preparedness (SEP) Directorate. Recently, under a reciprocal exchange arrangement, a CATSA employee worked in the intelligence area at Transport Canada for six months, and vice-versa. We support these initiatives, and encourage further exchanges as a means of improving communication on intelligence issues.
CATSA identified three types of intelligence that it requires: actionable, issue-specific or tactical, and strategic.
Actionable intelligence is threat information that requires immediate response. This might involve intelligence concerning a threat against a specific national airline or flight. Such a threat against Air India by Sikh extremists was known in 1985, for example, yet failed to trigger the kind of security measures at the passenger and baggage screening points that could have prevented the lethal attacks that did occur. Clearly, it is in the interests of the travelling public and national security for actionable intelligence to be provided to those who can
Act upon it. In the case of actionable intelligence concerning the possible threat of an improvised explosive device planted in hold baggage on a specific flight, CATSA should know and would be in a position to take precautionary action. However, in the case of threats associated with particular individuals or organizations, it is not clear how intelligence could be ‘actionable’ for CATSA screening officers.
At present, front-line CATSA personnel do not check passenger identity documents, and screening officers have no means of identifying dangerous passengers, as opposed to dangerous objects they may carry on their persons or in their luggage. The Panel heard recommendations from some airline operators that CATSA should undertake this task.
The next type of intelligence CATSA identified is what it calls ‘issue-specific’ or tactical. This might involve intelligence on new types of improvised explosive devices or new methods of concealing weapons. Here, CATSA’s case for full access to the best available intelligence is very strong. CATSA requires such intelligence, in the most up-to-date form, to do its job of passenger and baggage screening. We found little evidence, however, that CATSA was not in receipt of just this kind of intelligence, and in as timely a form as required. Occasional issues have arisen from CATSA’s desire to access intelligence on threats to other transportation systems. However, on tactical intelligence on specific aviation threats, we believe that CATSA now receives what it requires to do its job. When the alleged terrorist plot to simultaneously bomb a series of aircraft was identified by U.K. authorities in August 2006, Canadian intelligence officials were quickly briefed, and CATSA was notified so that it could effect immediate new provisions to ban liquids and gels from carry-on luggage.
The Panel noticed a certain disconnect between the general complaints we received concerning the lack of intelligence provided and the actual evidence of aviation security intelligence disseminated to front-line personnel. We were impressed with the comment made to us by a senior Transportation Security Administration official in Washington, whose job requires constant liaison with U.S. intelligence agencies. He reported receiving similar complaints of insufficient intelligence from screening officers and airports; however, when he examined the procedures being put in place in response to intelligence or information, it was clear the message was getting through, even though it may not have been flagged as ‘secret intelligence.’ We believe that the situation with regard to actionable and tactical intelligence making its way to the front lines may be similar in Canada.
Strategic intelligence is described by CATSA as the type of intelligence needed to enhance its understanding of all aspects of the terrorist threat, including motivating factors, ideological underpinnings, main objectives, financing, modus operandi and operational support base.
Strategic threat assessments regarding terrorism are, in the first instance, the job of CSIS, the RCMP and other intelligence producers, especially ITAC, which draws on all sources to analytically integrate intelligence on terrorism. To a limited extent, CATSA is a producer of tactical intelligence, but recognizes that it is mainly an intelligence consumer. CATSA has expressed a desire to be at the ITAC table along with Transport Canada and the other players. Given CATSA’s role as primarily a consumer rather than a producer of intelligence, we see no clear advantage to ITAC, or to the strategic intelligence community, that would accrue from CATSA’s participation at this time.
We note as well CATSA’s participation in international conferences on terrorism and aviation security, and the consultations the agency has held with experts on terrorism and counter-terrorism. While the desire to gain deeper knowledge of these matters is admirable, it must be borne in mind that Transport Canada is the designated Canadian national aviation security authority under ICAO, and that for purposes of disseminating strategic intelligence on terrorism, Transport Canada remains the appropriate channel from ITAC as the integrated analyst to CATSA as consumer.
