UNCLASSIFIED FOR OFFICIAL USE ONLY U S Department of Justice Federal Bureau of Investigation THE NEW Field '·Intelligence March 2008 - March 2009 Version 1 5 - --· I Strafeg_i c·Execution Teain UNCLASSIFIED FOR OFFICIAL USE ONLY UNCLASSIFIED FOR OFFICIAL USE ONLY · ONE FBI - PROTECTING NATIONAL SECURITY As we enter our 100th year the F Bl must continue to stand up to thei challenge to protect the American people from an array of complex threats that are in an Increasingly Interconnected world Our vis ion for what the FBI can be and must be to meet this challenge is neither radical nor Insurmountable The FBI willprotect the American wqy of lift by stqying ahead of nati onal securiry threats to the ho neland acti ng at all times with obedience to the Constitution fairness compassion integriry and respect When we talk about threats to national security • we are not focused only on terrorism foreign intelligence and weapons of mass destruction - although these are important priorities A nati anal security threatls one that tries to challenge the very foundations of American society involving dangers so gre' t that no local authority can handle them alone It includes gangs that cause violence and disorder In cities cyber crimes and transnational criminal enterprises that are borderless and have the potential to cause widespread disruption white c ollar crimes that undermine the strength of our economy and public corruption that tears at the fabric of our democracy The foundation of the FBl's strength will be the same in our second century as it was In our first- our core values our tradition of excellence our respect for constitutional rights our support for our partners In law enforcement our ties to our communities and our ideals of fidelity bravery and integrity And let us not forget leadership and a sense of FBI Family At the same time we steadfastly embrace these qualities we must be prepared to think and act differently when cal led upon to keep Americans safe from harm in our next century Our adversaries a re constantly adapting We cannot afford to be set In our ways We must be open to new levels of collaboration As individuals we must be willing to stretch ourselves beyond our comfort zones to develop ourselves throughout our careers and to ado pt a posture of continuous learning We will continue to enforce federal laws but we will choose our cases carefully looking at the level of threat and needs of our local partners and focusing on areas where we have unique capabilities or jurisdiction The FBI is essentially the only member of the U S Intelligence Community with broad authority over the domestic domain The American UNCLASSIFIED FOR OFFICIAL USE ONLY 2 UNCLASSIFIED FOR OFFICIAL USE ONLY people and our partners In the Law Enforcement and Intelligence Communities are counting on the FBI to use all of its tools to build a domestic security service capable of staying on the offensive against our greatest threats To do this effectively we need to maximize all of the FBl's investigative and intelligence capabilities---what·we know-and-what-we -need-to-know-- in every program area to respond to national security threats to the horn eland If we base our knowledge only on what w e learn through cases we will be missing important parts of the picture It Is more important now than ever before that we are ONE FBI We cannot be stove piped in any way- not by field office not by region or not by program We are one enterprise consisting of skilled professionals working together Aided by cutting edge tools and technology we will build knowledge and develop insight that will provide strategic and tactical early warning direct operations create opportunities to further cases and inform national security policymakers This document The New Field Intelligence Is a practical playbook to help us achieve this vision It Is not a policy document but rather a communications tool to help all FBI per onnel understand our strategy for lntelll gence activities in the field and their role in implementing that strategy I am proud of the work that went into thi s strategy because it reflects some of the best thinking across the Bureau A Strategic Execution Team SET made up of almost 100 Special Agents Intelligence Analysts and other skilled professionals from field offices and FBIHQ examined the intelligence activities in each of our 56 field offices The team identified optimal structures and processes for our intelligence activities from the best practices that were developed through trial and error in the field I ask you to be open to the changes that will be required and to do your part to help the 8 ureau succeed Implementation will not be perfect but where you see that things are not working I ask you to work toward solutions If we all participate we wi II reach our full potential as a national security agency and our families communities and country wi II be safer In the years ahead as a result of your efforts UNCLASSIFIED FOR OFFICIAL USE ONLY 3 UNCLASSIFIED FOR OFFICIAL USE ONLY CONTENTS INTRODUCTION ••••• • • •••••• 5 ORGANIZATION 9 COMMON ELEMENTS • ••••• • • •••• • 9 ADAPTING THE MODEL TO OFFICE SIZE 10 FLEXIBILITY IN IMPLEMENTATION • • ••••• •••• • ••••• •••••• • •••• • ••• •• • •••• • • • ••• • • •••••• • • • 12 DESK OPERATIONS TEAM ••• ••••••• •• ••• •••• • 13 ROLES AND RESPONSIBILITIES 15 LEADERSHIP 15 FIG CENTRALIZED STRATEGIC COORDINATING COMPONENT •••••• • • •• •••• 21 OTHER FIG POSITIONS 26 OUTSIQETHE FIG 30 DOMAIN MANAGEMENT 32 BASELINE DOMAIN AWARENESS IN THE FIELD OFFICE 33 APPLICATION OF NEW TOOLS PERSONNEL AND PROCESSES 35 ANALVZING FO INFORMATION USING THE DOMAIN METHODOLOGY 35 COMPLETION OF A DOMAIN ASSESSMENT 36 IMPROVING AND APPLYING DOMA N AWARENESS 36 COLLJ CTION MANAGEMENT 38 HUM INT COLLECTION 41 LEVERAGING CASE-BASED HUM INT COLLECTION 41 DEDICATED SPECIAL AGENT HUM INT COLLECTORS 41 LIAISON · •• 42 VETTING AND VALIDATION OF SOURCES 43 TACTICAL INTELLIGENCE 45 PRODUCTION AND DISSEMINATION 46 MEASURING AND TRACKING PERFORMANCE 51 PERFORMANCE DATA METRICS AND SCORECARDS 53 DATA COLLECTION ANALYSIS AND REPORTING 55 PERFORMANCE DIALOGUES 56 IMPLEMENTATION 60 CONCLUSION 62 UNCLASSIFIED FOR OFFICIAL USE ONLY 4 UNCLASSIFIED FOR OFFICIAL USE ONLY INTRODUCTION What ls the purpose of our Intelligence activities in the field Simply stated intelligence helps us do our jobs better and helps our partners do their jobs better so that collectively we are more effective·at protecting our communities and our nation from harm Gaining intelligence and using it effectively helps us achieve our ultimate mission to protect the American people and enforce the federal laws It enables us to better under stand the actions of our adversaries so that we can prevent threats from harm Ing our communities and our national security It informs our decision-making so that we allocate scarce resources where they will do the most good focus first on the cases with the potential to neutralize the greatest threats and recruit sources who have answers to our most pressing questions When we share this intelligence with our partners we share its benefits with them as well making the entire homeland national security apparatus more effective We bolster the ability of everyone with a role in protecting the American people from the patrol officer to the President to make informed decisions ' Intelligence is not solely the responsibility of the Field Intelligence Group FIG or particular programs The entire field office FO has a role in supporting the intelligence mission All field office personnel whether they are working on criminal matters or counterterrorism and whether they are Special Agent SA or prqfessional staff will contribute to- and benefit from - the office's intelligence activities The field intelligence mission is To protect and preserve the national security of the United States and suppress crime FBI field offices will integrate intelligence activities into all investigative efforts by • Systematically assessing their domain to identify potential threats vulnerabilities gaps in knowledge and collection opportunities against national as well as FBI intelligence requirements which support the broad range of FBI responsibilities • Pro-actively directing resources to collect against potential threats and other issues of interest to the nation and the FBI and developing new collection capabilities where they are needed • Continuously validating collection capabilities to ensure information integrity • Defiberately gathering information against articulated priority intell igence requirements using all available collection resources UNCLASSIFIED FOR OFFICIAL USE ONLY 5 UNCLASSIFIED FOR OFFICIAL USE ONLY • Expeditiously preparing collected information for dissemination and rapidly providing it to appropriate partners at the local state and national level and • Purposefully evaluating the collected information's implications on current and emerging threat issues Core Intelligence Functions While intelligence is integrated into the work of the entire field office it is the responsibility of the FIG to coordinate guide and support the office's activities through five core functions • • • • • Domain management Collection Management Requirements based sometimes non-case collection-including human intelligence HUMINT Tactical intelligence and Intelligence production and dlssem ination These five functions will help the field office ask a series of questions about our adversaries and ultimately answer those questions with enough specificity to drive actions to dismantle them Types of questions include the following What is their leadership structure How do they raise AEOney How do they recruit Where are they present How do they com municate What are their vulnerabilities Most organizations have these elements in common Do we have a diagram of how our adversaries work - their key management fundraising etc and is that picture assembled in one place Wher 3 do we lack knowledge typically acquired through human sources or wires Do we have a plan to address the gaps And can we say with consistency that our dismantlement plans- our use of law enforcement tools - are based on a good picture of the target we're trying to take down Or ar e they ad hoc The ideal field division over time should be able to answer the follow Ing questions 1 Based on the Director's priorities what are the key threats in your dam ain 2 What are your collection efforts directed at this target 3 What coverage do you have of those threats leadership finances etc What Is your levelofconfidenceinthatcoverage 4 What collection plans do you have in place to ask sources about your gaps in knowledge 5 Where you lack sources to answer key questions what recruitment initiatives do you have to find sources who can complete your picture 6 Have you disseminated what you know so that anyone sitting with no knowledge of the target could understand what you know 7 Are your cases drawn from this knowledge Can you articulate and support why you opened one case and not another And are your dismantlement plans based on this knowledge UNCLASSIFIED JFOR OFFICIAL USE ONLY 6 UNCLASSIFIEDI FOR OFFICIAL USE ONLY When we have the answers to these questions we should dissem inate what we know This will enable the Bureau as a whole to analyze national and Intern ational networks Once we analyze and pull together what we know - what the national infrastructure of our adversaries looks like we can then determine the best way to dismantle For example types of concerns include What key players do we neE d to remove to cripple the organization How can we eliminate their ability to raise·funds How·can we-ensure that-our- dismantlement plan will permanently disrupt the target The core functions that will enable the field office to answer these questions will require an investment in analytical investigative and collection resources Investing in these infelligence functions will allow the FO to leverage all of its investigative and analytic capabilities to develop and maintain a common understanding oft he threat Issues they are currently facing but also ensure the FO is able to identify emerging threats assess those threats and act against them Organization All five of the core Intel llgence functions require the FIG to work seamlessly with the operational squads in order to be successful Unfortunately one of the biggest problems Impeding our progress is poor information flow between the Special Agents collecting information and Intelligence Analysts As on the FIG In many offices we also see a lack of direction about the type of intelligence that should be collected Our new model for field intelligence will help us improve these areas so that we can leverage all of our collection capabilities in every squad and · program to meet our most critical Intelligence requirements This new model helps integrate tactical and strategic thinking by establishing a distinct intelligence l adership role at the ASAC or SAC level and a central strategic coordinating component for Collection Management and Domain Awareness This new model will include a Chief Reports Officer and in some offices cross-programmatic issue-oriented local Desk$ with clear links to a network of regional and national Desks They will be supported by database admfflistrators Geographic Information System GIS operators and other professionals The field intelligence model also helps integrate tactical and strategic action by embedding analysts in operational squads and by dedicating a group of Special Agents to requirementsbased cross-program collection It fosters collaboration between the FIG and operational squads and promotes the use of intelligence to inform decision-making at many levels from executive management decisions about resource allocation to tactical operational planning in the squads Surveillance professionals and language analysts will be consolidated under a cross-program ASAC or SAC and will play a critical role in supporting both tactical and strategic efforts In field offices where these groups are not already consolidated they will be placed under the SAC or ASAC for intelligence This will help us leverage their capabilities to facilitate broad support for the entire field office The new structure and work roles will be supported by streamlined processes and new information technology IT tools that make it easier for all field office personnel to share information identify the Intelligence value of information and produce and disseminate Intelligence products UNCLASSIFIED FOR OFFICIAL USE ONLY 7 UNCLASSIFJED FOR OFFICIAL USE ONLY A New Mindset The new field intelligence model challenges us to begin a new way of thinking about ourselves and our roles and responsibi lltles for conducting domestic intelligence We need to start thinking about ourselves as part of a national security org anization This is based on criminal events including terrorist activities that have impacted our nation's security aiitfthmateneci-its democratic principles This is not the job of one side of the house but of the entire Bureau Operational activities feed information into the intelligence process and the intelligence process informs operations We wi II use our interdependent operational and intelligence capabilities to protect the American people from threats - whether those threats come from criminals terrorists hostile foreign intelligence penetrations corrupt public officials or those who deny others their civ ii rights We must overcome the tendency to prioritize and handle resources in program silos Many of the threats we face are regionally nationally or Internationally networked and cannot fully be understood by looking through the lens of a single program or office The FIG will help the field office and FBI Headquarters F BIHQ see the full picture but only if it is supported by the entire FO So we must depart from thinking about sources and intelligence in terms of what case program office or Individual owns them and start thinking about where each can add value Our strategy is to reduce hierarchical bottlenecks and build stronger internal networks connecting personnel and our collection capabilities within field offices across regions and between individuals and FBIHQ We also will build stronger external networks including direct channels of communication between field offices FBIHQ other agencies and the public · We wlll build on our Strategy Management System SMS with performance dialogues that will cascade down from SACs to squads to help us track progress and share best practices We will measure success by the relevance ace uracy and speed of our intelligence reporting It will also be measured by the degree to which information Is actionable or informs decision-making and ultimately by our ability to dismantle our adversaries' organizations and prevent and suppress crime terrorism and other threats to national security Along·these lines you are going to see new metrics for evaluating individual program and office performance and a completely revamped inspection process UNCLASSIFIED FOR OFFICIAL USE ONLY 8 UNCLASSIFIED FOR OFFICIAL USE ONLY ORGANIZATION The creation of a FIG in every FBI field office was a critical step In developing our lntelllgence capabilities -Based on·i nitlal guldance -offices developed a wide range of FIG structure$ staffing models and workfl ow processes Some had a great deal of success others struggled But in all instances these 56 models taught us valuable I essons Our next step is to apply those lessons to achieve our full potential in the I ntelligence arena · Through an exhaustive analysis of Fl Gs and input from both field and FB IHQ personnel we identified the elements that the most successful field offices have in common Using these best practices we designed the optimal model for Intelligence in all field offices We will now standardize all field offices according to this model allowing for some variation in the size and complexity of the office Implementation of the model will impact the office's organizational structure what leadersh Ip positions exist and who fl lls them work roles and responsibilities for personnel the relationship between the FIG and operational squads and coordination across field offices and with FBIHQ Common Elements The structure and work roles for intelligence In the field are being standardized for two reasons First standardization wil I ensure that core intelligence functions i e Domain Management Collection Management Collection Production and Dissemination and Tactical Intelligence are being performed within each field office in a consistent and effective manner Second as employees move to other assignments within field offices between field offices or to FBIHQ they will have the benefit of common roles tools practices and procedures present at all I evels of the organization The field intelligence model includes common elements that will be applied in all offices regardless of size and complexity • All field offices will have a distinct intelligence leadership role at the ASAC level or above • All FIGs will have a central strategic coordinating component consisting of a Collection