Tuesday, May 27, 2008

Lead, Follow, or ... Something

Evidence that 9/11 is receding into memory: an article in today's New York Times, describing state and local resistance to DHS' priorities for homeland security funding:

More openly than at any time since the Sept. 11 attacks, state and local authorities have begun to complain that the federal financing for domestic security is being too closely tied to combating potential terrorist threats, at a time when they say they have more urgent priorities.

Local officials do not dismiss the terrorist threat, but many are trying to retool counterterrorism programs so that they focus more directly on combating gun violence, narcotics trafficking and gangs — while arguing that these programs, too, should qualify for federal financing, on the theory that terrorists may engage in criminal activity as a precursor to an attack.
I've long argued that precursor crimes are a good way to target potential terrorist cells. But it depends how it's done. If it's a strategic effort that involves information-sharing in an active search for links to potential terrorism, that's good. But if it's simply an attempt to conflate ordinary crime-fighting with "potential terrorism" (because, well, you never know who might be a terrorist...), then that's not strategic. It would just be a matter of luck. Your effort to stop crime might uncover a terrorist because any type of police work could.
The Seattle chief of police, R. Gil Kerlikowske, said, “If the law enforcement focus at the local level is only on counterterrorism, you will be unable as a local entity to sustain it unless you are an all-crimes operation, and you may be missing some very significant issues that could be related to terrorism.”

Chief Kerlikowske is president of a group of police chiefs from major cities who said in a report last week that local governments were being forced to spend increasingly scarce resources because, they say, Homeland Security did not pay for all the costs. “Most local governments move law enforcement, counterterrorism and intelligence programs down on the priority list because their municipality has not yet been directly affected by an attack,” the report said.
What we're seeing here is two ends of a spectrum, neither of which is appropriate. On the one hand, it's ridiculous to imagine that local law enforcement should exclusively focus on combating terrorism.

And on the other hand, no jurisdiction should ignore the potential for terrorism or erroneously conflate all crime-fighting with counterterrorism. Like any low-probability, high-impact event (an earthquake, a tornado, etc), a potential terrorist attack should be prepared for and prevented and/or mitigated to the degree possible.



Tuesday, May 20, 2008

Information Sharing Through "Enlightened Bribery"

Alabama has created a geo-spatial tool, Virtual Alabama, that accumulates public data about homes, schools, businesses, and other locations within the state. Police, fire departments, health care providers and other users can use the tool for preparedness and response. (Also see this post from last July.)

Government Computer News offered an inside look at how the state's Department of Homeland Security went about getting the information to populate the database:

[P]rojects such as Virtual Alabama are always hungry for data, especially in their early stages. And one of the best ways to get data from other local agencies is a form of enlightened bribery, Walker said.

“We determined very quickly that the best imagery available in Alabama was in either state agencies or in county revenue departments because they fly and take a picture of your house to reassess it,” Walker said. “So we go to the revenue folks, and I say, ‘I’m the Homeland Security director, and I’d like your imagery.’ And they say, ‘I’m not giving you my imagery. I paid a million dollars for this imagery.’ They don’t want to give it to anybody because they assume that you have some sort of financial gain after they’ve spent this money. So how do we solve this problem?”

Walker’s strategy was to do an end around by going to county sheriffs. “The typical Alabama sheriff carries a pretty big stick in his county,” Walker said. “He can get just about anything he wants. So we bring the sheriffs together and say, ‘OK, sheriffs, if we had your county’s imagery, these are the kinds of things we [could] give you for free,’ ” he continued.

Walker offered to give the sheriffs free access to the data on one condition: “You’ve got to get me your county data.” So, Walker said, “the sheriff goes to the revenue commissioner and says, ‘I’ll tell you what: You’re going to get a ticket every day if you don’t give the Homeland Security director the imagery from our county.’ ”
Sounds like good old-fashioned leveraged negotiations to me.

Virtual Alabama is a real-world demonstration of the concept that, for information-sharing to be successful, two conditions must exist:

1. Parties must be willing to share the information.
2. The information must be presented in a usable format.

Virtual Alabama succeeds on both counts. But too often, even if the first hurdle is passed, the second one is not. We're hearing that out of fusion centers - that there's a lot of data being ostensibly shared, but it's not in a usable form, so it's difficult to use effectively.

Form follows function.


Terrorism and the Drug Trade

A good post from Douglas Farah, discussing the U.S. first drug conviction with a connection to fund-raising by a radical Islamist terrorist group - in this case, the Taliban. Key points:

As money from donations and charities becomes harder to acquire and move safely, the easy alternative is the drug trade.

I believe this is the future. Religious/ideological radicalism and organized criminal groups will become less and less distinguishable in the pipelines of illicit activities we see more and more.
This argument has been made many times before. Call this another data point.