Transport Canada is the key link in the aviation security intelligence chain. It is incumbent on the department to pass on to CATSA every type of intelligence that may be relevant to CATSA’s ability to perform its mandated tasks effectively. Transport Canada is also the appropriate recipient of any tactical intelligence collected by CATSA in the everyday performance of its duties. While we believe that CATSA does receive the intelligence it requires, we note its dissatisfaction in this regard, and urge closer cooperation between Transport Canada and CATSA in the sharing of intelligence relevant to CATSA’s mandate.
Recommendation 2.2
Transport Canada should ensure that CATSA continues to receive all the information and intelligence it requires at the national and local levels to perform its functions, including timely access to the best intelligence and actionable information from all sources on explosives, weapons and concealment techniques.
2.6.3 Widening the links
The sharing of intelligence beyond CATSA also needs to be addressed. In many cases, actionable intelligence on threats impinges directly on the responsibilities of airport authorities and air carriers. For instance, threats to specific aircraft or flights require immediate response from carriers. Threats to airport perimeters or facilities require immediate response from airports. Moreover, there is much to be said for keeping these players more broadly in the loop regarding changes to the threat environment, as opposed to leaving them in a reactive position at the last moment when a threat becomes imminent. In the course of our consultations, the Panel heard complaints from several airports that they had not been informed of critical incidents directly affecting their operations.
The availability of intelligence and threat warnings to all the front-line players is a key factor in promoting effective emergency response. We would stress the importance of integrating the roles of all the players in as seamless and cooperative a manner as possible.
2.7 Coordinating Security
The large number of players with a role in aviation security, as well as the particular and sometimes dramatic circumstances in which they operate, dictate a need for an effective structure and process that can lead to the integration of security activities. In discussions with the airport authorities and the various police forces, it became evident that there is a lack of clarity, consistency and coordination of aviation security activities. The 2005
Lessons to be Learned report, by the Honourable Bob Rae, identifies similar issues from 1985 with respect to the bombing of Air India Flight 182. It is in the interests of all players that airports be secure.
2.7.1 Security Watch Program
There is an important need within the multi-layered approach to engage the entire airport community in an overall security culture in which all employees work together as the eyes and ears of aviation security. Even members of the community outside the airport
should be encouraged to participate. An effective system would incorporate an integrated operational plan; timely and appropriate communication; operational cooperation; and accountability that would extend to all layers in the process. The Panel is of the opinion that airports of all sizes (and indeed all organizations involved in aviation security) should implement rigorous security awareness programs for all personnel working at the airport (essentially, airport-wide “Neighbourhood Watch” programs). These should be active programs, guided by airport security committees, which would allow the regular exchange of relevant intelligence information with front-line staff. The assessment of threats in such an environment would be proactive and methodical. The Panel was impressed by the
iWatch Airport Security Action Program at Halifax International Airport, and notes that airports in several other Canadian cities, including Toronto, Calgary and Vancouver, have instituted similar airport watch programs. Security is indeed everyone’s business.
Recommendation 2.3
Airports of all sizes should implement rigorous security awareness programs (a type of airport security watch program) for all personnel working at the airport.
2.7.2 Airport Security Advisory Group
ICAO’s Annex 17 requires contracting states to “establish a national aviation security committee or similar arrangements for the purpose of coordinating security activities….” [ 39 ] Transport Canada, as the national aviation security authority, serves the similar purpose of coordinating the national aviation security activities of the various entities involved. The Advisory Group on Aviation Security (AGAS), established by Transport Canada in 2005, plays an important consultative role at the national level. AGAS brings together government and aviation industry participants to exchange views on issues related to aviation security policy, strategy, regulatory and program priorities. [ 40 ]
As outlined earlier, at the airport level, the responsibility for aviation security is divided among several organizations. The primary organizations are the airport operator, Transport Canada, air carriers, CATSA and the police of local jurisdiction. At the eight active designated Class 1 airports that have heightened security requirements, there is also a greater presence of RCMP officers dealing with non-aviation security matters. In addition, CSIS has offices on site at some international airports.