Management Coordinator CollMC Domain Management Coordinator DMC and Chief Reports Officer CRO This component will enable each field office to develop and sustain a holistic cross-programmatic view of its domain overlay colleqtion capabilities based on the Domain Assessment identify collection opportunities and intelligence gaps assist the field office with articulating an overarchi ng collection strategy and cascad Ing collection plans and ensure timely reporting of raw intelligence to our partners that is both relevant and of high quality Depending on the size of the FIG they will be supported by varying numbers of database administrators GIS operators and other profe sional staff • Embedded Intelligence Analysts will be supervised by the FIG but will be physically colocated with operational squads and Resident Agencies RAs UNCLASSIFIED FOR OFFICIAL USE ONLY 9 UNCLASSIFIED FOR OFFICIAL USE ONLY • All Fl Gs will have a team of Special Agents dedicated exclusively to requirements-based source development and collection • Cross-program collection capabilities such as SOG SSG 1 and language analysts will be consolidated under the ASAC or SAC for intelligence-to-facilitate broad-support for- allsquads and programs in the field office If they are already grouped under an SAC or ASAC who is not responsible for an investigativ program the organizational structure will not be changed An SAC or ASAC who is not responsible for managing any of the investigative programs should be best positioned to help the SAC focus resources in a way that supports the Coll ectlon Strategy · • The final common element is the implementation of management processes to ensure that intelligence supports effective deci sion-making across the field office Adapting the Model to Office Size In the smallest 13 to 15 field offices the field Intelligence model will include all of the core intelligence functions but some duties may be combined ILLUSTRATIVE FIELD INTELLIGENCE MODEL - SMALL OFFICE • 3 Fleld lntemgence Strategy componenlll Program llnkages 1 SAC lntelllgance IPMenager SiA• Colrectlon Mgmt QnclTargetjng IP Cooittfnator Domain• Management SSA HUMINT Collection Could be slngle SIA lnteillgence CHS Prod Orssem HUMINT Collector Chief RO TIS • Central strategic coordinating component Embedded with squeda In etteh • Develops FO Collection Requirements program Cl CT CYBER CRIM • Strategy and Plans and with RAIi In order to Develcps FO domain awareness • Interpret and use Collection • Performs slralflglc analysts Requirements • Reviews produces and • Collaborate on Collectlon disseminates raw intelligence may • Filter process and analyze produce finished intelligence where Information to capab0tty and need are present - Driw domain awareness - Create raw lnteUlgence products - Facmtata collectlon to addresa priorities and gaps in FO Collection Strategy • HUMINT cottectlon lncludlng Liaison of Domain information and Foreign Intelligence SSA Cross-Program Coiiectlon CrossProgram Collectlon capabllities • Language analysts • Surveillance • Tech TBD Actual Supeivfsory staffing will depend on total FIG size lncludlng nonFBI personnel • In «der to resolve short •lenn r8SOUl'ce constraints this position can be filed by an SSA Currently St Louts Richmond Ullfe Rock Jaason Mobile J'nchotage do not have SIAs '' UNCLASSIFIEO FOR OFFICIAL use ONL Y In the 38 to 40 field offices classified as medium or small complex the field intelligence model • ••• -- ··-·-·- Jn lµcte_ J'1e col1lJunct1oos andsome specializatlon againstthahighest priorityJocalfssues -•··--·-· --- •-·---- •-- FIELD JNTEWGENCE MODEL- ILLUSTRATIVE MEDIUM OR SMALIJCOMPLEX - C CJ Provide CIOIII'- · programmatic foclJI on domain management ind illtel pltlducllon througlupeclllo lens e g geog aphy EmbNdfdln eai hpn gtamsnd RM toe • Interpret and use CollecllO I Requltemenll • Colfabolaw on ColleCtlOlf ' • F1lter JJl1 CCIS8 · and anaiyze ldomlatlon to - Drivedomalnawme - Cntate raw l lll lllllce i IOdUdl - Faclllla1eCDlllcllaliloacklml prlorltlff and gapi In FO _t ollectlon - - Fllldlntelllgence Stnltagy componenta Prog am lnkagea • Language ana TIS • SUIV8tllance • Teob TBO HUMINT collac tlal lncludfnO Liaison of Domain and Fontlp Intelligence• Mar 8' ' ° -- Rea onsilN for tnramadon flaw toil'om Dam threl l UNCLASSlflED FOR OFFICIAL USE ONLY 11 UNCLASSIFIED FOR OFFICIAL USE ONLY In the largest three to five field offices the structure includes a high level of specialization against highest-priority issues most relevant geographies and threats through both the Desk structure and specialized tactical components FIELD INTELLIGENCE MODEL - LARGE ILLUSTRATIVE CJ El SAC lntelllgenc• Field lntelligsnca Strategy components Program lnkages ASACStrategy IP Mans siA Collect Mgmt ' Incl Targtlllngr IP Coordinator SIA lnteUlgence Prod tllssem Chief RO HUMINT Domain coaector Mgmt Require Mgmt • • • • • • Cenlnll Slralegic Coonllnating Compcnent Develops FO eoo ctlon Requlramenll Strategy and Plan Develops CMllal Fl domain -- Performs sttateglc analysla R r t pl0duce11 and dlssemlnalas raw and finl had lnle Bgence PIOl lde crossprogrammatic focus on domain collection management and reporting through specific lens e g geography threat Embedded with squads In sach progt8l1I end RAs to • Interpret and use Collection Requirements • Collaborate on Colectlon ---• FIiter process and analyze infonnallon to - Drive domain awareness - Create Intelligence products - Facilitate collection to address priorities and gaps In FO Collectlon Strategy Responsible frx Information flow Mom IOCBI Desks CHS Co ' TIS HUMINTcollecllon Including Owrt and Llalson or Domain and Foreign lntel gence Msy embed on Des ca CronProgram Collection Capabllttles • Language analysts • Sur eilfance • Tech • May requite aepsrate SAC leadership depending on capacity ---------------------------------------------• SAC or Assodata SAC depending on lndMdual FO resourcing - In the Immediate 181m In order to resolve rasoun e c onstranlS this posilicn can be filed by anSSA Flexibility in I mplementatlon The field intelligence model has certain fixed requirements but also includes flexibility to allow field offices to respond to local needs and obtain unique local intelligence During the implementation the SET leadership will sit down with the SAC to discuss any particular resource challenges in the office and develop a short and long tenn s trategy for deveio ping the core intelligence functions through the field intelligence model UNCLASSIFIED JFOR OFFICIAL USE ONLY 12 --------------------------- UNCLASSIFIED FOR OFFICIAL USE ONLY The model is a build to design that requires that first field offices Invest in the central strategic coordinating component firsl This component must have a Funded Staffing Level FSL of at feast three but should be larger based on the size of the field office and the complexity of Its domain Members of the Directorate of Intelligence and SET will work with each field office In advance of implementation to help identify personnel to fl II key initial positions within the FIG as well as help the-office-map a-solution for full- model implementationJ ntoJhe future Other rules for implementation • All offices should have distinct intelligence I eadership role at the ASAC level or above In offices headed by as ADIC this position should be filled by an SAC-level executive • All field offices must have dedicated intell igence collection capabilities but the staffing level should be determined based on the size and complexity of the domain • All offices must have a C hlef Reports Officer regardless of the size of the office • All offices must have intelligence analysts embedded with investigative program and Resident Agency RA squads The responsibilities of these analysts must be consistent across all field offices However how many analysts are embedded and where they are assigned may vary based on specific field office needs • All field offices should consolidate cross-program collection capabilities e g surveillance language analysts under the ASAC or SAC for Intelligence Additional supervisory positions may be required to ensure reasonable spans of control particularly in offic es with a large numf er of language analysts - • • SET will work with each field office to determine the best way to apply the mode to the RAs depending on RA size and the overall level of decentralization Des Operations Team Field offices will have a Desk Operations Team only in instances where a Domain Assessment validated by FBIHQ indicates the unique presence of a particular threat and it Is determined to be a priority use of limited resources Desk Operations Teams report to the ASAC in large offices In rare instances where a Desk T earn is required in a medium or small office the team reports to the SIA for Collection Management Depending on its focus and size the Desk Operations T earn may be made up of • • • • • • Senior Intelligence Analyst Subject Matter Expert Reports Officer Embedded Analyst could be Operations S pecialist Language Analyst virtual as needed Collection Squad Special Agent may be virtual Investigative Squad Special Agents virtual and as needed consistent with threat set UNCLASSIFIED FOR OFFICIAL USE ONLY 13 UNCLASSIFIED FOR OFFICIAL USE ONLY The Desk Operations Team is effectively a task force that applies focused and unique subject matter expertise geography culture language political governance religion military economics etc on key or critical threats within a larger picture of threats and issues and provides a unified effort of intelligence and investigative activities This T earn goes deep on a specific set of threats or issues while the field offic·e•s Domaln-and·Collection·Management goes-wjde to capture the fullest picture of known and emerging threats indicators ·vulnerabilities and intelligence gaps Outputs of the Desk T earn may include • • • • • • Newly Identified indicators and intelligence requirements Completed and tasked Target Recommendations Collection Strategies and tasks Intelligence Information Reports IIRs and finished Intelligence reports Updated Common Operational Picture Threat mitigation strategies Desk analysts are vital hubs In an information network They work seamlessly with FIG collectors investigative squads Collection Management and Domain Management Coordinators and the Chief Reports Officer to contribute to an integrated national picture on the issue - one that can inform decision making at the highest levels of the Bureau and the feder al government Desk officers' performance will be measured by • • • • • • High-priority threats detected penetrated and dismantled Volume and quality of reporting from collection platfom s Quality and priority of Source Directed Requirements Intelligence Information N eed s Requests for Information RFls and or Notica s of Intelligence Potential met and generated by Desk High-priority quality and timely responses to customer requests for collection especially foreign intelligence Depth and breadth of intelligence pr eduction II Rs bulletins etc against priority needs Level of cross-program demand for participation in intelligence activities run by from Desk For more information see the Field Intelligence Model Haw-To Guide UNCLASSIFIED FOR OFFICIAL USE ONLY 14 UNCLASSIFIEO FOR OFFICIAL USE ONLY ROLES AND RESPONSIBILITIES This section provides an overview of the major field office work roles that wil I be created or slgnfflcanUy impacted-by the new field-intelligence model This list is-not-intendedJo be all Inclusive Positions and work roles that are not described here generally will continue to exercise their current responsibilities It is the responsibility of employees in all career paths and programs to work collaboratively as a team and to support the field intelligence mission All personnel should contribute to the FBl's efforts to stay ahead of threats by seeking out new knowledge working to achieve their full potential and helping others to do the same Leadership Special Agent in Charge or AD C It Is the SAC's responsibility to ensure that the field office is performing the basic intelligence functions effectively that good collaboration is occurring within the office and that all personnel In tne office understand their role and the roles of the people they need to work with The SAC ls responsible for ensuring that key positions and work ro las are filled by personnel with the capabilities to perform those roles as they are now defined successfully This will require strong leadership from the top and down to the sqt4ad supervisor level ' The SAC will' interact with the FIG frequently to maintain and continually improve on the FO's understanding of the field office's territory demographics vulnerabilities and primary threats He she must also be familiar with major intelligence requirements and the office's progress in satisfying those requirements Based on this knowledge the SAC will direct prioritization and resource allocation within the office The SAC will receive review and approve major products of the FIG including the Domain Assessment Common Operational Picture COP and FO annual collection strategy Through this regular interaction with the FIG the SAC will send a strong message to the rest of the field office that intelligence is central to what we do that the FIG Is important to the FBl's success in achieving our mission and that working on the FIG is career enhancing Through actions It Is important that the SAC clear1y convey this message The SAC has particular influence over the focus mood tone and level of engagement in the office The SAC will reinforce the necessary mindset by setting out clear expectations and w ill reinforce this new message with strong consistent communication to ensure that communication does not reinforce old ways of thinking The SAC will ensure that new personnel com Ing into the office receive an appropriate and timely orientation that reflects new roles and responsibilities External communication is impqrtant as well The SAC opens doors for the office through liaison with law enforcement and other federal partners and through involvement in a strong community UNCLASSIFIED FOR OFFICIAL USE ONLY 15 UNCLASSIFIED FOR OFFICIAL USE ONLY outreach program that builds trust and confide nee in the FBI The SAC must also support a proactive media relations program participate personally in these efforts and encourage personnel in the office to participate T his participation wil I inform the general public and key decision makers about the FBl's role in protecting Americans from threats to their way of life Efforts will be made to promote positive stories about the F Bi's intelligence efforts and national security focus The SAC will participate in bl-monthly review sessions with the Deputy Director and th en will cascade that process through the field office by holding quarterly progress reviews with supervisors Ultimately it is the SAC's responsibility to hold personnel in the officeiaccountable for their contributions as individuals and members of a team Seven Questions SACs Should Be Abfe to· Answer With Check 1st for'Flndlng the Answers What are my most important threats How to answer thls • • Compare national prioritized threats with what Is In my domaln e g what is Important to oc I partners • Assess important open cases • Assess Common Operational Picture of the domain· • Assess collection·direcllves •· Observations of riskj In AOR from· L aisons ' In order to answer this I ne'ed • Prioritized set of threats from FBIHQ that are not strictly bounded by investigative programs • C mprehensive case review How am I addressing these known threats VVhat I would do to answer this •• • Use a source survey to ensure- all confidential human sources' access and p acemet1t has been analyzed in relation to requirements examine utilization of sources • Catalog all technlcat cc ectors FISA Tll J • Catalog all other collectors and their capabilities SSG SOG Lookouts Language Analysts Undercover • Create a regularco lectl on plan aligning threats with collection and liaison capabilities In order to answer this I need • • Access to source fi es ELSUR fHes • Comprehensive· database with security controls UNCLASSIFIED FOR OFFICIAL USE ONLY UNCLASSIFIED JFOR OFFICIAL USE ONLY r-· i What are my emerging threats What I would do to answer this ••• • Look for patterns and trends Are there recurring events thatdo not quite reach the threshold for a case but raise the possibility of an emerging· threat Maintain know edgt 1 of current activities occurring nationwide and Internationally assassination coup mass protests etc • Determine whether natlonal lntematlona events ortrends affect my AOR i e Did the assassination of Benazir Bhutto in Pakistan have any impact on my domain • I In order to answerthis I need • Imagination and critl cal thinking • Relationships in community that wilUnform on thlt1 question • Baseline domain knowledge • Access to sophisticated data research capabilities to identify pattems e g Targeter • Analytic capabilities to make optimal use-of available data How am I addressing these emerging threats What I would do ta answer this••• • Extensive liaison with local state law enforcement • Extensive liaison with community businesses universities defense contractor$ agencies et ••including new targeted liaison not just existing relationships • Keep asking What else can I do • ' In order ta answer this I need • A broad network of contacts nosi tioned to penetrate the threat • Ability to recruit develop and retain sources for long periods despite their cun-eni' ack of reporting • An established centralized Liaison program and system to-support Inventorying partner capabilities and assets What are the highest priorities between my standing local and ad hoc requirements What I would do to answer this • AS$ess -Cases I - COP and Domain Assessment - JTTF and other task force issues local po Icy makers concerns Directors priorities - Standing requirements - Other Amber alerts' local events etc etermine whether local requirements rise to the level of a federal agencyresponse etermine if the standlng priorities existi n my territory - UNCLASSIFIED FOR OFFICIAL USE ONLY 17 UNCLASSIFIED FOR OFFICIAL USE ONLY I • Based an the strategy of under standln order to-dismantle assess what you know ofeach threatwith an eye toward prioritizing to address the most critical threats you know least about In order to answer this I need• • Meetings with JTTF partners and local policy makers • Tailored requirements What are my capabilities speed and confidence What I would do to answer this• • Leverage my co lect on-capabllity assessment- an inventory of the· source base and their access as well as HUM NT and other Intelligence capabilities • Build a Collection plan to align your collection capabilities with requirements • Assess the- degree of confidence In sources' access and the capabill ty of other intelligence platforms • Assess the relatlonship•devetoped by the-Ualson group relative to my priorities In order to answer this I need •• • More As dedicated to predictive and strategic analysis • To assure individuals that they wJ II not be punishe I if