A Review of FBI Security Programs

More documents

Recommendations

Info

comply with government security standards and that all employees are aware of security policy. Other agencies have built into management structures processes for coordinated security policy development and have appointed senior officials to implement policy. At the CIA, for example, the Chief of the Security Policy Staff within the Office of Security oversees a staff of professionals who coordinate draft policies with affected components before final approval. A Security Policy Board of senior agency officials from each Directorate meets every other month to review security policy. The FBI should adopt a similar approach to security policy to ensure that groups with divergent interests do not work independently and that security is not inappropriately sacrificed to operational objectives. Participation by senior management in security policy formulation will enforce a commitment to security programs. A Security Policy Board should be established, chaired by a member of the Office of Security, with senior executives from Headquarters divisions, field offices, and other mission areas appointed by the Director. The Department of Justice Security Officer, or a designee, should also be a member of the Board. I. The Office of Security Should Develop A Professional Security Staff Through Enhanced Selection, Retention, And Training Programs Failure to designate security as a core function has led to a demoralized, poorly trained group of Special Agents and support personnel, expected to fulfill security responsibilities for which they have little or no expertise. Security has taken a backseat to operational missions, fostering the belief that one can advance within the Bureau only through success in investigative work. Efforts to change this perception will be unsuccessful unless senior management designates security as a critical function and professionalizes the Security Officer program. The FBI has over 160 primary and alternate Security Officers in Headquarters and field offices, many of whom have been assigned security functions as collateral duties. -95-
Eighty-five percent of those officers have less than five years security experience. Security duties are often secondary to investigative responsibilities, and agents tend to spend as little time as possible fulfilling those duties. Security Officer performance reviews are usually not based on security duties, but on investigations. Security Officers are usually eager to return to investigative work, leading to high turn-over. Assignment to the security program at Headquarters or appointment as a field Security Officer is not career enhancing. The most common complaint Security Officers voiced to Commission staff is that their function is not respected within the Bureau: they are sometimes seen as “poor performers” or as “retired in place.” The stature of Security Officers is also weakened by the fact that they sometime report to field supervisors who themselves do not support Bureau security programs. Unlike other federal agencies, the FBI does not have a career track for security specialists. This has hindered efforts to develop and retain security professionals. The Bureau has no program for recruiting employees with the experience, education, and skills required of professional Security Officers. Job descriptions and performance plans for the position do not exist. A security career program would allow for advancement and career development, contribute significantly to the professionalization of the security staff, and ensure that security skills that take years to develop are not lost through attrition when Special Agents return to criminal investigations. The Commission recommends that the FBI establish career tracks for Security Officers and technical support staff. This is the norm at other agencies, which devote significant resources and time to developing professional staffs. The CIA, for instance, has established six career security tracks and fosters professional, career development through training and rotation of assignments. The CIA Office of Security assigns Area Security Officers (ASOs) to components for two-year rotations; they are responsible for physical security, background investigations and security clearances, and security incident reporting. The Office also assigns Information Systems Security Managers (ISSMs) to interpret and enforce information system policy and to supervise forensic programs, network computer security, and information security incident responses. Although the ASOs and ISSMs report -96-
Page 1 and 2:
U.S. Department of Justice A Review
Page 3 and 4:
Commission for the Review of FBI Se
Page 5 and 6:
Contents Executive Summary ........
Page 7 and 8:
The Commission for the Review of FB
Page 9 and 10:
in FBI security programs that will
Page 11 and 12:
Unlike other Intelligence Community
Page 13 and 14:
INTRODUCTION I could have been a de
Page 15 and 16:
un by an officer in the Soviet mili
Page 17 and 18:
establishment, U.S. penetration of
Page 19 and 20:
operatives he had exposed as double
Page 21 and 22:
Hanssen was indicted on twenty-one
Page 23 and 24:
een transferred to FBI Headquarters
Page 25 and 26:
Gardens. The rebellious colonies di
Page 27 and 28:
Furthermore, in spite of Hanssen’
Page 29 and 30:
others.” In calling for the estab
Page 31 and 32:
have discovered in FBI security pro
Page 33 and 34:
The following is a compressed compi
Page 35 and 36:
I. Security Investigations And Adju
Page 37 and 38:
DOCUMENT SECURITY I. Classified Na
Page 39 and 40:
of Central Intelligence Directives
Page 41 and 42:
II. The Office of Security Should D
Page 43 and 44:
INFORMATION SYSTEMS SECURITY (INFOS
Page 45 and 46:
Robert Hanssen’s espionage demons
Page 47 and 48:
een filled, the persons assigned of
Page 49 and 50:
with the preliminary damage assessm
Page 51 and 52:
FBI was investigating him. 13 While
Page 53 and 54:
focus. 14 As a result of inadequate
Page 55 and 56:
in unrestricted administrative case
Page 57 and 58:
On October 3, 2001, an Electronic C
Page 59 and 60: senior FBI officials responsible fo
Page 61 and 62: percent of the amount sought. 16 Th
Page 63 and 64: information security policies that
Page 65 and 66: PERSONNEL SECURITY I think that [my
Page 67 and 68: The Commission conducted a detailed
Page 69 and 70: The PSU is also responsible for adm
Page 71 and 72: Unit for new applicants, the Person
Page 73 and 74: various elements is spread througho
Page 75 and 76: addressed. These interviews are ess
Page 77 and 78: identified, these individuals can b
Page 79 and 80: overextended and potentially at ris
Page 81 and 82: The FBI’s polygraph program was i
Page 83 and 84: awareness programs relating to poly
Page 85 and 86: DOCUMENT SECURITY Security was lax
Page 87 and 88: Much of Robert Hanssen’s espionag
Page 89 and 90: Room. In the same year, the FBI Mai
Page 91 and 92: Given the ubiquity of ACS, Headquar
Page 93 and 94: (SCI). Before being given access to
Page 95 and 96: eceived in the wake of recent terro
Page 97 and 98: under minimum security controls. Th
Page 99 and 100: carriers receive timely security cl
Page 101 and 102: with the true scope of improper act
Page 103 and 104: SECURITY STRUCTURE . . . [I]f I had
Page 105 and 106: In general, we found serious weakne
Page 107 and 108: executive will ensure constant focu
Page 109: technical security countermeasures.
Page 113 and 114: months training in investigations,
Page 115 and 116: accounts cancelled. A six-hour secu
Page 117 and 118: Unfortunately, reporting to securit
Page 119 and 120: security violations should be subje
Page 121 and 122: and training. -106-
Page 123 and 124: Robert Hanssen’s treachery is hei
Page 125 and 126: Glossary of Acronyms Acronym ACS AD
Page 127 and 128: Acronym GSR HERU HIT HCS HQ HUMINT
Page 129 and 130: Acronym OPM OPR OPSEC ORCON OSI OST
Page 131 and 132: COMMISSION CHARTER
Page 133 and 134: time equivalent government personne
Page 135 and 136: WILLIAM H. WEBSTER, the Commission
show all

A Review of FBI Security Programs

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?