A federal review points to stale planning at TSA and uneven execution at FAA, showing how governance gaps can matter before any breach appears.