predictions tum out to be incorrect • A database that stores- existing capabilities of at collectors andpartners • A continuing know t dge of trends technology an d techniques What are my most crltical knowledge gaps and plan of attack ' What I would do to answer this • • • Targeting for the highest priority gaps ' •· Analyze existing and potentla capabilities to determine who can-most effectlve y co lect against these gaps • ldentffy other FieldOfflces' that may be capable of collecting in your dotnali1 • Leverage Lla sbn capabilities • Look at cross-program· National Intelligence Assessments to see how they compare to yqur domain I What I need to answer this•• • Targeting process conducted • Internal FBI requirements management system enterprise-wide UNCLASSIFIED FOR OFFICIAL USE ONLY 18 UNCLASSIFIED FOR OFFICIAL USE ONLY Intelligence Program Manager The IP Manager wil I lead the field office's intelligence program and be responsible for overseeing the functions of the FIG and ensuring that the fie Id office succeeds In its intelligence mission He she will accomplish this through four sets of Interactions • First the IP Manager must interact routinely with the field office's executive management The IP Manager will manage all SAC and ASAC briefings on intelligence matters and inform the SAC on the intelligence performance of the field office The IP Manager will lead efforts to use the domain management process to develop and maintain a COP and Domain Assessment He she will oversee annual delivery of the fl eld office's collection-strategy for consideration and implementation by executive management and will chair regularly scheduled executive intelligence review meetings regarding progress made agai nst collections strategies and plans • Second the IP Manager must interact with FIG personnel The IP Manager has responsibil ify for operational and administrative oversight and is required to provide FIG supervisors and personnel with guidance and direction on all aspects of the field office's intelligence activities The IP Manager will make personnel assignments for field intelligence functions and is also responsible for helping members of the Intelligence Career Service in the field office to reach their full career potential The IP Manager will arrange coordinate and deliver standardized intelligence training for all Intelligence Program personnel identifying both internal and external training opportunities The IP Manager must ensure that FIG personnel have the basic tools they need to get their jobs done • Third t le IP Manager must interact with field office personnel outside the FIG particularly managers and supervisors to integrate intelligence into the existing structure of the field office This will require daily interaction with the ASACs over the investigative programs to ensure that operational squads are fulfilling collection plan requirements The IP Manager will determine which intelligence functions require access to specifl c technology capabi Iities and other support services available within the field office • Fourth the IP Manager will interact routinely with FBIHQ to receive guidance and direction as required The IP Manager will then ensure that all appropriate members of the FO are knowledgeable of the intelligence policy guidance and other information produced by FBIHQ impacting the intelligence ·mission Qualifications Candidates for this position should have served in a FIG The candidate should have a degree or certificate from an ODNl-recognized intelligence training program or educational institution The candidate should be very familiar with the intelligence structure at FBIHQ process and protocol and ideally will have served in an intelligence program assignment at FBIHQ for at least one year Performance The IP Manager's performance will be measured by 1 quality of the field office's intelligence collection strategy and results 2 number and quality of executive briefings summaries concerning FO performance against collection plan 3 quality and effectiveness of annual Domain Assessments to enable effective FO executive management UNCLASSIFIEDI FOR OFFICIAL USE ONLY 19 UNCLASSIFIED FOR OFFICIAL USE ONLY decision-making 4 quality and results of Requests for Information RFl's sent to appropriate FBIHQ component or US IC or Law Enforcement partner The IP Manager wi II participate In monthly performance dialogues with th SAC Intelligence Program Coordinator The IP Coordinator will be a full-time work role In small offices the work role may be combined with the functions of the Collection Management Coordinator The IP Coordinator wi II be a deputy and principal advisor to the IP Manager on functions related to Collection Management Domain Management production and dissemination The IP Coordinator will be responsible for the effective coordination operation and measurement of field intelligence activities within the FO The IP Coordinatorwil I assist the IP Manager with some of the nuts-and-bolts management of the FIG The IP Coordinator wi II monitor progress on intelligence plans and ensure that the FIG is producing actionable int elllgence products The IP Coordinator wi II interpret and apply organizational intelligence policy directives and provide guidance to ensure effective field intelligence function The IP Coordinator has a num bar of responsibilities related to performance management The IP Coordinator will produce the Intelligence Semi-Annual Program Review SAPR monitor and interpret the field office's metrics and scorecards for executive management and provide quality assurance of data across programs reconciling data discrepancies where necessary The IP foordinator will prepare the SAC for Strategy Performance Session SPS discussions every 60 days and parti ipate in those discussions The IP Coordinator will organize monthly SAC SPS discussions with ASACs and Supervisory Intelligence Analysts SIAs and document and resolve issues actions for those discussions The IP Coordinator also wil I serve as a principal point of contact between the FIG and the Directorate of lntemgence FIG Oversight Unit on matters related to intelligence unit policy function coordination and metrics The IP Coordinator wil I chair the Field Office Program Coordination Group composed of program coordinators from each operational component Qualifications A successful candidate for this position must have demonstrated leadership skills and sound judgment The IP Coordinator must have expertise with FBI Intelligence functions excellent oral written communications and liaison skills strong teaming and organizational skills strong data analysis quantitative skills familiarity with the operations capabilities and activities of other USIC entities Performance Performance will be measured by 1 quality and velocity of response to RF Is from FBIHQ 2 documentation of intelligence management reviews including agendas participants and outcomes and 3 documentation of performance metrics and proof of use to enable inform d decision making UNCLASSIFIED FOR OFFICIAL USE ONLY 20 i JNCLASSIFIED FOR OFFICIAL USE ONLY FIG Centralized Strategic Coordinatin8 Component SIA - Centralized Strategic Coordinating Component Field offices-will have a-Supervisory lntelllgence Analy st over th CElnt lized Strategic Coordinating Component He she will report to the IP Manager and will be responsible for leading planning directing and reviewing the work of Intelligence Analysts engaged in Collection Management Domain analysis reporting and production He she wil I not supervise the analysts embedded in operational squads who report to the SIA for Embedded Intelligence In smaller offices this SIA's responsibilltles may be combined with the Coll action Management Coordinator The SIA will oversee the field office's strategic efforts to detect indicators trends patterns anomalies and gaps In knowledge of known and potential threat activity He shew Ill fac ilitate integration of domain awareness analysis activities between the field office and FB IHQ the USIC and will advise the CollMc field office executive management and FBIHQ on the strategic domain knowledge required for effective decision-making including the allocation of field office and other resources to collect further intelligence about priority issues topics and threats of the most concern in the field office's domain and to proactively identify and neutralize those threa ts • 4 Qualifications This position must be filled by an SIA It requires strong managerial capabilities exceptional interpersonal skills including the ability to coordinate with others to achieve work results and to coach IAs Candidates should have broad knowledge of intelllgence operations knowledge of Collection Management analytic techniques and standards and reports tradecraft familiarity with and the ability to facilitate the entire intelligence process famlllarity with USIC standard practices and resources and the ability to leverage external USIC partners finally project management skills including planning and evaluation Performance The SIA's performance will be measured by the qualify of products and briefings coming out of the Coll action Management and Domain Management processes as well as the overall quality timeliness and responsiveness to requirements of other intelligence products Collection Management Coordinator The CollMC will be dedicated to a full-time set of duties in all field offices The Coll MC will coordinate the collection management efforts of the field office through the developm ent and execution of the field office's Collection Strategy Collection Plans and Taskings Collection Capabilities Assessment Targeting efforts against collection gaps and Collection Posture The CollMC has overall responsibility for evaluating efforts to meet the Collection Plan and wil I coordinate the entire field office's intelligence collection efforts through the following process 1 Examine the field office's prioritized requirements 2 Examine the field office's collection capabilities to determine the office's ability to meet the prioritized requirements with existing sources 3 Identify gaps between our requirements and our current ability to collect information to satisfy those requirements UNCLASSIFIED FOR OFFICIAL USE ONLY 21 UNCLASSIFIED FOR OFFICIAL USE ONLY 4 Coordinate with Internal and external partners to see if there are additional capabi lilies that we can tap into to help us satisfy requirements 5 Coordinate development of field office Collection Strategy 6 Develop Collection Plans that Include leveraging existing sources and developing new sources 7 Ensure that intelligence that Is collected is funneled back to the F-IG·as well as the requestor of the information and track overall progress on Collection P lans The Collection Management process wit I require a great deal of coordination • The CollMC will work with the Domain Management Coordinator to prioritize requirements most important to the FBI fl eld office based on domain awareness • He she must interact with FBIHQ to constantly remain updated on the latest national level requirements and must also keep apprised of local requirements by collaborating with federal state local and tribal partners regional USIC partners field office executive management FIG personnel and investigative squad supervisors to identify local intelligence Information needs IINs Based on this input he she will consolidate deconfllct and prioritize intelligence requirements and provide a consol idated prioritized list to field office managers to assist them in prioritizing collection activities and resource allocations • The CollMC will work closely with the Confidential Human Source CHS Coordinator to assess human source capabilities and to val idate the collection capabilities assessment and prioritization of local requirements i e quality quantity and capability of human source technical and physical coverage against its criminal and national security threats • To inform the collection management process the CollMC will issue requests for information to appropriate FBI counterparts or USIC and law enforcement partners through FBIHQ when field office capabilities are inadequate to fill collection plan requirements • The CollMC will inform FBIHQ of the field office's collection capabilities and coordinate with FBIHQ on the implications of the overall national strategy for the local collection strategy • The CollMC will network with local regional and national counterparts to appreciate wider trends concerns tactics and resources The ColIMC will prepare a Collection Strategy and Collection Plans With approval from local executive management the CollMC will then tum those plans into action through specific taskings that cascade through the AS AC chain of command down to operational squads and ultimately to individual Special Agents The CollMC will manage targeting projects to develop new sources when existing sources cannot fill collection gaps The CollMC will deconflict targeting projects and other FIG collection efforts with operational squads' cases and source development The CollMC will also answer inquiries to provide c lariflcation for investigative squads' collection plans The CollMC will compare raw reporting against existing requirements to monitor progress in collection This will be coordinated through the CRO who will be the recipient of all raw UNCLASSIFIED FOR OFFICIAL USE ONLY 22 I i I UNCLASSIFIED FOR OFFICIAL USE ONLY intelligence to be disseminated from the FO The CRO will track the reporting for its velocity and throughput ratios while the CollMC tracks reporting in relation to requirements Finally the CollMC will maintain and provide local executive management with metrics showing the perfor rnance of all programs squads and individual personnel in the im plementatlon of the collection plans Qualifications The CollMC position may be filled by an SIA It requires a high-performing individual with strong knowledge of natl onal and FBI requirements and local collection capabilities It requires the ability to think strategically for the organization and support translation of strategy into action He she must have strong liaison and interpersonal skil Is in order to handle the extensive interaction with internal and extema I interests that the position entails and the ability to command broad respect throughout the field office in order to be effective Performance The CollMC's performance will be measured by 1 achievement of clearly articulated strategic goals 2 existence and qua lity of synthesized set of Intelligence requirements for th field office based on relevant dam ain knowledge and a docum anted methodology of prioritization 3 incorporation of national and I ocal requirements into field office collection plans 4 existence implementation of Field Office Collection Strategy and Collection Plans 5 Documentation of FIG personnel and investigative squads' collection against Plans 6 Quality and results of RFl's sent to FBIHQ or US IC or law enforcement partners 7 Number and quality of executive briefings summaries concerning field office performance against collection plans 8 Timeliness and quality of responses to FBIHQ inquiries concerning the field office's collection efforts 9 Quality of the office's targeting strategy and results Domain Management Coordinator The Domain Management process and its products provide the basis for investigative Intelligence and-management direction The DMC has a full-time set of duties in all field offices He she will be responsible for Implementing and operating a continuous systematic approach to maintain a strategic understanding of the field office area of responsibility AOR This includes production of the COP and an annual Dom aln Assessment for the field office including both regularly scheduled publications and continuous identification of issues that can be uniquely addressed by local capabilities The DMC may manage or work with a team of analysts depending on the size of the FIG and will ensure adherence to data and methodology standards To develop products the DMC must interact continually with FIG personnel and operational squads to seek receive consolidate assess vet and synthesize locally-provided data leveraging information that exists within the Bureau The DMC will identify intelligence gaps interacting with operational squads to solicit and receive input regarding relevant invest gatlons and manage strategic efforts to detect patterns and potential changes in patterns of threat activity With this information the DM C will advise the Collection Management Coordinator local Executive Management and FBIHQ on the strategic domain knowledge required for effective decision making including the allocation of field office and other resources to proactlvely identify and neutralize threats UNCLASSIFIED FOR OFFICIAL USE ONLY 23 UNCLASSIFIED FOR OFFICIAL USE ONLY The DMC will be responsible for facilitating the integra tlon of domain awareness analysis activities in the field office as well as across the region nation This will be the basis for finished intelligence products suitable for dissem inatlon to the US IC and federal state and local law enforcement partners The DMC will coordinate with regional and national counterparts submitting the local domain assessment to drive broader context and receiving processing information on the regional national domai n in-order- to-drive more effective I ocaLdomain awareness The DMC will interact with local law enforcement and USIC partners to exchange or coordinate the exchange by other field office personnel with partner's relevant intelligence and analysis on threats vulnerabilities intelligence gaps and capabilities in the domain The DMC also will coordinate with liaison programs such as lnfraGard Counterintelligence domain efforts and Community Outreach to deconfiict and leverage efforts and to facilitate the integration of domain awareness analysis activities in the field office as well as across the region nation Qualifications This position can be filled by an experienced Intelligence Analyst It requires strong quantitative and qualitative analytic al skills critical thinking skills as well as strong writing editing and oral communications skills Familiarity with USIC analytic standards and an aptitude for database management and use of FBI IT tools e g ArcGIS Is also required Performance Performance for this position wi II be measured by 1 existence and quality of a domain methodology and implementation as shown by documented use of domain data sets tools analysis 2 existence and quality of a common operational picture for the territory 3 number and quality of intelligence products 4 the number and quality of executive briefings 5 existence and quality of collection capabilities assessment 6 quality timeliness of responses to FBIHQ inquiries regarding domain knowledge 7 documentation of field office variables characteristics that influence FIG design and field office intelligence operations Chief Reports Officer Every field office must have a full time certified CRO The CRO will be accountable for field office production of accurate timely and professional raw