Under the Canadian Aviation Security Regulations, airports are required to have a security committee; however, existing committees vary in size, level of representation and effectiveness. The Panel concluded that a consistent approach is needed to ensure the systematic sharing of information and to provide a solid foundation for establishing common goals and procedures for the prevention of and response to aviation security incidents.
Our objective is to ensure that all those concerned with security in its widest sense have a good understanding of how they fit into the airport security regime and their role as part of the team. The importance of communication and information-sharing cannot be overstated.
The Panel is therefore recommending that an Airport Security Advisory Group be established at each designated airport. This advisory committee would be chaired by the airport security manager or equivalent and would have representation from Transport Canada, CATSA, the local police force, CBSA, the air carriers, major ground handlers and airport tenants as a minimum. At Class 2 and Class Other airports, the group could consist of fewer members. The advisory group would be responsible for coordinating and consulting on the development and implementation of the airport’s security plan, which will be discussed in detail in Chapter 4.
The Airport Security Advisory Group would also coordinate regular security operations and would plan and coordinate the airport
security watch program. It would be expected to meet quarterly as a minimum, but more frequently if the situation demanded.
Recommendation 2.4
We recommend that each designated airport establish an Airport Security Advisory Group, to coordinate and consult on the development and implementation of the airport’s security plan, to resolve general security issues, to promote security awareness and to encourage a collaborative approach to security issues.
2.7.3 Airport Security Committee
The Australian and U.K. governments, on the advice of the Right Honourable Sir John Wheeler,
[ 41 ] directed the establishment of a dedicated joint airport intelligence group at each major airport (equivalent to the Canadian Class 1 airports). The Airport Security Advisory Group recommended above would not have the ability to share secret and sensitive information because of its size and composition. In the Canadian context, it is therefore proposed that a high-level
Airport Security Committee be established at each Class 1 airport (and some Class 2 airports, based on a risk assessment). The committee would comprise representatives of the key security and policing organizations and intelligence users in each airport (including Transport Canada, CATSA, local police, CBSA and, where present, the RCMP and CSIS). The airport’s Chief Executive Officer or most senior security or operations official would chair the committee and each member would be security-cleared to allow for the sharing of classified information.
The Airport Security Committee would, among other things, facilitate better sharing of security/policing issues and intelligence information among the key airport security players, assessment of security threats and risks, and dissemination of appropriate information to front-line personnel. The Committee would also lead emergency response to security incidents at the airport. Smaller and more focused than the Airport Security Advisory Group, the Airport Security Committee would be responsible for gathering, interpreting, managing and disseminating to front-line personnel any important intelligence information relating to policing activities and security at each airport. This committee would be expected to have regular briefings and meetings.
A key role of the Airport Security Committee would be to coordinate the development and implementation of a Multi-Agency Threat and Risk Assessment (MATRA) for the airport, based on the U.K. approach. The MATRA system is designed to produce an accurate assessment of the threats to individual airports from crime and terrorism; to identify any gaps and overlap in existing security regimes; and to develop plans for the management of risks. The aim is to arrive at a security plan which is jointly owned and which can be routinely revisited to take into account future developments. [ 42 ] The airport and CATSA would develop their security plans based on such MATRAs.
It should be mentioned here that there is also general concern about criminal activity at the major Canadian airports which, in the Panel’s view, requires vigilance from a threat and risk perspective. In Canada, the Senate Committee on National Security and Defence has drawn attention, for a number of years, to the problem of inadequate criminal checks on airport employees and the possible infiltration of organized crime into airports. [ 43 ] In Australia, Wheeler noted: “Terrorism and crime are distinct, but potentially overlap. At its most basic, a culture of lax security or petty criminality can provide opportunities for terrorists to exploit weaknesses in airport security.” [ 44 ] The Airport Security Committee would provide a forum where a coordinated effort could help address this issue.
Recommendation 2.5
We recommend that an Airport Security Committee be created at each Class 1 airport to facilitate the sharing of intelligence information and to coordinate the development of airport-specific threat and risk assessments.
