Department of Defense INSTRUCTION NUMBER S-3325 10 June 6 2013 SUBJECT Human Intelligence HUMINT Activities in CyberSpace References See Enclosure 1 U 1 U5836365- PURPOSE As authorized by Directive 5143 01 Reference this instruction a UMUUOTEstablishes policy and assigns responsibilities for HUMINT activities in cyberspace b UhFQUOHmdements policy established in Executive Order 12333 $6200 37 and S-3325 09 References and 2 U APPLICABILITY a U This instruction applies to OSD the Military Departments the Of ce of the Chairman of the Joint Chiefs of Staff and the Joint Staff the Combatant Commands the Of ce of the Inspector General of the Department of Defense the Defense Agencies the Field Activities and all other organizational entities within the referred to collectively in this instruction as the Components b U Nothing in this issuance expands existing authorities in References and Instruction S-5200 42 Reference or limits the authorities of the Components heads derived from statute Executive order regulation and interagency agreement I urn-Hi write-v era-t1 L Iii-- J - 0 i t ci u91art fi-LF' f Classi I Under Secretary of Defense for Intelligence Reason I 4 c DeeIas-sify on June I $3325 10 June 6 2013 4 17 rm 1 VI i y - - '5'3W'd-l I - - 1 H12 Inw1r1 I lr' - 1 1- Efraa wii-Z Ffi b xi 1 as Jr a I - Iq - Ennis Etta 21 - 1 351 sr - ain't Jo 3' r I 1 1 - d consistent with 1100 22 Reference The direction and control of HUMINT activities in cyberspace including the approval supervision and oversight of such activities are inherently governmental activities and may be performed only by US Government USG personnel civilian employees or Service members contractors with proper training and security clearances may perform appropriate support functions such as serving as linguists interpreters report writers and information technology technicians provided that appropriately trained and quali ed USG personnel are available to oversee the contractor's performance and to ensure that contractor personnel do not perform activities that are inherently governmental e conducted in accordance with applicable law and policy including References and 5240 0 Reference 5240 1-R Reference Directive-type Memorandum DTM 08-01 1 Reference DTM 08-052 Reference the privacy protections listed 5400 11-R Reference ID National Human Intelligence Manager Directive NHMD 006 08 Reference and 007 08 Annex Reference 4 U See Enclosure 2 5 U PROCEDURES See Enclosure 3 6 U RELEASABILITY Restricted This instruction is approved for restricted release Authorized users may obtain copies on the SECRET Internet Protocol Router Network from the Issuances Website at mil whs directives 7 U EFFECTIVE DATE This instruction a U ls effective June 6 2013 seam 3-3325 I0 June 6 2013 b U Must be reissued cancelled or certi ed current within 5 years of its publication in accordance with 5025 0 Reference If not it will expire effective June 6 2023 and be removed from the Issuances Website j bv 1c ael Vickers Under Secretary of Defense for Intelligence U Enclosures 1 U References 2 U Responsibilities 3 U Procedures U Glossary J 1 S S-3325 IO June 6 2013 ENCLOSUE 1 REFERENCES The reference titles in this enclosure are UNCLASSIFIED Directive 5143 01 Under Secretary of Defense for Intelligence November 23 2005 as amended Executive Order 12333 United States Intelligence Activities December 4 1981 as amended Directive S-5200 37 Management and Execution of Defense Human Intelligence HUMINT February 9 2009 as amended Directive S-3325 09 Oversight Management and Execution of Defense Clandestine Source Operations January 9 2013 Instruction 8 5 200 42 Defense Human Intelligence HUMINT and Related Intelligence Activities December 8 2009 as amended Joint Publication 2-01 2 Counterintelligence and Human Intelligence in Joint Operations March 16 2011 Instruction 1100 22 Policy and Procedures for Determining Workforce Mix April 12 2010 Directive 5240 01 Intelligence Activities August 27 2007 as amended 5240 1-IL Procedures Governing the Activities of Intelligence Components That Affect United States Persons December 7 1982 Directive-Type Memorandum 08-011 Intelligence Oversight Policy Guidance March 26 2008 as amended Directive-Type Memorandum 08-052 Guidance for Reporting Questionable Intelligence Activities and Signi cant or Highly Sensitive Matters June 17 2009 as amended 5400 11-R Department of Defense