intelligence products The CRO has several related areas of responsibility related to the quality prioritization and analysis of raw Intelligence in the field office Upon completion of the CRO course the CRO will be designated a Certified Release Authority CRA First the CRO should review raw intelligence products IIRs prepared in the field office t9 ensure that sources and methods are protected and USIC quality standards are met The CRO is much more than an editor He she should add substantive value to IIRs to enhance their utility to the reader The CRO will receive evaluation and R Fis from customers and produce foll ow-on source directed requirements and feedback for IIR drafter reviewers The CRO will ensure that sources relied upon in IIRs have been properly characterized requires access to appropriate source files The CRO will also contribute to source validation efforts through Production Review To ensure ongoing quality the CRO will mentor field office personnel on II R development and writing This Includes working directly with investigative squads on all submitted raw intelligence to ensure accuracy relevance and quality and to help manage possible effects on case operations UNCLASSIFIED FOR OFFICIAL USE ONLY 24 UNCLASSIFIED FOR OFFICIAL USE ONLY Second the CRO should priorltlze information dissemination based on knowledge of national and local collection requirements Third the CRO contributes to the fl eld office's Common Operational Picture by providing input to the DMC regarding trends identified based on review of multiple IIRs including potential threats and vulnerabil itles- 'Fhe·0RO·also ·contributes-t 0-the-field-offlce' 5-collection strategy and plans by providing input to the Coll MC regarding incoming intelligence against the Collection Plan and potential source-directed requirements Fourth the CRO receives coordinates and reports on raw intelligence from collectors embedded intelligence analysts and others coordinating information flow in conjunction with the Coll MC The CRO also coordinates with FBIHQ on regional and national production and Dissem ination for IIR approvals Qualifications This position can be filled by a Reports Officer or Supervisory Intelligence Analyst The CRO must have exceptional written communications skills with specific expertise on the policy and format requirements for II Rs This position requires knowledge of the USIC FBI and locally generated requirements strong knowledge of source lifecycle management knowledge of source targeting Excellent coaching bargaining and negotiating skills and the ability to meet deadlines are necessary as well Performance Performance will be measured by • All IIR metrics including the number of II Rs that address priority requirements in the field office collection strategy velocity rate throughput rate and any actionable results • Documentation of training and feedback for FIG personnel on IIR production • Quality of source-directed requirements directed to field office Who performs strategic analysis in the field Strategic analysis may be performed from anywhere within the FIG structure-and by analysts assigned to any ofthe core intelligence functions Analysts assigned to· Domain and Collection Management functions perfQrm strategic analysis as they work to assess the division's domain and collection capabilit las Reports Officers assigned as the Chief Reports Offlc er or assistant CROs also may perform strategic-level analysis as they work to understand and articulate reporting trends within the division and what those trends may mean Analysts assigned to issueoriented Desks would have strategic-responsi-bilities associated with their assigned issues Finally analysts embedded with operational squads and Resi dentAgencies would have the opportunity to· develop subject matter expertise in issues alignEKf with their squads' areas of focus UNCLASSIFIED FOR OFFICIAL USE ONLY 25 UNCLASSIFIED FOR OFFICIAL USE ONLY Other FIG Positions SSA - HUM NT Collection The SSAJorHUMINT Collection is a full time POl ition In all field offices reporting to the ASAC over intelligence collection The SSA for HUMINT Collection manages and directs HUM INT collection activities for the FIG The SSA gets Information from the CollMC on intelligence gaps which require non-case based collection and feeds information from interviews and sources to the DM C to help inform the common operational picture This involves enormous coordination with investigative squads to coordinate efforts to ensure deconfliction between investigative squad activities and FIG collection efforts Qualifications This position must be filled by an SSA It requires expertise in HUM INT tradecraft and policies and proven proficiency in source recruitment debriefing and handling USIC certification is preferred The position requires a strong foundation in the Intelligence cycl e as well as core agent Investigative ski lls This position requires an u nderstandlng of how to leverage all types of collection and be able to distinguish between the need for liaison and CHS operations The position also requires appropriate subject-matter expertise and domain knowledge The position will require Interpersonal skills including liaison skills to work with external partners and the ability to effectively mentor and coach subordinates Performance The SSA for HUM INT Collection's performance will be measured by • Percent of the squad's source reporting directly related to the field offlc e's collec tion strategy and plan • Tripwire coverage directly related to the field office's priority threats • Number of jointly operated sources handied on the squad • Satisfaction level of subordinates and fell ow SSAs on substantive squads • Percent of completed leads from Domain Management and Collection Management Team • Recent and relevant training received Special Agent HUM NT Collectors on the FIG Each field office should have a minimum of three Special Agents who report to the SSA for HUM INT Collection These Special Agents will use the full range of appropriate HUM INT tradecraft and operational skil Is to develop recruit and ex plait sources and to leverage relationships with external partners in order to collect lntelllgence in the most critical field office collection gaps The HUM INT collectors' role Is the exploitation of all HUMINT sources who provide intelligence which fills Identified gaps as outlined in the fl eld office's collection plan They will work across all investigative programs in response to the FBl's priorities and collection requirements They will identify potential Confidential Human Sources assess their suitability and access establish a relationship and recruit them task them to collect against intelligence gaps and requirements vet validate pay as appropriate and end the relationship when appropriate They may conduct UNCLASSIFIED FOR OFFICIAL USE ONLY 26 '• UNCLASSIFIED FOR OFFICIAL USE ONLY sensitive joint source operations with domestic and foreign partners Along the way they will generate IIRs based on CHS reporting to meet the needs of other squads and div sions local partners or the USIC HUMINT c ollectors on the Fl G will coordinate the use of established and newly created liaison contacts as a HUM INT collection platform There are severartypes offfalson-relatlonshlps-that-will be leveraged Some FIG Agents will serve in an official liaison role and coordinate with and in some cases embed themselves within federal state and local agencies to better un derstand their intelligence needs and to leverage non-F Bl sources capable of collecting Intelligence on our requirements i e - local law enforcement partners Other liaison relationships will be created one-on-one with private sector entities non-governmental organizations NGOs academic institutions and other similar entitles All Special Agents assigned to the flG will work closely with analysts on the FIG to report observations indicating new trends in the local environment and to spot areas and targets for source recruitment FIG Agents will serve to facilitate the handling of cross-programmatic intelligence information obtained from CHS debriefings To do this effectively HUM INT collectors on the FIG must have strong relationships with other collectors and embedded IAs on investigative squads in order to augment their collection abilities beyond reporting on the squads' investigations Qualifications HU MINT collectors must have proven proficiency in source recruitment debriefing and handling They also should have a strong foundation in core agent investigati ve skills including an understanding of how to leverage a II types of collection They should be self motivated independent thinkers with the ability to recognize the demarcation betw een the need • for liaison and CHS operations They must have strong interpersonal skills including liaison skills for working with outs de partners An enhanced understanding of the inte lllgence cycle and the FBl's integral role within the USIC is also required Performance The FIG Special Agent's performance will be measured by • Volume and quality of internal and external disseminations • Amount of source reporting directly related to priority requirements In the F O collection plan • Significant contributions to domain awareness • Effective operational testing of sources • Effective establishment of tripwires • Identification of additional Intelligence gaps • Recent and relevant training received SIA - Embedded Intelligence Every field office will have an SIA for Embedded Intelligence and all but the smallest offices will have more The SIA for Embedded Intelligence reports to the IP Manager and serves as manager and rating official for ana lysts embedded with operational squads This position is a key bridge between strategic and tactical intelligence efforts in the field office UNCLASSIFIED FOR OFFICIAL USE ONLY 27 UNCLASSIFIED FOR OFFICIAL USE ONLY i I· The SIA for Embedded Intelligence should keep updated on collection plan requirements and investigative squad capabilities The SIA collaborates with the operational squad supervisors and program managers to ensure that the capabilities of embedded IAs and squad SAs are leveraged to fulfill intelligence requirements The SIA for Embedded·Jntelligence reviews intelligence-products created by embedded anal 'sts for analytic value quality and source validation purposes and then delivers them to Reports Officers for dissemination and to the central strategic coordinating component for strategic analysis The SIA evaluates the appropriateness of analyst participation in source and detainee arrestee debriefings and Interviews balancing value-add and safety In addition to these management responsibi litles the SIA pulls information together from across squads and programs to identify new issues trends patterns intelligence gaps and anomalies in FBI programs and cases The SIA Identifies the connections between subjects and persons of interest and where appropriate new targets subjects and sour _ces Qualifications This position must be filled by an SIA It requires strong managerial capabilities including the ability to supervise employees in another location mentoring junior analysts It requires exceptional interpersonal skills including the ability to coordinate with others to achieve work results and to coach S As and SSAs to effectively employ intelligence resources Candidates should have broad knowledge of investigative operations and intelligence operations e g knowledge of methods for collecting intelligence data knowledge of collection reporting and Domain Management familiarity with and the ability to facilitate the entire intelligence process familiarity with USIC operations and resources and the ability to leverage external US IC partners finally project management skills including planning and evaluatl on ' Performance The SIA's performance will be measured by the contributions of supervised embedded analysts to the field office's Collection Plan and Common Operational Picture as well as analysts' intelligence production Embedded Intelligence Analyst Embedded Intelligence Analysts report to the SIA for Embedded Intelligence but physically sit with an investigative squad From this vantage they act as a link to FBI operations for intelllgenc e and investigative priorities They coordinate and provide foe used intelligence requirements to investigators for use In all investigative activities as appropriate They work directly with investigative personnel on the squad to ensure FBI operations fulfil I intelligence requirements They participate in and or provide interview guides for source and detainee arrestee debriefings interviews and ass et validations balancing value-add and safety Embedded Analysts have multiple responsibilities First they aid the field office with close-to-real time reporting Because they are present on the investigative squads and at the resident agencies they are familiar with their squads' cases and sources and are aware of the inform ation those squads and cases are g eneratlng This aids efforts to identify reportable information as early as possible and compress the amount of time it takes to move information from point of collection to dissemination UNCLASSIFIED FOR OFFICIAL USE ONLY 28 UNCLASSIFIEO FOR OFFICIAL USE ONLY The second critical activity of embedded analysts involves assisting the squad or resident agency in partnership with the SSA or SSRA achieve its intelligence collection responsibilities as detailed in the squad's portion of the dlvisi on's Collection Plan and to report the outcome of those efforts to the central strategic coordinating component within the FIG on a day-to-day basis Individual squads and resident agencies based on their existing sources and case work wil I have specified tasks assigned to them through the division's Collection Plan The embedded·analystwill·help the SSA or SSRA ensure that the squad's results against those assigned tasks are assessed and reported when appropriate The third responsibility of embedded analysts is to identify and help the squad or resident agency capitalize on Intelligence collection opportunities that have not previously been specified within the Collection Plan but that present themselves during the course of day-to-day investigative efforts For example an agent investigating a drug matter plans on interviewing a cooperating subject located at a country jail and the divisi on has a concern about the po tentlal for terrorist organizations or affiliates to radicalize and recruit inmates at that facility The embedded analyst would be the person to alert the Interviewing agent of the potential for the collection of informatl on associated with prison radicalization and recruitment Additionally the analyst would provide the agent with only those additional questions that should be asked and advise the central strategic coordinating component within the FIG of the results of the interview In summary embedded analysts assist squads with the interpretation and use of intelligence requirements to maximize intelligence collection opportunities across programs Finally embedded analysts analyze information developed during the course of investigations to help develop the F O's view of its domain further ensure that reportable information is identified as quickly as possible and add value to investigations by assessing how the squad's threat Issues are evolving Cases needing action having gaps in knowledge and potentiab fpr impact from other cases or sources will be highlighted Qualifications These positions can be filled by an OS AS or RO Embedded IAs must be skilled in hypothesis-driven analysis and problem-solving Candidates should have familiarity with US IC operations and resources ability to leverage USI C partners subject-matter expertise in the field of intelligence operations knowledge of methods for collecting intelligence data deep target knowledge as well as knowledge of a professional dlsci pline such as international relations or military science To succeed in a fast-paced operational environment the embedded analyst must be able to work under pressure and meet tight deadlines To function as a member of the team they need excellent people skills and the ability to persuade and inform verbally and in writing · Performance Performance will be measured by the number of IIRs against priority intelligence requirements internal feedback in IIR quality and relevance and new sources recruited and PIRs satisfied via targeting · Staff Operations Specialist The Staff Operations Specialist SOS will provide operational support to Intelligence Analysts and Special Agents who are involved in analyzing intelligence data The SOS will be assigned to the FIG in support of the intelligence mission and will report to the SIA or SSA of the FIG UNCLASSIFIED FOR OFFICIAL USE ONLY 29 J I UNCLASSIFIED FOR OFFICIAL USE ONLY The SOS Is an entry level professional position beginning at the GS-7 level with promotion potential to the GS-12 level It Is intended to provide the employee with the necessary knowledge skills and abilities to become either a Special Agent or Intelligence Analyst Qualifications r he SOS positlon should be filLed by l l reqent college graduate past two years who received a GP A of 3 0 or better and must be fam illar with key FBI systems ACS Guardian IDW Telephone Applications and commercial systems such as Microsoft Office applications Lexis Nexis and Choicepoint Performance fBDJ Outside the FIG SSA - Operational Squad In addition to their existing responslbill ties squad supervisors will work with the FIG particularly the SIA for Embedded Intelligence to ensure that their squads' activities support the field office's collection plans to fully leverage the squad's source base to address the most critical requirements In instances where a source m ay have the ability to provide intelligence that is responsive to an intelligence requirement it is up to the SSA to ensure that the source's handler is fam illarwith the relevant requirements asks the source appropriate questions and reports any responses that may have intelligence value The SSA working with the SIA for Embedded Intelligence will identify situations where it is appropriate for analysts to participate in interviews and debriefings Where an SA must question or task a source on an unfamiliar issue then 'tl'le SSA should get assistance from Agents on the FIG or locate an appropriate subject matter expert to provide guidance or participate Finally the SSA should conduct file reviews every 90 days that cover both case work and contributions to meeting intelligence requirements Case Agent The case agent continues to conduct investigat ions to support prosecutions but is better integrated into the field office's intelligence functions Case agents will work more closely than in the past with the FIG and will benefit from the assistance provided by the FIG's development of a COP and Domain Assessment which will be accessible to agents to help them better assess their operating environment SAs will perform source handling and docum entatfon which is an integral part of the Collection Management process If the agent