2.8 Gaps and Vulnerabilities in the Aviation Security System
Among the most important matters to come to our attention during this review were indications of gaps and vulnerabilities that exist in our aviation security system. While many of the risks associated with civil aviation have been reduced to generally acceptable levels, security gaps still remain, making certain points in the overall system more vulnerable to attack.
2.8.1 Air cargo
Air cargo operations represent a major security gap, perhaps the single most significant gap that has been brought to our attention. Air cargo is largely unscreened at present, and this represents a serious vulnerability in the system. Any actual screening of cargo by X-ray or other detection equipment takes place at the discretion of the air carriers. This sector currently represents 6.2 per cent of our trade with the U.S. and 21 per cent of trade with other countries. The amount of cargo carried by aircraft is expected to double in the next two decades as a result of increasing trade with Asia. It is costly to ship cargo by air, and speed is of the essence. The challenge is to screen time-sensitive cargo in such a way as to avoid delays. At present, airlines rely on ‘known’ or ‘trusted’ shippers. Cargo from known shippers is accepted for transport, while cargo from unknown shippers is subject to a minimum 24-hour hold. CATSA has no mandate to screen cargo, and has issued instructions to its screeners that its employees and screening equipment should not be used for this purpose. [ 45 ] In any event, the design, size and capacity of CATSA’s existing equipment would preclude it from screening much cargo.
Air cargo, including mail, is transported in one of two ways. All-cargo or cargo-freight aircraft are dedicated to transporting cargo alone, carrying only the flight crew and no passengers. The large courier companies, for instance, have fleets of aircraft dedicated to transporting their own cargo. Cargo may also be carried on passenger flights. In Canada, this latter method of cargo transport is much more common:
about 70 per cent of total air cargo traffic in Canada is carried on passenger flights. [ 46 ]
The threat posed by unscreened air cargo varies with the type of transport. All-cargo flights pose a lesser risk, since the small number of crew on board and the difficulty of accessing the crew from the cargo hold make them a relatively unattractive target for terrorists. However, as large aircraft carrying considerable reserves of fuel, they could be commandeered and turned into suicide weapons, or used for the dispersal of chemical/biological weapons against heavily populated targets. This threat, however, is less significant in Canada than the threat posed by cargo carried on passenger flights.
Other countries have been moving quickly to fill this gap. The Panel was impressed with the air cargo screening program already in place in the U.K., with its process for certification and verification of the security practices of known shippers, including periodic inspections of their facilities.
The Transportation Security Administration in the United States has recently published a Final Rule on Air Cargo Security Requirements. [ 47 ] This rule will require the screening of all cargo that will be carried on board a passenger aircraft operated by a domestic or foreign air carrier. It also establishes a system to screen, inspect, or otherwise ensure the security of freight that is transported in all-cargo aircraft as soon as practicable. The Administration estimates that its rule will cost about $2 billion (U.S.) to implement over 10 years. Of this amount, 75 per cent will be spent on screening cargo carried on passenger flights, even though this represents a much smaller proportion of total cargo in the U.S. than is the case in Canada. [ 48 ] This is a clear indication of how seriously the U.S. takes the threat of cargo on passenger flights.
In Canada, the CBSA implemented an Advance Commercial Information program in December 2005, requiring all air carriers and freight forwarders, where applicable, to electronically transmit air cargo data to the CBSA before loading cargo at a foreign port. This requirement allows the CBSA to identify threats to Canada’s health, safety and security prior to the arrival of cargo and conveyances in Canada. [ 49 ] We urge the government to expedite a similar program for air cargo that is departing from Canada.