Privacy Program May 14 2007 National HUMINT Manager Directive Number 006 08 Intelligence Community Directive 304 Human Intelligence Clandestine Operational Coordination Procedures July 29 2008 National HUMINT Manager Directive Number 007 08 Annex C National HUMINT Manager Tradecraft Training Standards in a Cyber Environment August 30 2012 Instruction 5025 01 Directives Program September 26 2012 Instruction 0-5100 93 Defense Counterintelligence CI and Human Intelligence HUMINT Center August 13 2010 Instruction 3305 15 Human Intelligence HUMINT Training February 25 2008 Directive S-5 1 05 6 Cover and Cover Support Activities May 6 2010 Instruction S-5105 63 Implementation of Cover and Cover Support activities March 9 1999 Director of Central Intelligence Directive 7 3 Information Operations and Intelligence Community Related Activities July 1 1999 ENCLOSURE I0 June 6 2013 Defense HUMINT Enterprise Manual 3301 002 Defense Human Intelligence HUMINT Enterprise Manual Volume 11 Collection Operations November 23 20101 Instruction 06100 94 Oversight Coordination Assessment and Reporting of Intelligence and Intelligence-Related Sensitive Activities September 27 20 Title 10 United States Code Presidential Policy Directive 20 Cyber Operations Policy October 23 2012 Joint Publication 3-12 Cyberspace Operations February 5 2013 2 Joint Publication 1-02 Department of Defense Dictionary of Military and Associated Terms current edition Available at 5 ENCLOSURE June 6 2013 2 RESPONSIBILITIES U 1 U UNDER OF FOR INTELLIQENCE 1 The a UW Oversees the development and implementation of policy for HUMINT activities in cyberSpace b UMFGBOT Approves a strategy for HUMINT activities in cyberspace c UM-16667 Approves training and certi cation standards for HUMENT activities in cyberspace d U Oversees provides guidance and directs the development and sustainment of'DoD HUMINT activities in cyberspace to collect against validated intelligence requirements 2 U DIREQTOR NATIQNAL QENTRAL SEQLJEILX SERVICE Under the authority direction and control of the and in addition to the responsibilities in section 6 of this enclosure as they pertain to the the 3 U DIRECTOR DEFENSE INTELLIGENCE AGENCY Under the authority direction and control of the the Director DIA ENCLOSURE 2 8-3325 10 June 6 2013 I 4 far 3 14 I 375 - u i L'I if lavin 5-1 '1 21 tau-I 3 2 142 I 4 25 3 1 1 Ell-e Ta I 9' chi-1 991 E7 - Jr-s ah 5 a channels - I Tillm-j-f TFhf I A ENCLOSURE 2 A - r 1 6 U CQWANDER Under the authority direction and control of the Commander United States Strategic Command the Commander USCYBERCOM we - Wd rs'frti - ti'r u Eva'- ENCLOSURE 2 June 6 2013 ENCL 3 PROCEDURES U 4 U HUMINT CYBERSPACE TRADECRAFT ENCLOSURE 3 513325 10 June 6 2013 J aak_ 1 v-r-ni PH-lu-r-n-d 1- THJ-Aio'r-u-r WdiHI-fl-w-hyktu-u-I wiid- 10 ENCLOSURE 3 SEER-EMER- LO ARY S-3325 I0 June 6 20 I3 PART I ABBREVIATIONS AND ACRONYMS U U The abbreviations and acronyms in this Glossary are UNCLASSIFIED DHE Defense HUMINT Executor DIA Defense Intelligence Agency Director National Security Agency Chief Central Security Service Directive Instruction DTM Directive-Type Memorandum HUMINT human intelligence 1C Intelligence Community J2X joint force counterintelligence and human intelligence staff element NHMD National Human Intelligence Manager Directive SIGINT signals intelligence USCYBERCOM United States Cyber Command Under Secretary of Defense for Intelligence USG US Government PART DEFINITIONS U U Unless otherwise noted these terms and their de nitions are for the purpose of this Instruction U opggtions De ned in Presidential Policy Directive 20 Reference U cyber persona An identity used in cyberspace to obtain information or influence others while dissociating the actor s true identity or affiliation U cybe pace De ned in Joint Publication 3-12 Reference U cybersgace operations Defined in Reference U DI-IE De ned in Reference U digital t_radecraf Digital or cyber tactics techniques and procedures designed to obscure or frustrate observation by hostile or unfriendly entities ll GLOSSARY 598W SEW $3325 10 June 6 U HUMINT De ned in Reference - a -- - 'a E 1- U opgn-sgurce intelligence De ned in Joint Publication 1-02 Reference U signals intelligence Defined in Reference 2 U targeting In the HUMINT context the processing of all-source intelligence to determine potential sources capable of satisfying HUMINT requirements l2 GLOSSARY