has a source then the source should be questioned to gain information for both the case and any intelligence requirements that the source may be able to address UNCLASSIFIED FOR OFFICIAL USE ONLY 30 UNCLASSIFIED FOR OFFICIAL USE ONLY Community Outreact Specialist The Community Outreach Specialist COS should be a full time position in most offices reporting to the SAC In New York and Los Angeles the COS may report to the supervisor over public affairs In the smallest offices the position may be combined with the functions of the EEO coordinator or media coordinator Under the new fief d intelligence model the COS will continue to coordinate the-Citizens Academy and Community Relations Executive Seminar Training CREST and serve as a liaison to the Citizens Academy Alumni Foundation The COS will oversee Community Engagement Councils and Regional Advisory Councils communicate with various ethnic and minority communities and coordinate donations of abando ned property to organizations where entree has been lacking The COS may also coordinate programs in local schools when such outreach is determined to open a needed dialogue wl th a particular community While the COS Is not and should not be under the umbrella of the FIG the COS should coordinate with Special Agent Liaison Specialists on the FIG to open doors for the FIG and other field office components in the local community The COS can leverage the Office of Public Affairs Community Relations Unit's national level outreach to ethnic religious and other communitybased groups and organizations The COS can also leverage relationships built through the Citizens Academy CREST and other outreach programs The COS who optimally has roots in the community can also serve as additional boots on ground for the field office particularly to establish a positive dialogue in insulated or isolated communities that may be distrustful of law enforcement The COS will also work closely with the field office's m Gliii coordinator to ma et and generate positive press coverage of the office's community outreach activities The COS can serve as the · public face of the office's community outreach program in instances where the FIG Liaison Officer wishes to keep a lower profile The COS's focus will be governed by national and local intelligence priorities For instance if MS13 gang activity jumps in a particular area the COS should expand outreach to Latino communities where MS-13 might be present Qualificatjons The COS must have effective interpersonal skills and superior organizational skills An ability to relate to people from varied ethnic and minority backgrounds is essential The COS must possess self-control and maintain composure so that criticisms and disparaging remarks aimed at the FBI by groups frustrated by FBI action or inaction do not em broil the COS in public controversy Proficiency in a foreign language would be a plus but would not be required Performance The performance of the COS will continue to be measured by the criteria outlined in the semi-annual report mandated by the Community Relations Unit Those criteria include the number of Citizens Academies he Id the numqer of CRESTs held the amount of outreach conducted in ethnic and minority communities youth initiatives federal state and I ocal partnerships participation in the Aban oned Property Initiatives and the ability of the COS to achieve management support for the outreach program UNCLASSIFIED FOR OFFICIAL USE ONLY 31 UNCLASSIFIEO FOR OFFICIAL USE ONLY DOMAIN MANAGEMENT P9m in is the territory and issues for which a field office exercises responsibility Domain is also known as Area of Responsibility AOR Domain Awareness is the strategic understanding of natlona I security and criminal threats and vulnerabilities the FBl's positioning to collect against these and knowledge gaps related to a specific Domain An FO always has a level of Domain Awareness but in the past this Awareness was not regularly centralized m anaged and analyzed Domain Management is a systematic process by which we develop cross-programmatic Domain Awareness in the FO improve that Domain Awareness and then leverage It to enhance our abilities to anticipate and neutralize threats With Domain Management in place at any given moment a DMC and the Domain Team of analysts can capture a snapshot of the FO's current level of Domain Awareness and provide it to customers either within the FO or at FBIHQ The Domain Management process is based on four fundamental questions • • • • What do we already know about our domain What don't we know about our domain What do we need to know about our domain What are we going to do about it The purpose of these questions is to contlnUaVY drive the DMC and the Domain Team's efforts to improve Domain Awareness These questions are not meant to be answered once and forgotten They must be constant analytical and collection drivers Domain awareness creates the capability for • • • • Proactive identlficatien of threats helping us stay ahead of those threats Strategic management of current investigative activities putting resources where they can do the most good New opportunities for collection and prosecution furthering the efforts of every squad and program Setting tripwires in the community using targeted liaison to give us advance wamin · Domain Management will allow field office management to • • • • identify and prioritize threats and vulnerabilities of the field office dom ain conduct analysis research on affiliated entities engage entities through direct personal contact with interagency local cooperation know timely and relevant threat information that could be provided to vulnerable domain entities if appropriate UNCLASSIFIED FOR OFFICIAL USE ONLY 32 UNCLASSIFIED FOR OFFICIAL USE ONLY • • leverage domain entitles for CT Cl Cyber or Criminal Information and foreign intelligence and conduct operational actiVltles for filling FBI and USIC requirements leads case openings etc DQml lin Management at the FO level will also enable Domain Awareness at FBIHQ enabling the Bureau to develop a national awareness oftlireats and·vulnerabilities 'fhis national awareness will ultimately guide our national program management and inform decision makers at the highest levels of the federal government Domain Management must be cross-programmatic to be successful Counterintelligence or criminal matters cannot be neglected to the benefit of counterterrorism or vice versa Only if our Domain Management gives equal attention to all programs are we positioned to see liaison and outreach efforts uncovering criminal cases and possible links to other programs Without equal attention such opportunities may be missed and every priority wil I suffer DOMAIN AWARENESS SUPPORTS THE FBl's MISSION I Key questions 11re asked •• Core questions across programs • What are my vulnerabllitles - Infrastructure - Economic • What are my threats • Who ll1111$ In my domain • What are my national priorities • What are my local priorities Adgltlonal questions • What are unique local Issues - Ports ram air - Flnanclal center - Research unlvenlltles - Local PD Fusion center Issues • that guide domaln awarenesa 11 - -Outputs • Maps • Spreadsheets • Data • I • Analysis • Answers • Etc j Tools processes ARC GIS ' ot domain Google for u arlety of Intel purposee Drive collection management • Use to determine priority ISSUllS requiring focus Domain • VlsuaDzatlon of data to akl In Identifying relationships and emerging trends • Tool to evaluate threats gaps and analysis • SPSS • ACS • Access maps • Excel • IDW targeting opportunities Database • Open source data • Economic data • Businesses Liaison Ca sea • lnmistructure • Post analysis Tactical Intel • Etc•• Programs Open source • Pull detaled data to meet speciffc needs e g au sources near a specific address Baseline Domain Awareness in the field office For years the field offices have had a·variety of sources that have been collecting intelll genes on the domain In order for the Domain T earn to determine what the F O already knows in terms of its Domain the Domain Team will conduct reviews with all of these sources collecting both casederived and non-case intelli gence The team will conduct a program by program squad by squad review of current case work and liaison In the division and analyze how these match FBI priorities The baseline of domain awareness will begin with existing contacts in the domain Questions include How are you UNCLASSIFIED FOR OFFICIAL USE ONLY 33 UNCLASSIFIEO FOR OFFICIAL USE ONLY currently interacting with the threats and vulnerabilities in your domain and what domain entities are of interest to your field office All programs in the field office must be reviewed including Counterterrorism CT Criminal Investigative Division CID Counterintelligence CD and Cyber Each program should be reviewed to determ ine the priority threats and vulnerabilities along with how tbe ca es match JP to the FBI priorities in those programs Developing a full picture of our threats and vulnerabilities also will require review and assessment ofinformation outside of our investigative programs During this analysis the following factors must be considered • Physical factors What priority targets must be protected in the field offlc e domain pursuant to FBI priorities identification of vulnerabilities for critical infrastructure • Social factors What is known about the demographics and sociology of a domain through existing investigative work social organizational and communication networks · • Threat factors People or organizations that wish to do harm especially to priority vulnerabilities knowledge of presence capabilities activities intentions motivations and opportunity • Capabilities factors Investigative or intelligence resources that can be applied to improve domain knowledge and defeat or neutralize threats SSG logs confidential human sources other collection platforms local police department mappings etc and • Current affairs factors Investigative or intelligence resources that already exist llai son JTTF Community Outreach task forces etc and must be used cross-programmatically This analysis will provide the following • • • • • • • Improved knowledge of division territories The identification and I ocation of intelligence capabilities against known or suspected threats Priority locations in the field office that are vulnerable to threats and need attention · The allocation of requirements to appropriate sources The identification of intelligence collection gaps and The application of targeting analysis to improve collection against threats vulnerabilities and gaps Identification of emerging trends The baseline assessment should make a field office ready to answer the question What do we already know about our dom ain This question seeks to identify what is already known about a domain through pending and closed investigations source and liaison coverage and known threat activity as described above UNCLASSIFIED FOR OFFICIAL USE ONLY 34 UNCLASSIFIED FOR OFFICIAL USE ONLY What is a threat A threat Is a foreign or domestic entity possessing both the capability to exploit a critical infrastructure's vulnerabilities and m aliclous intent of debilitating the defense or economic security of the U S A threat may be an individual an organization or nation A threat can also be the capabilities intentions and attack methods of adversaries to exploit- or any circumstance or event with the potential to cause harm to - information or an Information system Threats Include gangs foreign intelligence services etc What is a vulnerability A vulnerability is the susceptibility of facilities operations activities infrastructure or programs to exploitation by a threat Vulnerabilities include infrastructure such as dams and bridges locations that house dangerous materials such as chemical plants research facilities and the technologies developed on-site and locations that facilitate criminal activity Application of new tools personnel and processes The field office must reallocate and secure resources to use new tools to establish comprehensive domain knowledge and capabilities In addition to identifying a DMC dedicated liaison officers CollMCs and personnel with expertise in geospatlal mapping the field office should establish regularly scheduled cross-program threat based working groups of agents analysts and CollMCs to share knowledge on topics trend and patterns for that threat while establishing necessary cross-programmatic working relationships and social networks in a field office The field office should also establish and or continue regularly scheduled external working groups with police and US IC partners to share knowledge on topics trends and patterns for threats and vulnerabilities while establishing necessary working relationships and social networks outside a field office As new tools personnel and processes arise i n a field office Domain assessments by program issue or the like an be drafted to capture information at any given time Moreover this information will provide executive management at a field office ready answers for FBIHQ and others seeking status about investigations new trends or filling requirements This process will be repeated continuously as a Domain is continuously evolving and changing Analyzing FO Information using the Domain methodology The next step is to answer two additional questions What do we need -to know about our domain and What don't we know about our domai n Answering the first requires an understanding of vulnerabilities and intelligence requirements within or related to a domain Vulnerabilities Include critical infrastructure and technology that if dam aged destroyed or stolen would adversely impact the U S and its entities and may vary depending on the threat Examples of vulnerabilities include but are not limited to dams bridges chemical plants nuclear plants research facilities and air and seaport facilities Answering the second question entails carefully analyzing what the FBI already knows and comparing it to what the F Bl needs to know Responses to this question should lead to the emergence of information or intelligence gaps about the threat and domain that need to be addressed UNCLASSIFIED FOR OFFICIAL USE ONLY 35 UNCLASSIFIED FOR OFFICIAL USE ONLY Completion of a Domain Assessment The Domain Team will pull together information from inside and outside the FO and produce the Domain Assessment a product that takes this synthesized data adds perspective and context and recommends specific courses of action It answers the fundamental question What can we do about it Domain Assessments are anfn ial products that'ldentify·and-rank the-priority ·threats in the Domain identify key vulnerabilities in the Domain and identify intelligence gaps from a Domain perspective The purposes of a Domain Assessment are 1 To provide a comprehensive analysis of the Field Office's area ofoperations specifically its threats and vulnerabilities 2 To describe the Field Office's key concerns and identify gaps inc ollection and 3 To assist in the prioritization of collections operations and sources The Domain Assessment will include several Key Findings based on analysis of the FO Domain These may Include identifying new threats and vulnerabilities new targets and new cross programmatic trends The Domain Assessment will also offer additional insight into current investigations and Domain intelligence gaps As the Domain Assessment is being produced the Domain Team will compare its findings to current FBI and FO priorities and provide this comparison to FO management in the event that FO priorities and resources need to be adjusted to meet the primary concerns In the Domain As part of this process the · team will produce Common Operational Pictures COPs which are maps that depict various layers of Domain intelligence on top of each other as it pertains to a given threat For example a COP may be created that displays known gang territories in a Domain and then known drug activity may be overlaid on top of the gang territories to determine which gangs are dealing in which types of drugs • a •a aa •a Improving and Applying Domain Awareness Once the new tools and processes are learned and become part of a field office's basic functions Domain Awareness will develop in the field office Part of increased Domain Awareness is a better UNCLASSIFIED FOR OFFICIAL USE ONLY 36 UNCLASSIFIED FOR OFFICIAL USE ONLY understanding of Intelligence gaps a process that naturally occurs following the production of a Domain Assessment A field office must begin to fill the knowledge gaps about its domain Identification of these information gaps will require decision makers to address the last question What are we going to do about it Decisi on makers should reevaluate how their resources are 911ocatQd and deployed against the threats vulnerabili ties and knowledge gaps related to their domain Once the baseline Domain Assessment Is completed and new tools and processes are applied a field office may now look across all programs in its domain and Collection Management can begin to Initiate comprehensive collection plans for each These plans will outline strategic and tactical outreach in the domain along with keeping a finger on the pulse of a domain Overlap between the programs should be welcomed and addressed by the Domain Management at a field office b2 b7E Domain Entity Defined The phrase domain entity does not refer to a subject but rather to something or someone that subjects are interested in This can include targets people or places that are threatened tools explosive materials or weapons and people who could be tools possible recruits Jor a gang or terrorist organization The fully mature Domain Management process will permit a continuous flow of 1 receiving needs from operations leads FBIHQ national requirements internal requirements local partners field office management etc 2 identifying pertinent factors within those requirements 3 leveraging their domain for GIS mapping information etc 4 filling knowledge gaps 5 collecting information imported into a domain database 6 generating new requirements and cases operations and 7 continuing the process over again In short knowing and acting on the domain For more information on Domain Management see the Domain Management How-To Guide and Handbook UNCLASSIFIEDI FOR OFFICIAL USE ONLY 37 UNCLASSIFIED FOR OFFICIAL USE ONLY COLLECTI ON MANAGEMENT Collection Management is the process of receiving and then converting Intelligence needs and gaps into questions intelligence collection requirements prioritizing how those questions will be answered assigning the questions to collectors for resolution and tracking our progress in answering the questions Through Collection Management the FIG helps the FO manage competing demands for intelligence collection including the need to collect information to further case investigations to follow threat leads to conduct liaison and build partnerships to help meet intelligence requirements from the Law Enforcement and Intelligence Com munitles to complete our Common Operational Picture to improve our understanding of a particular issue and to