In Budget 2006, the Government of Canada followed up on the National Security Policy promise of 2004 and indicated a commitment to take action on the air cargo question:
“Opportunities also exist to reduce security risks to aviation while promoting trade, domestically and internationally. For this purpose, Budget 2006 allocates $26 million over two years for the design and pilot testing of an air cargo security initiative. This work will include the development of measures to ensure cargo security throughout the supply chain, as well as the evaluation of screening technologies.” [ 50 ]
Transport Canada has developed an Air Cargo Security Strategy and is consulting with stakeholders and initiating pilot programs to test various approaches. It is also working with the CBSA and others on supply chain security. We support the Government’s initiative to develop effective measures to deal with this gap. However, in light of the gravity of the problem, the Panel is very concerned about the length of time it may take to implement effective solutions. Canada needs to do more. We urge Transport Canada to deploy its resources to develop an air cargo security regime as quickly as possible. CATSA would be an appropriate agency to oversee the operational aspects of a new regime. This could include validating shippers’ screening practices and carrying out any residual screening of cargo.
We would particularly stress the importance of a program that certifies known shipper status according to specified standards and verifies, on a continuing basis, known shipper compliance with these standards.
Recommendation 2.6
We recommend that Transport Canada accelerate its work to develop a program for
the security screening of aviation cargo.
2.8.2 General Aviation / Fixed Base Operations
The General Aviation (GA) sector, largely unregulated from a security point of view, may be a target for terrorists. Fixed Base Operations (FBOs) operate charters and corporate flights at airports. There is a reasonable expectation in many of these cases that crew and passengers are known quantities, and do not require full-scale, multi-level screening. However, there are a number of caveats to be considered. Many smaller air carriers are beginning to offer scheduled service as an alternative to the larger airlines that operate out of the main terminals. The Panel has noted the increasing popularity of such operations. As the number of passengers using an FBO increases, so does the threat.
Many of the aircraft used in GA and FBO operations are quite large and carry substantial fuel supplies. Terrorists could use such aircraft as suicide weapons, or for dispersal of chemical/biological weapons. In this regard, we welcome a 2005 Transport Canada proposal to expand screening requirements to additional commercial air operations.
There are also security issues around the deplaning at designated airports of unscreened passengers from non-designated airports and FBOs, a situation that occurs regularly in northern Canada. Passengers and their checked baggage transiting to scheduled flights should be subject to full screening if this has not been done at the point of origin. In some cases, unscreened GA/FBO passengers mingle with screened passengers in the sterile area of an airport, or even on the airport tarmac. Physical separation of the two streams is required, but at smaller airports this rule is not always strictly observed. At one small regional airport, we were instructed that an ‘invisible line’ separates the two streams of passengers.
This is an area that requires closer attention and regulation. There are many small GA operations that pose little security risk, and would find stricter government regulation onerous and costly. There are also logistical issues concerning where the screening would actually be performed and by whom. But there are too many risks and too many questions surrounding the larger GA/FBO industry to allow it to carry on as it has in the past. As argued elsewhere in this report, if screening of passengers is extended to GA/FBO, CATSA would be the appropriate operational agency to oversee the work as part of its existing core role. The Authority could impose national standards and a training regime if appropriate, and provide oversight of private operators on a cost-recovery basis.
Recommendation 2.7
We recommend that screening of passengers be extended to Fixed Base Operations where the size of the operation warrants.
2.8.3 Difficult-to-detect substances
Experts have long known that certain substances, such as the liquid explosives believed to be part of the alleged bomb plot uncovered in the U.K. in August 2006, are difficult to detect using existing equipment. The prohibition of liquids, gels, aerosols and lighters from carry-on baggage was a necessary response to the threat. However, it could be argued that the particular threat of liquid-type explosives should have been foreseen and a contingency plan should have been in place to ensure proper coordination of the response.
New technologies are emerging to improve detection ability, but the costs of deploying new equipment are significant. As well, some new screening methods raise civil liberty and privacy concerns that will have to be balanced against the potential security benefits. We urge the Government of Canada to make every effort to strengthen its research and development program and speed the process of adopting effective and reasonably non-intrusive new detection approaches for these substances, consistent with recommendations made elsewhere in this report.
We recommend that CATSA should be the government agency to take the lead in identifying the technologies and procedures needed to detect substances not readily detected using existing approaches. This would be part of its responsibility for the lifecycle management of its capital equipment, as described later in the report.