Friday, May 16, 2008

Local Networks as Counterterrorism Tools

I don't have much to add to this story from In Homeland Security, except to say I think it's spot-on:

Israel places a high value on Human Intelligence and weaves HUMINT into all aspects of their law enforcement activities. A prevalent saying in their intelligence community guides their efforts: “the small bring in the big”. Israeli law enforcement and intelligence collection agents build long term, lasting relationships on the ground with all types of business people.

For instance waitresses, bartenders, taxi drivers and barbers can be a wealth of information. Emergency room employees, gas station workers, and grocery or drug store employees are all good collection sources. Around a specific target, street vendors are worthy of engagement since they frequent the same area and have a perfect viewpoint for noticing out-of-the-ordinary activity. If protecting a church is the objective, the clergy and worshippers are valuable informants.

The key is to cultivate the relationship; visit the sources regularly, build their trust, instruct them on what to look for, and make sure they have a way of contacting you 24/7 if they notice something suspicious. Your sources are force multipliers and critical to gleaning the information needed to identify, monitor and then disrupt terrorist activities. ...

If illegal weapons such as grenades are needed, the builder will need to move out of the circle of those aware of the plot, potentially exposing him and the planners. Well cultivated sources will notice this unusual activity and alert you.
Any kind of malicious actor is vulnerable to exposure at certain stages, because they have certain material needs that must be filled. Building a local network, cultivating relationships and - importantly - instructing your partners on what to look out for - is indeed a "force multiplier" in detecting these moments of exposure.


Thursday, May 15, 2008

Interfaith Disaster Preparedness Groups

Does your community have one? It's a good idea. Local networks with common interests can accomplish a lot. For instance, here's what they're doing in San Francisco:

Leaders from more than a hundred San Francisco-based churches, synagogues and other places of worship are expected to gather today at St. Mary's Cathedral in San Francisco to learn how to make their spiritual sanctuaries into places of physical refuge. Alameda and Santa Clara counties have made similar efforts.

In sessions organized by the San Francisco Interfaith Council, the church leaders will be taught how to create disaster plans for themselves, help congregants prepare their own households and be safety hubs for their neighborhoods in the midst of disaster.

"This is not to say we expect congregations ... to conduct a full-scale disaster response," said Alessa Adamo, program director for SFCARD, a nonprofit that trains faith groups and nonprofits on disaster preparedness. "What we're hoping for is that they're able to take care of their existing client base, help their immediate neighbors and provide a way for volunteers to help."

One of the main goals of today's gathering is to create neighborhood-based clusters of sanctuaries so different congregations can learn how to work as teams.
One thing not to repeat: The tendency to wait until after a disaster:
The San Francisco Interfaith Council was created after the 1989 Loma Prieta earthquake after leaders realized they needed to figure out collaborative ways to bring calm after a crisis. The Marin Interfaith Council was created in response to the devastating floods in 1982.
Business groups and non-profits can also work together, along with public officials. The more planning and preparation that's done ahead of time, the better.


Wednesday, May 14, 2008

Does This Make Sense?

A pair of simultaneous reports has me scratching my head. First, from Syracuse, New York, we learn:

[Radiation] detectors are now in the hands of two local police agencies, as well as state police, as the Office of Homeland Security expands its radiological security program into Central New York.

The hope is if a terrorist is transporting radioactive material to make a dirty bomb, police will be alerted to the material in transit, at the assembly point of the device or at the plot's launch site, said Frank Tabert, deputy director of the state Office of Homeland Security.

The detectors are paid for by grants from the Office of Homeland Security. Twelve police agencies statewide with bomb squads shared $1.4 million in grant money.

Generally speaking, Deputy Chief Michael Kerwin of the Syracuse police, said the devices usually are given to traffic units on the highways and used at large events downstate, such as Times Square on New Year's Eve.
While radiation detectors have some utility in a protective system, their biggest limitation is that they are, for the most part, a last-minute intervention. For this type of intervention to work, you've got to have a bad guy who is already in the U.S., has procured radioactive material and is transporting it so that he can assemble it (i.e., the 11th hour) or deploy it (i.e., the 11th hour, 59th minute).

Granted, the article does say New York intends to station larger, more sophisticated detectors at toll booths and other locations - and this makes some sense, as it's a good idea to station such equipment at transportation bottlenecks. But detectors alone are far from sufficient to protect against radiological threats.

At the same time, in the UK there is doubt about whether European ports - another key bottleneck in the transportation system - will continue radiation scanning of US-bound cargo. The problem? Not enough money:
Doubt has been cast over whether the security scanning of containers bound for the US from Southampton docks will continue after questions were raised over the financial feasibility of the move long term.

The city's docks were among the first ports in the world to start scanning containers destined for the US for nuclear materials as part of a move to step up homeland counter terrorism measures.