support regional and national efforts These requirements are consolidated and prioritized through a careful balancing of factors including an analysis of each case to determine the level of threat represented national and regional prlo rltles vulnerabilities and knowledge gaps In the territory and prioritized local requirements and specific concerns such as requests from local law enforcement or the high-profile of a particular case CM occurs In t i e - step through the approval and - o f l Rs ctequiw entlntellgence producia Dissemination Planning and Direction Analysis and Production CM ocan In Iha panning and dlteclfan CM occurs In the analysfs and prnducllon step ttuough Ille drafting nlWIWlng and approw g of IIRa step thnluQhldentdk alfcnof collectlon Aeld Offlcacapablillles assessedandaColledlon Plan Is I hJ Processing and Exploltatlon Collectlon CM occurs In the proc esslng and e plollal on sfl I through 1ha pmduc tion of colledloll - Elements of Collection Management • Collection Requirements Management- The CollMC receives analyzes validates and consolidates requirements received from the operational squad s FB IHQ external agencies and the FIG's DMC Collection requirements will be prioritized with FBI requirements as the primary focus and then USIC or partner requirements such as National HUM INT Collection Directives NHCDs Once completed the prioritized set of collection requirements must be UNCLASSIFIED FOR OFFICIAL USE ONLY 38 UNCLASSIFIED FOR OFFICIAL USE ONLY validated by Executive Management This set must be re-evaluated as local and national requirements change • Collection Planning and Direction -The FIG identifies and directs collection sources human sources surveillance components technical sources language analysts etc to satisfy specific intelligence collection requirements • The·individual·perfonning-thls-functlon-ln-the-F O analyzes the access placement and capabilities of all FO collection sources to determine which is the most effective and efficient resource to collect against a requirement This assessment will be done using a methodology which tracks the full breadth and depth of actual available and or potential collection resources capabilities by type human sources technical SSG SOG local law enforcement etc their access and placement against targets and intelligence requirements availability veracity and dependability The end products of the collection planning and direction process will be A Collection Strategy is a periodic annual document articulating the field office's Intelligence collection priorities and providing high-level guidance on the approach to achieve goals objectives against these priorities It provides the foundation for ongoing Collection Planning throughout the year The Collection Plan assists the CollMC in allocating the field office's collection sources to address specific collection priorities It considers the tasked collection requirements their priority and the collection capability and availability of sources • Targeting -When there are no existing or insufficl ent collection capa ilities identified that can respond to a requirement the FIG may produce a Target Recom mend ition providing the results of the analysis perfonned to find a new potential source or contact with the appropriate placement and access to possibly respond to a requirement • Collection - This element involves the acqui sitlon of information from source handling liaison surveillances technical sources and language components The end product of the collection process will be collectio 1 documentation • Reporting and Evaluation - The final step is to communicate the results of our collection efforts This element involves the drafting reviewing approving and disseminating of an II R or equivalent i ntelligence product and then evaluation of reporting through the CRO Another end product of this process will be a Collection Posture report by the CollMC to document and account for requirements which have been addressed in a FO and thos e requirements which are still considered gaps UNCLASSIFIED FOR OFFICIAL USE ONLY Cu lec ti on Plan ning Direciion Targeting 39 UNCLASSIFIEO FOR OFFICIAL USE ONLY A standardized and centralized ColJection Management function will give the field office the ability to leverage program sources and knowledge and expose gaps in coverage for future targeting efforts It will provide Executive Management with a planning document for deciding allocation of local resources against priontize fth-reats Ital so will facilitate FBI-wide-strategic-coordination by providing a nationw Ide understanding of the threats current and potential future that are posed to the US and its interests collecting intelligence to address those threats and reporting relevant information to facilitate any warranted action For more Information on Collection Management see the Collection Management How-To Guide • 4 UNCLASSIFIEOI FOR OFFICIAL USE ONLY 40 UNCLASSIFHiD FOR OFFICIAL USE ONLY HUMINT COLLECTION As outlined above the Domain Management process will help the FO identify national security and crimlnal'threatsto its AOR The Collection-Management process will produce a plan for responding to intelligence gaps • This section is about how we fill those identified gaps by developing and fully exploiting HUM INT sources Our strategy has several parts leveraging casebased HU MINT collection collecting HUM INT specifically to address requirements liaison and vetting and validation of sources Leveraging Case-Based HUM NT Collection The vast majority of the FO's intelligence collection occurs outside of the FIG If we are to fully leverage our existing source base it is essential that all SAs and their supervisors develop a working knowledge of the FO's collection plan and related requirements and must know how it relates to the squad's investigations and source capabilities SAs on operational squads outside the FIG should proactively identify intelligence which is collected during the normal course of duties either through Investigation or source handling - that is pertinent to the FO Collection Plan They are also responsible for ensuring this intelligence is forwarded to the appropriate entity w ithin the FIG All sources have the potential to meet intelligence requirements Does the Agent who Is talking to a source know the requirements that this sou1ce could potentially address' Where staffing levels permit Investigative squads wilt be assigned an embedded IA who will report to one of the field office SIAs and will ensure that intelligence callee ted during the squad's normal course of duties Is funneled appropriately to the FIG for either dissemination domain awareness or gap Identification This embedded IA will be an extension of the Dom aln and Collection Management functions in the office The IA will help agents on the squad identify potential opportunities for sources to provide Information that Is responsive to an intelligence requirement that may or may not be outside the scope of the case for which that source was recruited The IA will Identify and define priority collection requirements the squad's human sources may be able to fill The IAs will identify develop and provide relevant questions and taskings to be used in source debriefings · Dedicated Special Agent HUM NT Collectors To distinguish from case agents the FIG Agents are dedicated full-time to HUM INT They will not work on cases but will provide cross-program support by recruiting and handling hum an sources with access to intelligence that can addres priority requirements They may coordinate with CHS handling agents to facilitate the flow of intelligence information when the intelligence being provided reaches beyond the investigation on w hich they are reporting The FIG Agent should know the field office's lntelllgence gaps and collection requirements and priorities established by the CollMC With this knowledge they will develop liaison contacts and UNCLASSIFIED FOR OFFICIAL USE ONLY 41 UNCLASSIFIEO FOR OFFICIAL USE ONLY spot assess develop recruit and handle human sources dedicated to creating non-case collection opportunities Alternatively a FIG Agent may be provided a targeting package relevant to a specific requirement B Cc JIJ§e FIG Agents will only be responsible for source operations and liaison it is expected that they will develop high level expertise in the use of tracfecraft as weir as ttie operation al' skills necessary to spot assess develop recruit and handle HUM INT sources This expertise will be achieved by actively participating in the appropriate training programs and through constant practice while on the job Fl G Agents will in tum actively participate in mentoring and coaching other less experienced Agents in these areas Case Agents and HUMINT Collectors t ach Add Unique Value to the Field Office's Cap bilities Case Agent • • • • · • Expertise managing cases driving toward usable Intelligence and or prosecution Source spotters and handlers for operational matters Able to handle multiple cases and leverage program expertise Work in conjunction with embedded IAs to identify investigative approach Subject-matter expertise • HUMINT Collector • • • • • • Full-time spotters developers recruiters and handlers of sources Dedicated to creating non-case collection opportunities and fresh streams of reporting Skilled in USIC-stc Jndard tradecraft practices designed to protect sources and agents Capable of working joint operations when necessary Skilled in validation techniques for testing sources' reliability Subject-matter expertise Liaison Liaison relationships provide the assets and controls necessary essentially the eyes and ears required to blanket a community and establish a proactive posture·against threats to the U S In this role a FIG Agent conducting liaison has the responsibility of educating the liaison contact regarding the vulnerability As these vulnerabilities in domain entities are identified liaison allows tripwires to be set in order to alert us to impending threats There are several other benefits which can be realized from a strong liaison program First it creates valuable opportunities for spotting and assessing potential C HSs within the liaison entity This is especially valuable when the information available from within the entity requires a confidential relationship in order to be extracted Additionally a strong liaison relationship will ease the entry for others eg Case agents needing access to the entity with whom the liaison is maintained To ensure this critical mission the FIG HUM INT squad will serve as the coordinating hub of all FO liaison activities It is important to note that the FIG will not be taking away established relationships existing outside of the FIG but these relationships will be centrally coordinated to UNCLASSIFIED JFOR OFFICIAL USE ONLY 42 UNCLASSIFIEO FOR OFFICIAL USE ONLY ensure common messaging and deconflictlon of multiple requests for similar Information from the same entity Two Platforms Used by the FIG Agent • • • • • • • CHS Operations Proactive Collection Focused Targeted Tradecraft Vetting and Validation Value of two platforms Expands flexibility and options Expands collection opportunities Extends FBI reach and ability to monitor the domain How do I oresent mvself Who do I focus on talking to What is my purpose Risks of two platforms •· Over exposure of individuals to the public • Overlap and de-confliction • CHS Ooerators Confidential relationshio Individuals with specific access to information the FBI needs Develop a CHS including access agents to Gather intelligence Set discreet tripwires • CHS report • Where do I report information • • • • • Liaison Passive Collection Eyes and Ears · Tripwires Education Spotting and Assessing Management burden Liaison Ooen and oublic relationship Entities in the domain with vulnerabilities to threats Develop contacts to • Set public tripwires • Spot potential CHS • Gather intelliaence Contact report Vetting and Validation of Sources We will create standardized mechanisms and practices for validating sources Up until now the processes utilized to vet and validate human sources have focused primarily on compliance issues UNCLASSIFIED FOR OFFICIAL USE ONLY 43 UNCLASSIFIED FOR OFFICIAL USE ONLY While these efforts are important and wi II continue we must also vet and validate sources for three other purposes 1 To ensure field offices are operating viable and valuable sources in a secure manner 2 To ensure the source is fully leverag c to respond to the field offlc e's Collection Plan priorities and 3 To provide a confidence level to intelligence provided by the source Where the purpose of HU MINT sources is to provide information to be used by the FBI in fulfilling its national security and law enforcement missions the operation of sources requires the FBI to ensure the sources and the Intel llgence they provide are authentic reliable and not subject to external control Validation is an ongoing process intended to continually re-establish the a uthentlcity reliability and control of a HUM INT source It requires FIG and Case Agents to constantly assess the source and to use a number of tools and techniques for vetting and operational testing to verify or check the accuracy of avai labia infonnation about the source Although it is essentially impossible to prove that a HUM INT source is valid vetting and ops testl ng should provide the agent a high degree of confidence as to the source's authentic ty reliability and whether they are under external control Vetting and ops testing of the source are Intended to gather information responsive to four key questions • • • • Is the source really the source Does the source have the access claimed Is the source cti ng free of external control Has the source provided valuable information to which the source has legitimate access Enhancements being made to work specialties in the FIG specifically the CHS Coordinator will greatly benefit agents in the validation vetting and ops testing of sources The CHSC will have the expertise and experience to provide guidance on ops tes ting and vetting of sources according to policy legal guidelines and USIC requirements However an agent's use of tradecraft and regular assessment of his source will help in validating and ops testing the source Regular standardized use of validation and ops testing provides increased credibility for the FBI within the USIC and with domestic and foreign liaison partners Our use of tradecraft for recruiting and handling sources as wel I as its attention to assessment and vetting of sources increases opportunities for greater inter-operability of sources This inter-operability of sources provides more collection opportunities to address the FBl's intelligence priorities at home and abroad For example an agent can better represent the FBl's interests in inter-agency coordination meetings when the Agent can provide a detailed assessment of the source's motivation for cooperating Similarly a tested and validated-source is more acceptable for joint operation or turnover to another agency for handling again enhancing the FBl's opportunities to collect priority intelligence For more information on HUM INT collection see the HUM INT How-To Guide UNCLASSIFIED FOR OFFICIAL USE ONLY 44 UNCLASSIFIED FOR OFFICIAL USE ONLY TACTICAL INTELLIGENCE Tactical lntelllgence refers to the integration of FBI investigative and intelligence operations through the dedication of criticai-front line·intelllgence resources-to-investigative programs Embedded analysts from the FIG work directly with operational squads and their in estigatfve programs to coordinate taskings to ensure unity of purpose and action consistent with field office priorities They interpret collection requirements and collaborate with case agents on the collection filtering processing and analysis of information to drive domain awareness satisfy requirements and create intelligence products The IA's role as part of the Collection and Domain Management processes ls described in more detail above Targeting IAs both on the FIG and embedded in operational squads also assist with targeting projects to develop new sources when existing sources are unable to fill collection gaps They work with HUMINT collectors on the FIG and with operational squads outside the FIG to assess potential source capabilities determine vulnerabilities and recommend the most appropriate point of action or exploitation in a targeting product such as a Target Rec ommendatlon The Target Recommendation provides direction to field office collectors including HU MINT collectors case agents SOp SSG and Language Analysts In putting together a targeting strategy the IA will draw from Collection Plans from the CollMC The IA will access domain knowledge collected information finished intelligence and case data to discover potential sourcing and intelligence exploitation opportunities The IA may issue requests for information to regional counterparts and coordinate with FBIHQ on the implications of local targeting strategy and targets for overall national strategy The IA will also network with local regional and national counterparts to get a better awareness of wider trends concerns tactics and resources UNCLASSIFIED FOR OFFICIAL USE ONLY 45 UNCLASSIFIED FOR OFFICIAL USE ONLY PRODUCTION AND DISSEMINATION We will-implement several measures designed to enhance the quality relevance and timeliness of FBI Intelligence production and dissemination Other measures will help enhance the focus of our Intelligence production to ensure the appropriate Intelligence product is er eated at the proper level for the right consumer FBI intelligence products both raw and finished serve a wide audience including national level policy and decision-makers intelligence agencies warfighters state local and tribal law enforcement and the FBI itself FOs In addition to producing IIRs should concentrate their all-source analytic al production efforts on Intelligence Bulletins and Situational Intelligence Reports which focus on the needs of state and lacal organizations for intelligence that identifies threats targets and tools However Intelligence Assessments of a strategic nature may also be done in the field office when appropriate Raw lntelllg nce I Chief Reports Officer Position A Chief Reports Officer will be established in every FIG to enhance the quality and timeliness of II Rs The CR O's responsibilities include review of all If Rs prepared in the field office to ensure that each appropriately protects sources and methods adherence to US C quality standards and FBI priorities substantive review and guidance on the content of l Rs does it satisfy a validated requirement comply with other reporting criteria e g new detailed authoritative etc ensure field office accountability with measurable and objective performance standards support for the - development and maintenance of the field office common operational picture collection strategy ·and collection plans determine whether an IIR meets the criteria for direct dissemination determine whether an II R requires a substantive review at FBIHQ and tracking of internal field division