Summary: A recent GAO report included recommendations for correcting serious physical security deficiencies at the Railroad Retirement Board's (RRB) Chicago headquarters. Reporting of the findings was delayed until RRB had a reasonable opportunity to take initial corrective actions. Photo identification badges have been issued to employees and are being checked by security guards stationed at building entrances. RRB has begun installing a magnetic key entry system to restrict access to the computer area. Although these measures should reduce access, RRB must do more to ensure the physical security and confidentiality of clients' railroad earnings and benefit claims records. RRB should formally assess physical security of its headquarters facilities and develop a comprehensive, coordinated physical security plan which would include manual as well as automated record systems. RRB should consider obtaining the assistance of an outside consultant to perform this work. RRB should also implement the interim procedures suggested in the summary of observations to further increase physical security while the formal physical security assessment is being performed.