In the interim, however, the vulnerability remains. This places a burden of responsibility on CATSA and its screening officers to ensure that every effort is made to screen threats that may not be detected by current equipment. Inevitably, this entails inconvenience to the travelling public, as well as costs to air carriers and airports from longer queues, screening line delays and more security alerts.
2.8.4 Gaps and vulnerabilities at airports
It was brought to the Panel’s attention by several stakeholders that air terminals themselves can be vulnerable to terrorist threat under certain conditions. Long line-ups and congestion at airline check-in or security counters create a target-rich environment, with a large number of people confined in a restricted area. Another situation of vulnerability could occur during a security screening breach. Passengers are routinely evacuated from the secure areas of airports when police are called to a security incident, which again creates congestion in the non-secure areas of the terminal and a possible target for terrorists. Solutions to this situation of vulnerability could be as drastic as redesigning a terminal building, or could involve integrating the security process into other layers, thereby reducing the number of passengers congregating in one location. Emergency evacuation procedures should also be reassessed by the appropriate authorities (the Airport Security Committees) to avoid the necessity of a crowd gathering in a small area.
Even at some of the largest airports, weaknesses in perimeter security (an airport responsibility) present security vulnerabilities, as the Senate Committee on National Security and Defence has repeatedly emphasized. [ 51 ] The Panel has concerns about how easy it seems to be for unauthorized persons to move into
and within restricted areas of airports, especially the larger ones, where tens of thousands of long-term, temporary and casual workers, including cargo company employees, baggage handlers, plane groomers and catering and retail company employees, hold RAPs.
This is a major lacuna in Canada’s aviation security. Recent media reports have
highlighted various places in a major airport which are unguarded, or where
individuals are not challenged and screened, including the airport tarmac,
aircraft hangars and catering facilities. [ 52 ] Access points to the restricted areas – through air terminal buildings, from the ramp or apron where aircraft are loaded, through the outer perimeter that encloses the wider airfield, through airfield gates or tenant facilities, on foot or in a vehicle – must be rigorously secured at all times, and we encourage Transport Canada to work closely with airports to address this serious gap. Non-passenger screening is an essential element of securing the airport perimeter. Searching of vehicles, which is not currently one of CATSA’s responsibilities, should also be an essential part of this screening function. Recommendations to address these areas appear later in this report.
Effective access control can be enhanced through implementation of the biometric Restricted Area Identification Card (RAIC), described further in Chapter 3, and an effective security awareness culture. The full implementation of the RAIC for all non-passengers is an important step in securing airside operations from penetration by unauthorized persons. Progress on the implementation of RAIC has been slowed by a lack of resources and lack of a regulatory framework. Budget 2006 included new funding to extend RAIC to Fixed Base Operations (FBOs) in 2006-07 and to airport perimeters in 2007-08, once the regulatory requirements are in place. Transport Canada and airport operators need to improve security at the perimeter access points to the restricted areas of Class 1 and 2 airports. In Class Other airports, where employees are generally known to one another, we consider that use of the RAIC for electronic entry to secure areas, together with enhanced security awareness, would provide an appropriate level of security.
Another emerging threat to air security comes from outside the perimeter, and raises questions about how aircraft can be defended from external attack. Man-Portable Air Defence Systems (MANPADS) are lightweight, shoulder-launched weapons with the potential to bring down aircraft. They may be operated by a single individual in the vicinity of airports but beyond their actual perimeters, and have already been deployed, so far unsuccessfully, by terrorists outside Canada. MANPADs are difficult to detect and require more elaborate security measures than existing defences within airport perimeters. There is currently no serious threat from MANPADs in Canada, but they have been used against Israeli aircraft in Africa, and there have been reports of a foiled attack in Switzerland. Since this technique offers terrorists the opportunity to bring down aircraft without penetrating screening, it is likely that there will be future attacks employing MANPAD-like technologies. Research on counter-measures is under way in the U.S. and Europe, and Canada should be an active participant in such research.