IIR production metrics The CRO will also coordinate with Collection Management and provide Source Directed Requirements as appropriate Raw Intelligence I 1 R Training The SET has outlined a tiered IIR training program for all Intelligence Analysts including Reports Officers and Chief Reports Officers to enhance the quality of all llRs - ultimately affecting all other aspects of the IIR production In addition the CRO will have the expertise to train and mentor other Reports Officers concerning all IIR content issues as well as other measures of quality such as technical tradecraft standardization and substantive accuracy S ET field office training will provide all members of the FIG with the general content of the IIR process the need for requirements-driven intelligence dissemination and the role of the CRO Limited Direct Dissemination of I Rs In order to improve the timeliness of our raw intelligence reporting the FBI will transition towards a limited form of direct dissemination of IIRs from field divisions to the USIC Law Enforcement partners and other consumers Any reports disseminated directly from the field regardless of the volume will result In a commensurate number not needing to be processed at FBIHQ The UNCLASSIFIED FOR OFFICIAL USE ONLY 46 UNCLASSIFIED FOR OFFICIAL USE ONLY objective is to improve IIR timeliness by allowing for a number of direct dissem inatlons from FBI FOs while simultaneously ensuring that IIRs forwarded to FBIHQ for substantive review prior to dissemination require only minimum review and coordination A significant number of intelligence reports would continue to be forwarded from the field divisions to FBIHQ for coordination prior to dissemination to-the USIC• This hybrid approach of dissem lnatlng Intelligence is contingent upon the establishment of a CRO in the FO and the FIG's ability to consistently produce high-quality IIRs The CRO will serve as the quality control mechanism in the field The intent is to apply a quality control check and to ensure required coo rdlnation is effected at the lowest possible level and i n the most expedient manner while at the same time retaining a process that provides a mechanism for the necessary substantive reviews and authorizations to be performed at FBIHQ IIRs Requiring FBIHQ Dissemination The following categories of IIRs must continue to be sent to the respective reports unit at FBIHQ for coordination and review prior to dissemination to the USIC ' 1 2 3 4 5 6 7 Foreign Disclosure Legal Review Marked Originator Controlled Limited Dissemination Joint Source US Policy Attachments The CRO certification program includes in-depth training on the specific instances that require FBIHQ approval or coordination I Rs Requiring FBIHQ Coordination The following categories of II Rs must be coordinated with the respective reports unit at FBIHQ prior to being disseminated from the field office to the USIC 1 National Level Activities - This includes national level activities·or content associated with a nation-wide organization or activities affecting more than the field office's Area of Operations AOR In these cases the CRO ensures in addition to the operational coordination with FBIHQ coordination is effected with the respective FBIHQ reports unit The purpose of this coordination Is to leverage the subject m atter expertise of the reports units at FBIHQ which are responsible for following issues in a specified geographic or functional area and are expected to have a national or intern ational perspective 2 Foreign lntelllgence - If a report contains foreign intelligence or concerns foreign based activities the IIR should undergo the same coordination procedure as for National Level activities and be coordinated with the appropriate FBIHQ reports unit 3 Technical Substantive review - Technical substantive review includes the following UNCLASSIFIED FOR OFFICIAL USE ONLY 47 UNCLASSIFIED FOR OFFICIAL USE ONLY - Any time an Intelligence officer Is identified Content concerning foreign military technology acquisition or programs e g high-tech procurement or major hardware Initiatives Content concerning technical aspects of Weapons of Mass Destruction WMD or WM D pfecl ItSUrs Direct Dissemination - The CRO makes the determination whether an IIR qualifies for direct dissemination from the field division or Is required to be forwarded to FBIHQ for additional coordination and review FBIHQ Dissemination- If the CRO determines that the IIR Is in one of the seven excepted categories requiring FBIHQ approval the report will be forwarded for coordination and approval FBIHQ will accomplish any legal or Designated Intelligence Disclosure Official DIDO authorization that has not been delegated to the field review IIRs with non-standard addressees or with special handling instructions review reporting with U S policy Implications or attributed to joint sources and facilitate technical procedures such as posting attachments ' CRO IIR Metrics - The field division will be graded on three primary metrics The first is FO velocity measured from the date the IIR is created by the field office in the FBI IIR Dissemination System FIDS to the time the IIR Is submitted via FIDS to FBIHQ or directly disseminated to the USIC The second measure is the throughput metric Throughput is the percentage of submitted IIRs that are subsequently disseminated to the USIC A field office's throughput will decrease if FBIHQ rejects their submitted as 'non-dlsseminable ' The final metric is a new measure of throughput called first-time throughput First-time throughput is the percentage of submitted IIRs that are subsequently disseminated to the US IC and that were not re turned to the field for addlt onal dits A field office's first-time throughput will decrease not only when an IIR is rejected or not disseminated by FBIHQ but also when FBIHQ sends an IIR back to the field for edits - even if that IIR is then resubmitted and sentto the USIC Finished Intelligence Production and Dissemination Field offices should refine their finished intelligence analytical products to a set number of products so as to standardize their products across the enter prise and create brand recognition with consumers at every level While there are a number of local-use intelligence products such as Intelligence Notes and Domain Assessments the following finished products are the focus of SET standardization efforts because they are externally disseminated and should adhere to USIC standards Finished intelligence products that are disseminated to external organizations can be grouped into five major categories 1 Assessments a ·intelligence Assessments IA b Special Event Threat Assessments SETA 2 Intelligence Bulletins 18 3 Situational Intelligence Reports SIR 4 Letterhead Memorandums LHM 5 Briefings UNCLASSIFIED FOR OFFICIAL USE ONLY 48 UNCLASSIFIED FOR OFFICIAL USE ONLY Assessments Assessments are finished intelligence products containing evaluated all-source information that address intelligence require ments or Identify threats and trends Some are intended to be released to local customers of FBI FOs while others will be released at the national level to our intelligence-community-and ·lawenforcement·community·partners Intelligence Assessments are finished intelligence products containing evaluated All-Source intelligence Assessments may address tactical strategic or technical Intelligence requirements They are written when there is a need to identify threats or trends in any FBI investigative program and should always be responsive to FBI and or USIC intelligence requirements· Special Event Threat Assessments analyze the attractiveness of a special event for terror targeting as well as assessing the known and potential thre ats to an event A Special Event Threat Assessment provides FBI personnel other law enforcement agencies and the event security planners with analysl s to better monitor potential threats and to maintain a safe and secure event environment lnte llgence Bulletins Intelligence Bulletins disseminate Information on significant criminal or national security developments or trends of interest to the intelligence or law nforcement communities In most cases bulletins are one to three pages long and contain brief analysis which supports at least one specific product judgment FOs should produce Intelligence Bulletins that are locally oriented and pertain to the FO's territory Intelligence Bulletins may be classified but should be prepared at the lowest level possible to ensure the broadest dissemination Situational Intelligence Reports SIR The Situational Intelligence Report SIR is a finished intelligence product produced by FIGs to disseminate relevant localized Intelligence to state and local law enforcem ent The SIR conveys information of specific interest to local audiences regarding previously disseminated national-level information that needs to be highlighted for the local audience or locally derived information that is largely of interest only to the local audience Letterhead Memorandum LHM The Letterhead Memorandum LHM is often used to transmit information to Foreign Law Enforcement and or Foreign Intelligence Services in response to official requests as well as other case specific uses The LHM Is a memorandum on letterhead stationery and should nor mally require a cover communication for transmittal Briefings Intelligence briefing is an integral part of intelligence analysis tradecraft Effective briefing requires proper planning organizing and del Ivery skills Intelligence briefs are presented at every level of the FBI from case analysis summaries at squad meetings to preparing for the Director's daily brief UNCLASSIFIED FOR OFFICIAL USE ONLY 49 UNCLASSIFIED FOR OFFICIAL USE ONLY Intelligence briefings whether delivered formally or informally fall Into one of five USIC intelligence briefing categories 1 2 3 4 5 Basic Intelligence Current lntelligenc e Estimative Intelligence Warning Intelligence Operational Intelligence Collection Management Products The products specific to the new Collection Management process are specified in the Collection Management sections of the training materials For more information see the Production and Dissemination How-To Guide UNCLASSIFIED JFOR OFFICIAL USE ONLY 50 UNCLASSIFIED FOR OFFICIAL USE ONLY MEASURING AND TRACKING PERFORMANCE If the FBI Is to become the world's premier national security agency the Bureau must instill a highperformance·culture-and standardize-certain management practices to be able to rn IJn its progress in becoming an Intelligence-driven organization One of these management practices relates to the ongoing process of monitoring and improving the organization's performance in executing its intelligence mission An enhanced strategic and standardized performance management system will enable the FBI to monitor and clear1y articulate its successes in delivering on its intelligence mission The SET performance management implementation is designed to achieve several objectives • Motivation Encourage behavior that improves overall Bureau intelligence • Transparency Increase transparency and accountability with clear performance standards at all levels • Continuous Dialogues Institutionalize a culture based on regular coaching and feedback driven by hard data The performance management system will focus on a strategic set of performance metrics that will drive the right set of behaviors in the organization and lead t o continuous improvement of the FB l's intelligence program At the same time the system takes into account that not everything can be packaged neatly in num bars A significant aspect of a field office's intelligence program is knowledge of domain and the understanding threats and gaps to be able to collect against those threats and gaps In terms of measuring one's performance in this arena a qualitative creative approach must often be employed · The numbers never tell the whole story but they provide an important beginning The first step is to install a reliable performance metrics tracking and reporting process across the Bureau It is important that if Headquarters intends to monitor and drive performance that both Headquarters and the field work from the same data • Think of it this way intelligence collection analysis dissemination- and where applicable- action should be at the heart of what your field office does So the metrics are your pulse ls your office's heart rate slow or fast and based on your domain what should it be Now to take this metaphor one step further the fact that your field office turns out am illion IIRs SIRs or IBs may show a very fast pulse rate but not necessarily a healthy heart The way to determine the true health of your intelligence program is to ask questions that go behind the numbers Aside from the volume of reporting what is the quality of the reporting Is it actually useful when measured against the FBl's intelligence requirements the intelligence community's requirements Does the reporting help to fill a gap Are we prioritized Are we collecting against what we already know or are we asking those provocative questions that identify the presence of risk that was not re ly on our radar before What are the unknown threats and what am I doing to hunt for them Are we using our mapping capabilities to get not just the intelligence information about our domain but literally a UNCLASSIFIED FOR OFFICIAL USE ONLY 51 UNCLASSIFIED FOR OFFICIAL USE ONLY snapshot out what it looks like and how one collection stream or one threat relates to an other geospatially This qualitative component will be captured through regular performance dialogues among senior leaders in the field nd t FB IHQ The starting point for these performance reviews will occur with enhanced Deputy Director's Strategy Performance Sessions SPS with'SACs·from ·regional offices The SPS dialogues will cascade to the field office level where the SAC will conduct monthly intra-office SPS performance reviews with his or her management team These reviews will be similar In concept to the Com pStat performance system common in law enforcement CompStat short for comparative statistics is a performance management system introduced in 1994 by the NYPD The policing application of SPS works by counting crime reports and · measuring them against arrest and summons activity and then mapping all of that The concept is to put the cops on the dots or map where the crimes are happening and deploy the police to those locations quickly so there Is a higher II kellhood of catching the bad guys the next tlm e they strike The FBI application SPS- is slightly different In concept We are not applying the CompStat model so we can get to where the crim e is and catch them the next time but so that we have a better chance of identify ng threats beforehand and we are in the best positio n to prevent the threat from being carried out at all In addition whereas CompStat tends to be more operational and tactical in nature SP S will be at a more strategic and focused level In the near-term the performance management Implementation will • Determine initial scorecard metrics for IIRs expand metrics through 2008 and 2009 • Implement regular performance dialogues at the top levels of the organization • Not set targets as part of SAC PARs in 2008 but In 2009 • Link inspection processes SAC PARs and file reviews with SET results implementation • Be driven by a manual process with some automation The end state or long-term vision takes this a step further • Enterprise scorecard system that can be populated from Headquarters or the field is automated and reliable • Clear targets both short-term and stretch targets • Strategic focused performance discussions regularly occurring among top FBI leaders and at all levels of the organization • Inspection process SAC PARs and file reviews fully integrated with performance management process UNCLASSIFIED FOR OFFICIAL USE ONLY 52 UNCLASSIFIED FOR OFFICIAL USE ONLY Performance Data Metrics and Scorecards Ultimately the FBI measures success by how well we prevent and disrupt crimes and terrorist acts and our ability to bring criminals and terrorists to justice But to help us achieve this we need to track and -measure -our success-in the actiYities that h lp us get there For intelligence we have four key measures 1 Speed 2 Quality 3 Accuracy 4 Actionability This graphic illustrates the four core intelligence processes and provides some examples of the types of metrics that will be captured at each stage 1ntormatton Dl$Gtfinlt iatl 011· - - i-int • ' 'Q · __ _ ··M Wef -' ' Iii u · •- · - _ • • Anai• · Y sis- ·co 1rection' 0 · • • · 1 -· - ooinalil Awaferi - · • C-o l Uqii f% iiri limi · 1 1n Ptd J ' ·· Jctlp _ · _ · AA _R $11Jl1 '11 - t - - 1l'°- Ri liiiJ ta1it'$Cci· HD-Viki• · - -- _ nr r _ -c l ri Field offices wi II be expected to focus on a small set of metrics for Phase 1n the first six months based upon what can be collected currently Phases 2 and 3 will provide FBI leadership with an updated set of metrics to track as shown in the table below · UNCLASSIFIED FOR OFFICIAL USE ONLY 53 UNCLASSIFIED FOR OFFICIAL USE ONLY Phased Matrix of Performance Metrics Intelligence Process Collectlon Phase 1 Metrics Phase 2 Metrics Phase 3 Metrics Next 6 Months 6-12 •lor ths Out 12-18 Months Out • # of II Rs by collector • ltotlf Rs· by·source· • % of IIRs that hit priority-1--or 2 NIPF requirements • % of IIRs that hit FBI requirements • # IIRs hitting priority requirements by Confidential Human Source CHS Info dissemination and integration •#of II Rs • # of IIRs by IA • IIR Velocity HQ to dissemination • IIR Throughput IIR velocity o Field velocity collection to HQ o HQ velocity HQ to dissemination • # of IIRs by RO • # of IIRs pending • IIR quality rating • IIR velocity o Field velocity by immediate priority routine o HQ velocity by Immediate priority routine Analysis •#of IAs •#of IBs • #ofSIRs • # of Briefings • Analytic integrity standards AIS score Action requirements • • #of IAs • #of 18s • #ofSIRs • # of Briefings • Analytic integrity standards AIS score • Intel usage to determine quality % of IIRs used in internal FBI executive products • % of IAs to analysts on-board • % of IBs to analysts on-board • #of SIRa • # of Briefi'egs • Analytic integrity standards AIS score • • • • • • Intel usage to determine quality Customer satisfaction score Identified trends and threats Investigations Initiated Neutralized threats % of If Rs used in external executive • oroducts Headquarters through the Resource Planning Office RPO will continue to track other key metrics such as resource utilization I e TURK and Funded Staffing Level FSL but the focus of FBI leaders will be on intel-related metrics UNCLASSIFIED FOR OFFICIAL USE ONLY 54 UNCLASSIFIED FOR OFFICIAL USE ONLY Data Collection Analysis and Reporting The data cpllection process will continue to be manual and labor intensive and will be led by the Di's Performance Analysis Unit PAU at Headquarters in collaboration with the Resource P nning Office RPO Much of the data will be fed Into the Compass system and displayable via a common SAC dashboard Below is a snapshot of ttie vievi'SACs will· see