[I]t has been reported that the European Union has expressed concern over the long term feasibility of the programme after it was calculated that imposing the scanning of all containers would cost in the region of $500 a unit to US trading partners, based on simple calculations.
Overseas radiation scanning of cargo containers makes a world of sense. It is part of a layered security strategy, aimed at preventing the theoretical bad guy from moving radiological materials into the U.S. in the first place.

Not only that, but ports themselves are key potential targets for a radiological attack. If a "dirty bomb" were deployed in a port and the area became contaminated with radiation, port operations might be shut down for an extended period, with significant economic effects (especially locally).

The idea that we are deploying a new, 11th-hour intervention but potentially losing another layer of the security system is a puzzler.



Collaboration: A Quick But Worthy Read

The Partnership for Public Service has published this brief paper, entitled "Collaboration in Times of Crisis," which captured the lessons learned from a series of roundtable discussions. My favorite takeaway:

Following the panel discussion, our experts and audience discussed ways to improve coordination across other agencies and advance the collaborative capacity of the federal workforce. Their recommendations include:
  • Engage leadership who support and model collaborative behavior
  • Plan and budget for collaborative efforts
  • Enable workers on the ground to regularly interact across teams and agencies
Are you better at collaborating or talking about collaboration? Do you plan your collaborative efforts? Do you budget for them? Does collaboration happen throughout all levels of your organization?



Monday, May 12, 2008

Winning the Battle of Ideas

I found a couple of thought-provoking comments in this opinion piece by Erik Iverson in the Harvard International Review. Although the main focus of the article is on the national counterterrorism strategy, I thought a few points were fit for consideration by state and local "first preventers." First, this is an excellent encapsulation of counterterrorism strategy:

The objective of counterterrorism efforts is to reduce the incidence and effect of terrorism. Terrorism is a tactic, an element of behavior; it is not an ideology. Consequently, the objective of counterterrorism policy should not be to change what extremists believe. The objective should be to change how terrorists act on those beliefs.
In other words, focus on behavior. Focus on what they do and how they do it - not on their underlying value structure. An extremist is not likely to be deterred by a crisis of belief, but they can be deterred by a crisis of confidence in their chances for success. To that end, one of Iverson's recommendations includes:
The United States should aggressively exploit the weaknesses of Al Qaeda’s new decentralized structure. It must degrade the trust in the organization’s systems, among its activists, and between its leaders. Al Qaeda is now critically dependent on a high degree of trust for cohesion among its many elements.

Paralysis of Al Qaeda’s critical organizational systems and the degradation of its most important relationships will not eliminate the Salafi jihadist terrorist threat. It will, however, reduce the ability of the organization to execute operationally complex, high-impact, spectacular attacks.
This is the sort of thing that's possible on the local level. During the recruiting, fund-raising, and operational phases, anyone interested in launching an attack - especially a complex, high-yield attack - will have to take actions that risk exposure. All of these actions present an opportunity to sow doubt and discord.

It's absolutely critical to make distinctions, however. If the reach is too broad and innocent people are swept up, then this just feeds into al Qaeda's paranoid propaganda (i.e., "The West is against us!"). But if the targeting is accurate, then there is a potential to disrupt the trusted networks that are so critical to success.




Friday, May 09, 2008

Senate Report on Homegrown Terrorism

I don't really have much to say about the new Senate report on homegrown terrorism and Internet recruiting, because it covers ground that I've covered before.

But after 10 pages - more than half the report - describing al Qaeda's sophisticated media, communications and marketing campaigns, this stuck out like a sore thumb:

[T]he U.S. government has not developed nor implemented a coordinated outreach and communications strategy to address the homegrown terrorist threat, especially as that threat is amplified by the use of the Internet. According to testimony received by the Committee, no federal agency has been tasked with developing or implementing a domestic communications strategy. While there are a series of outreach efforts being pursued by federal agencies, those efforts are limited, isolated, and not part of a strategic, government-wide policy to significantly minimize the influence of violent Islamist ideology in the United States. ...

And finally, the efforts by DHS' Office of Civil Rights and Civil Liberties (CRCL) and the FBI’s Community Relations Unit are not tied into programs administered by local police departments, some of which are quite comprehensive.
Lesson to local law enforcement and homeland security professionals: If it is to be, it is up to you. (Be countersubversive.)

It's worth remembering that, while someone can be radicalized via the Internet, two things remain true:

1. Radicalization involves a separation from society, so if recruits can be pulled back into the real world of family and society, the process can be reversed.

2. Before recruits can become a legitimate threat, they need tactical skills. To some extent these are available via the Internet (e.g., bomb recipes). But for larger, high-yield attacks, they need to coordinate with others, raise money, and perhaps acquire specialized training. Making these connections and participating in this type of training can be a significant vulnerability for them, as it requires them to leave the relative safety of the virtual world.