It can confidently be predicted that each advance in the aviation industry will focus terrorist efforts on discovering and utilizing possible new security vulnerabilities that might result from new industry practices. It is just as certain that every advance in security will encourage the ingenuity of terrorists in finding ways to evade enhanced methods of detection and prevention. This is why it is imperative that every effort be made to close known gaps, as well as to anticipate future gaps before they open. Transport Canada should complete its projects to address the identified gaps in a timely fashion. We are confident that the proposals we have developed will expedite the department’s work in making the necessary regulatory changes. The Panel recognizes that a perfect security system is unattainable without shutting down civil aviation as we know it. However, by assessing risk and taking the necessary steps to protect against unauthorized intrusions, we can achieve a workable and secure aviation security system.
Chapter Two: Footnotes
[1] Budget 2006, May 2, 2006.
[2] Securing an Open Society: Canada’s National Security Policy (April 2004).
[3] Convention on International Civil Aviation (“Chicago Convention”), Annex 17, Security: Safeguarding International Civil Aviation
Against Acts of Unlawful Interference, Eighth Edition (April 2006).
[4] Annex 17 - Eighth Edition (April 2006) 2.1.2.
[5] Ibid., 3.1.3.
[6] Ibid., 3.1.5.
[7] Ibid., 3.2.
[8] Annex 14 – Aerodromes, Chapter 9.
[9] Annex 17 – Eighth Edition (April 2006) 4.4; 4.5.
[10] Ibid., 4.5.3; 4.5.5.
[11] Ibid., 3.4.
[12] Ibid., 4.6.1.
[13] Ibid., 4.2.
[14] Ibid., 4.3.1.
[15] Annex 6 – Operation of Aircraft, Part 1; Annex 8 – Airworthiness of Aircraft.
[16] Annex 9 – Facilitation.
[17] Annex 14 – Aerodromes, 9.10 & 9.11
[18] For example: Canadian Aviation Security Regulations (SOR/2000-111); Designated Provisions Regulations (SOR/2000-112; Airport Restricted Area Access Clearance Security Measures; Transportation Security Clearance (TSC) Program; Aerodrome Security Measures; Security Screening Order; other Orders and Interim Orders (as provided, inter alia, in the Public Safety Act, 2002 (S.C. 2004, c. 15)); Transportation Appeal Tribunal of Canada Certificate Regulations (SOR/2004-130); CATSA Aerodrome Designation Regulations (SOR/2002-180).
[19] Transport Canada, Transportation in Canada 2005: Annual Report.
[20] Annex 17 – Eighth Edition (April 2006) 2.4.1.
[21] The Canada-U.S. Smart Border Declaration: 30-point Action Plan for Creating a Secure and Smart Border, December 2001.
[22] Security and Prosperity Partnership of North America, Security Agenda, March 23, 2005.
[23] Ibid.
[24] CSIS, the RCMP, and members of the Integrated Threat Assessment Centre (ITAC).
[25] CATSA’s Story: Submission to the Advisory Panel on the
CATSA Act Review, CATSA: Our Vision for Aviation Security (SL-811/e-06), page 6.
[26] Certain unaccompanied bags may be allowed on flights if they are identified as such and subjected to additional screening (Annex 17, 4.5.3).
[27] ITAC partners include: CSIS, RCMP, National Defence, the Communications Security Establishment (CSE), CBSA, Foreign Affairs and International Trade, Public Safety and Emergency Preparedness Canada (PSEPC), the Privy Council Office, Transport Canada, the Financial Transaction and Reports Analysis Centre of Canada (FINTRAC), Correctional Services Canada, the Ontario Provincial Police and the Sûreté du Quebec.
[28] http://www.cbsa-asfc.gc.ca/travel/programs-e.html
[29] Standing Senate Committee on National Security and Defence, Canadian Security and Military Preparedness, Fifth Report (February 2002), Recommendation #13; Canadian Security Guide Book, Third Report (December 2004), pages 165-166. See also ‘The holes that remain in our airline security,’ The Globe & Mail, August 12, 2006.