when-they-open Compass and click on the Intel link from the Compass homepage • 4 tat----------- i ••- ------- ' i -··---··· _ The field's role will be limited in terms of data compilation and scorecard assembly that role will be performed by a team of analysts in DI PAU in close collaboration with RPO However the field IP' Coordinator along with the IP Manager will have a significant role in reviewing the data as well as interpreting the data and explaining trends With regard to automation the near-term deployment of enterprise systems will add an element of automation to the process making it easier to collect existing and some new metrics UNCLASSIFIED FOR OFFICIAL USE ONLY 55 UNCLASSIFIED FOR OFFICIAL USE ONLY Performance Dialogues For an organization's leaders periodic performance reviews are where the ongoing process of strategic management really comes together The meetings generate strategic conversations and insights inform declsion-maklng enhance pei formance management @nQ instill a culture of accountability to enable the organization to achieve performance breakthroughs Historicaliy in the most successful organizations the chief executive sets the tone and cadence by establls hlng regular strategic performance discussions among his executive team The purpose of these reviews is not to monitor ongoing operations - those are separate meetings - but rather to monitor the strategic pulse and direction of the organ ization These performance rev iews or dialogues must then be cascaded down through the organization in a ripple effect in order to in still the behaviors that will drive the organization to desired results over the long-term Since late 2006 Director Robert M ueller has assembled monthly and quarterly with his executive team to conduct strategic performance reviews focused on a small set of metrics and key enterprise initiatives Known as the Strategy Management System or SMS the Director has cascaded this approach to the Headquarters divisions the Assistant Directors of most HQ divisions also meet regularly to engage in strategic performance dialogues with their leaders The process is far from perfect but a foundation has been la id to expand the process to the field in a coordinated manner Beginning in February 2007 in an effort to cascade certain elements of the SMS to tbe field Deputy Director John Pistole initiated a HQ-to-Field dialogue process called the Strategy Performance Session An extension of the SM S process SPS created a forum to engage top field leaders in these existing strategic discussions originated by Headquarters Held quarterly Deputy Director Pistole and branch executives conducted a secure video teleconference SVTC with five to seven SACs at one time focusing on a specific theme or topic e g domain Each SAC presented a set of comm on metrics e g TURK IIRs whereuppn the Deputy Director and his Executive Assistant Directors would then ask a series offollow-up questions both quantitative why did you only have five IIRs last month and qualitative in nature what are you doing about a certain threat in your area While a number of SA Cs likely initiated a version of their own SM S SPS a formal structure or process did not exist that could posl tion the field for success in its dialogues with HQ or get it to focus its intelligence program The graphic below shows the long-term FBI performance review structure at a high level driven by bottom-up execution from the field and capped off by the Director's SMS reviews UNCLASSIFIED FOR OFFICIAL USE ONLY 56 UNCLASSIFIED FOR OFFICIAL USE ONLY Deputy Director SPS with SACs Beginning in May 2008 the Deputy Director will recon tit 1 S t gy Performance Sessions with his executive team and the Special-Agent-in-Charge from six field offices from a particular region The S PS reviews will last two hours giving each SAC 20-30 minutes with the Deputy Director and his team The SPS will draw from quantitative data captured in Com pass as a starting point for discussion and build on that with qualitative questions The full menu of qualitative questions can be found in the Performance Management How-To Guide The first SPS sessions will occur in late May and include the Wave 1 field offices Washington Field Office Baltimore Norfolk RleRevfews and Richmond Wave 2 offices will begin their Quarterlyassessmentoffndlvfdual SPS reviews with the Deputy Director in July INSAperformanee along with the second sessions for Wave 1 offices The calendar below provides a proposed review schedule through 2008 ' Through 2008 each Wave wil I participate every 60 days The SPS schedule will be re-set in January 2009 and focus on nine groups organized generally by regions as opposed to SET waves The chart below provides a sample SPS schedule for 2009 SPS frequency will depend on field office performance and scheduling availability SAC SPS with ASACs and Supervisors SACs will meet on or around the third week of every month to conduct the field office version of the Deputy Director's SPS Why the third week First because the metrics data are generally available in the second week of every month when it is compiled and fed into the Compass system By waiting until the third week the SAC can ensure the latest data Second each SAC will participate in the Deputy Director's S PS at the end of every third month so by conducting regular internal field office reviews one week prior to the SPS the SAC and his her management team will get into a rhythm in conducting his her S PS the SAC should use the same menu of qualitative questions that are used for the Deputy Director's SPS UNCLASSIFIED FOR OFFICIAL USE ONLY 57 UNCLASSIFIED FOR OFFICIAL USE ONLY Supervisor FIie Reviews with Agents Analysts Each supervisor will continue to conduct a file review with agents on a ninety-day cycle These performance reviews are not meant to depart significantly from the current file review process in place although some adjustments will be required The existing file review template will be supplemented with an additional section that exclusively focuses on intelligence production e g II Rs Initiated by agent Individual case review sheets will be modified to include key questions such as • • Was the investigation initiated as a result of strategic intelligence Yes No Was the investigation enhanced as a result of tactical intell igence Yes No These questions mirror page 11 of the new Intelligence Program SAPR Supervisors will also conduct file reviews with Intelligence Analysts every ninety days The Human Resources Division is currently developing a standard Intelligence Analyst file review process much in the way Special Agent file reviews are standardized Link to Inspections and SAC PARs Inspections and SAC PARs In the summer of 2007 the Inspection Division INSD developed a Strategy Management System SMS as part of the FBI-wide SMS recently Implemented to make sure the Bureau aligns all of its resources and activities to properly support ourli pst-9 11 mission In the traditional inspection process inspections were generally based on a three year inspecti on cycle All programs in a field office or headquarters section were inspected from top to bottom on this cyclical basis In November 2007 INSD interrupted the 'traditional' inspection cycle in order to begin the Inspection Reconstruction Project IRP The IRP is nearly complete Under the new inspection m odel the primary document utilized by the Inspection Division will be the newly designed SAPR The questions contained in each program SAPR have been directly aligned with the SMS and the SAC PAR Data analyzed by INSD will include the SAPRs FBIHQ SAC program rankings results of the leadership climate survey and results from the annual outside contacts survey INSD will compile and analyze this data and prepare the Inspection Risk Assessment Matrix IRAM during the last quarter of each year The IRAM will be used to determine the inspection schedule for the following year SACPARs A number of Intelligence metrics that are part of the enhanced performance management rollout are also included in the SAC PARs for FY 2008 as it relates to 03 - Expand Information Access and Sharing Internally and Externally Including • • Measurable Result 1 MR1 llR Dissemination over IA Capacity Ratio Measurable Result 2 MR2 llR Dissemination over Collector Capacity Ratio UNCLASSIFIED FOR OFFICIAL USE ONLY 58 UNCLASSIFIED FOR OFFICIAL USE ONLY • • Measurable Result 3 MR3 IIR Velocity Rate Measurable Result 4 MR4 IIR Throughout Rate Of note SAC PARs for FY 2008 will include a question on what the SAC Is doing to create an intelligence-led field office and ensure the Qverall $1 T lntellfgence Operations recommendations FIG CM OM HUM INT Production Dissemination Performance Management are implemented in their offices and how effectively they are working In addition for FY 2009 SAC PARs will Include a few additional Intelligence-related metrics Including for example a metric IIR First-Time Throughout Rate whlc h will measure the percentage of IIRs that get through cleanly to dissemination on the first try For more Information see the Performance Management How-To Guide and Menu of Qualitative Questions ' UNCLASSIFIED FOR OFFICIAL USE ONLY 59 UNCLASSIFIED FOR OFFICIAL USE ONLY IMPLEMENTATION The new field intelligence model will be implemented in II 56 field offices between Maren and December 2008 This will be a phased approach that will be rolled out in waves beginning with the Washington Field Office Baltimore Richmond and Norfolk The first step Is preparation This begins prior to the wave• when the SET arrives in your office • A Prep Checklist and baseline assessment will be provided prior to S ET's arrival to each field office to assist in its implementation Each field office will be expected to have all items completed on the Prep Check list prior to SET's arrival • A baseline assessment of each field office will be conducted prior to SET arriving Based on this assessment it will be determined what type of SET model could be successfully configured to that office Field offices should also plan to staff core functions• of the FIG • Any initiatives that are inconsistent with the SET initiatives should be discontinued The SET plans to role out FBI-wide changes that incorporate lessons learned from each successive wave As a result making changes before the SET arrives at your office would be counterproductive If you have a specific·issue contact the SET for guidance The second step begins when the SET arrives in your field office • SET members will'work side-by-side with field office personnel to refine and improve the changes as they are implemented The rollout will also provide guidance training and tools for enhancing dom aln awareness Collection Management and raw and finished Intelligence production and dissemination • SET will Initially be on the ground In your office for approximately two weeks to provide baseline training The exact amount of time will vary depending on the size and complexity of your office and how close your current structure is to the new field office model Step three After the initial rollout you will be left to act execute work on collection plan for a few weeks Some SET members may stay behind to provide on-site assistance The SET will return at a later date for another two weeks to deliver more advanced training SET will also check on your process and see what lessons learned can be used to improve the process and or implementation in other offices The final step will be ongoing follow-up and support This will be provided by the DI and other FBIHQ components To ensure that FBIHQ is aligned to interact smoothly with the new field structure the DI and the SET are assessing the alignment between the DI and the fief d and between the DI and other F BIHQ elements Enhancements will likely be made to the current FBI HQ structure UNCLASSIFIED JFOR OFFICIAL USE ONLY 60 UNCLASSIFIED FOR OFFICIAL USE ONLY On a parallel track the SET will rollout changes In the area of human capital Some of these efforts including recruitment of analysts are already underway SET members recruiters and IAs piloted our new recruiting approach at four cam puses George Washington University Columbia University the University of Maryland and the University of California Los Angeles Additional recruitlng activitiesarn ongoingijt Qth r 9am puses and potential sources of candidates including military bases Rollout of all human capital initiatives will continue throughout 2008 The Training Divis ion is heavily involved with the SET efforts They are developlng spec iallzed training courses including Virtual Academy courses for all aspects of the intelligence operations rollout For example they are preparing to deliver a Chief Reports Officer training course prior to the rollout in most field offices They are also producing training materials and job aids To support longer term efforts the New Agent training curriculum has been completely revamped and will be revised again in six months to reflect the SET initiatives Training Division is also very engaged with development of advanced training options for Special Agent and IA career paths UNCLASSIFIED FOR OFFICIAL USE ONLY 61 ··- -- - - ·-- ------------------------------------ UNCLASSIFIED FOR OFFICIAL USE ONLY CONCLUSION Our mission is to provide domestic security for the UnitecrStates - to understand·threats to this country well enough to dismantle those threats whet her they are from gangs organized crime or al-Qa'ida Intelligence allows us to understand Law enforcement authorities allow us to halt and dismantle those threats Many of the threats we face are regionally natio nally or internationally networked They cannot be understood by looking at them through the lens of one squad program or field division Until we look beyond these stove pipes to the entirety of the organizations that threaten us we cannot ensure that the law enforcement tools we use are optimally employed against the best targets We are not fully succeeding in our m isslon if we simply disrupt organizations that our capabilities can and should allow us to dismantle If we miss important threats we are not succeeding at all The newfield intelligence structures andprocesses outlined in this document are designed to help us maximize all of the FBI's investigative capabilities to protect our commt1nities our country and our v1 1rious wqys of living The capabilities we m11st harness exist within ' the organization now with our dedication to duty u yielding perseverance and unwavering fidelity ofpu- pose we can wi 4 cJnd 1nust succeed in this endeavor UNCLASSIFIED FOR OFFICIAL USE ONLY 62 • IBii Strategic Execution Tean STRATEGIC EXECUTION TEAM - PROJECT AT A GLANCE A Strategic Execution Team SET made up ofAgents Intelligence Analysts and other professionals from the field and Headquarters completed an exhaustive assessment process to examine the strengths and weakness ofour intelligence efforts They also looked at what is working well and used what they learned to create a multi-faceted plan to enhance the FBI's intelligence our capabilities --·-·- ·--- - · 1r id r'ttd ep i wepa1in - Production -·• l and 1 n· 1ssemmat10n an ' am omts · Initiatives U d-erway - · -· - ·1 · -------------------- -----'- • Put ht- fieid'c ffi e a certified Chl fRep Officer- · - - · accountable for consistent high-quality production and dissemination of raw intelligence i ·• • Deploy the Collections Operations and Requirements Environment CORE a SharePoint-based tool to help us generate raw 1 • intelligence that is responsive to requirements and track how we are 1 doing in meeting those requirements ·• • Delegate authority lower into organization to approve IIRs i • Enhance feedback process I c - 0 1 1e c -t io n • Establish Co lection Man g e t Coordinat r hi eac h fi li offic -i Requirements to develop and maintain a comprehensive local Intelligence j l• Collection Strategy and cascading Collection Plan based on field i office prioritized requirements and collection capabilities 1 l -- ------- _ _ - '---- ----- ---- - • Embed intelligence analysts with operational souads ___ _ - ---· ···---·- _ --- - _ • Insufficient volwne and • Improve processes and incentives to better leverage the capabilities ' of sources opened for specific cases lI Human ' quality of sources • Low utilization of sources I • Establish in all field offices a HUMINT collection program of Sources j Special Agents dedicated full-time to acquiring new sources and I exploiting existing sources I ' • Create standardized mechanisms for validating sources ' • • Create a HUMINT Iiaison program to expand and exploit I ' ' 4 relationships with external partners for purposes of collecting intelligence ·-- - -· - - - - - - - - '- · - -· - - '- - - - - - _ - - - -- - _ -- _- _ - - - - - _ - _ - -- --- - - -- -- - - • - _ -_7 --- -- Collaboration • Structure of Field I • Standardize 56 diverse FIG structures along best practices to Intelligence Groups FIGs increase collaboration between intelligence and operations 1 not conducive to coordination across field and with HQ and accountability for collaboration intelligence gathering analysis use and production • When justified by a validated Domain Assessment establish crossprogrammatic local Desks to develop local expertise on priority issues and establish clear issue-oriented communications channels across the nation - • -Limited dom'au i a areness - E bli hcentral strat gic c rdin t g- p Ii t tii·o in ·--· · Domain restricts strategic resource Management Coordinator to Awareness allocation - Provide comprehensive view of domain across all programs ij - Develop an integrated comprehensive intelligence collection --------1'-- _________ __s_tr_a_te _gy_th_a_t_le_v_er_a 1g__ es_a_l_l_co_l_le_c_ti_on_ca 1p_ a_b_il_it1_·e_s_ag _ a_in_s_t P_ ri_o_ri_ti_es_ __ - - - - - --- -· -- -_ - - - - - - · - - · · ' - - ·-- - · - - · --· - - --· · ----· · - · - · -• • - · · - · · - - - · - Human • Variable quality of analysis • Execute targeted recruitment strategy for analysts Resources of finished intelligence • Improve analyst selection process to consistently identify c didates who will succeed in the role • Strengthen career paths and training for analysts and agents improvements to perfonnance --· --- --- ___ _ _ __ _ --__ ______________________ • Make -- --- ---·- ·-· - ·•-· __ systems ·-·- ··- ·· - ·· · ' • Ideas developed are not • Establish standard processes to ensure intelligence supports ' fully exploited effective decision making across the field office Management • Inspection process • Establish metrics for collection infonnation dissemination and · and misaligned with strategy 1 integration analysis and action tie to rewards and appraisals l Accountability • SSA SIA approval process · • Launch COMPSTAT-like review process cascade to all levels is slow _ • Reengineer Inspection process i Constra- ed flow of- -- - infonnation from collector to rest of FBI Slow dissemination·of Intel · Infonnation Reports Low throughput ofllRs leads to wasted time effort Limited awareness of i customer preferences Collection requirements not widely understood t Requirements flow not f centralized i • _______ I I -