[30]
It is not unusual to find that while government has the legal capacity to take strong security measures, it may in practice be constrained by cultural and ethical considerations, or may lack the political resources to take action. For instance, sophisticated new screening equipment that produces a ‘nude’ image of passengers undoubtedly offers the promise of better security. But concerns over the invasion of privacy and expectations of public resistance have dampened official interest in purchasing such equipment.
[31] Annex 17, Eighth Edition
(April 2006) 2.2.2.
[32] April 2005 Report of the Auditor General of Canada, National Security in Canada—The 2001 Anti-Terrorism Initiative — Air Transportation Security, Marine Security, and Emergency Preparedness.
[33] We note with approval that Transport Canada has conducted at least one exercise in which aviation threats were assessed according to risk, measured quantitatively and ranked. We also note that this has yet to occasion further exercises along these lines.
[34] CATSA defines SeMS as “a systematic approach to setting annual security targets, clarifying security roles and responsibilities in an organization, assessing and managing risks, developing contingency plans, conducting audits, and measuring and evaluating performance on an ongoing basis.”(2005 Annual Report).
[35] Transport Canada refers to SMS as “a systematic, explicit and comprehensive process for managing safety risks,” providing for “goal-setting, planning and measuring performance.” (Transport Canada,
Safety Management Systems (TP 13739)).
[36] The Standing Senate Committee on National Security and Defence, Fifth Report:
The Myth of Security at Canada’s Airports (January 2003); Standing Senate Committee on National Security and Defence,
Canadian Security Guide Book, 2005 Edition: An Update of Security Problems in Search of Solutions
(December 2004).
[37] The new Ben Gurion terminal is only two years old. Israeli authorities were able to insist that security considerations be ‘designed-in’ at every step of the planning and construction. The result is an extremely impressive security architecture. Comparability in Canada would require redesign and reconstruction of all major airports.
[38] Canadian Security Intelligence Service Act, R.S., 1985, C-23, s. 2.
[39]
Annex 17 – Eighth Edition (April 2006) 3.1.5.
[40] The AGAS mandate is to “provide stakeholders information on current and emerging aviation security policy, regulatory and program priorities and initiatives,” and to “receive high-level strategic advice from stakeholders related to aviation security policy, regulatory and program priorities.” Chaired by the Director General of Transport Canada SEP, AGAS includes senior representatives from Transport Canada, representatives from the Canadian aviation industry, CATSA, aviation labour groups and federal government departments and agencies.
[41] Rt. Hon. Sir John Wheeler DL, An Independent Review of Airport Security and Policing for the Government of Australia, September 2005.
[42] Ibid., page 124
[43] Senate Standing Committee on National Security and Defence, Canadian Security Guide Book 2005 Edition, 145-7.
[44] Wheeler, op.cit., page ix
[45] We heard that in some smaller airports, CATSA has permitted its idle equipment to be used for screening some cargo at the request of the carriers. However reasonable, this is not according to policy, and does not take place at the larger airports.
[46] Economic Analysis Unit, Transport Canada.
[47] Federal Register (May 26, 2006). Part II, Department of Homeland Security: Transportation Security Administration, 49 CFR Parts 1520, 2540, 1542, et al., Air Cargo Security Requirements: Final Rule.
[48] A recent article in the Globe and Mail (August 15, 2006) noted that about 25 per cent of all U.S. air cargo is transported by U.S. passenger aircraft.
[49] http://www.cbsa-asfc.gc.ca/import/advance/menu-e.html
[50] Budget 2006, Chapter 3 – Enhancing Cargo Security and Expediting Processing at the Border.
[51] Senate Standing Committee on National Security and Defence, Fifth Report: The Myth of Security at Canada’s Airports (January 2003); Senate Standing Committee on National Security and Defence, Canadian Security Guide Book, 2005 Edition: An Update of Security Problems in Search of Solutions (December 2004).
[52] Journal de Montréal reporting of September 10-11, 2006.
Back
|