{"id":28796,"date":"2016-09-21T12:30:11","date_gmt":"2016-09-21T02:30:11","guid":{"rendered":"http:\/\/www.aspistrategist.ru\/?p=28796"},"modified":"2016-09-21T18:24:58","modified_gmt":"2016-09-21T08:24:58","slug":"cyber-wrap-special-two-heads-better-one","status":"publish","type":"post","link":"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/","title":{"rendered":"Cyber wrap special: two heads are better than one"},"content":{"rendered":"

\"\"<\/p>\n

There\u2019s a debate going on in the US at the moment that isn\u2019t attracting much commentary here. While it’s a touch arcane, it’s worthy of public discussion. The question is the organisational arrangement for America’s cyber security, cyber offence and signals intelligence capabilities.<\/p>\n

The Pentagon and the US intelligence community are in the blue corner, urging President Obama<\/a> to split military Cyber Command functions away from the intelligence gathering National Security Agency. Senator John McCain, chairman of the Senate Armed Services Committee, is in the red corner, pledging to thwart<\/a> any attempt to split the two bodies.<\/p>\n

Not unusually, Senator McCain has a strong view. His opening statement at a hearing on national security encryption and cyber matters<\/a> didn\u2019t mince words:<\/p>\n

\u2018Here we go again: another major policy matter has apparently been decided with no consultation whatsoever between the White House or the Department of Defense with this committee.\u00a0I urge Secretary Carter to provide this committee and the Congress the details of this plan and his reasoning for supporting it. And I hope he will explain what has changed since the last time the administration rejected this idea in 2013\u2026I would remind them that this committee does not take well to being stonewalled while their colleagues in the administration leak information to the press.’<\/p>\n

Apart from the Washington beltway shenanigans on public display here, there are some substantive issues underpinning the spat. The organisation split was first discussed in public<\/a> three years ago, in the wake of the Edward Snowden leaks. The Director of the NSA (DIRNSA) wears two hats; as well as being in charge of the signals intelligence (‘sigint’) gathering function, he has command of the military computer network activities that fall under the Cyber Command.<\/p>\n

That command function sits properly under military control because computer network attack can be used to deliver lethal force\u2014in principle, if not to date\u00a0in practice\u2014through attacks on systems controlling infrastructure where physical harm could result. And, as I\u2019ve argued previously<\/a>, the military use of cyberattacks is useful as an adjunct to \u2018kinetic\u2019 activities in the physical world, by disrupting the ability of adversaries to work out what\u2019s going on and respond in a timely way.<\/p>\n

But there\u2019s no requirement for sigint to be under military control. DIRNSA\u2019s counterparts in the \u2018five eyes\u2019 intelligence community, including our own Australian Signals Directorate, are all civilians. That doesn’t seem to hinder those agencies from fulfilling their roles, including sigint support to the military. And it’s that military support role that provides an argument for a split. During the 2013 debate, the Director of the Cyber Statecraft Initiative at the Atlantic Council argued<\/a> that there\u2019s an inherent conflict of interest in having the same person oversee sigint support to the military and command its cyber forces:<\/p>\n

\u2018Imagine if the commander of US Pacific Command were the leading source of information on the Chinese military threat, had the ear of Congress on China policy, ran covert military operations against China, and could decide what information on China was classified. This perverse concentration of power is similar to where the United States has found itself on cyber policy.’<\/p>\n

That’d be a strong argument if supporting military cyber operations was all the NSA does. But there’s much more to its role, and I think the rest of its portfolio provides an even better rationale for a civilian Director.<\/p>\n

Modern sigint intrudes into civil society through the monitoring of domestic communications, especially in support of counter-terrorism investigations. Those activities came to the fore with the Snowden leaks, which also revealed the (dis)function<\/a> of the relevant civilian oversight mechanisms. There’s something disquieting about the military presiding over activities that impinge on the civil population and which have civilian oversight.<\/p>\n

In 2013 the Obama administration decided against a split, arguing on the grounds of efficiency; \u2018without the dual-hat arrangement, elaborate procedures would have to be put in place to ensure that effective coordination continued and avoid creating duplicative capabilities in each organisation\u2019. That argument reflects the historical relationship between sigint and cyber.<\/p>\n

The sigint agencies were pulled into cyberspace early on because of the convergence of communication and computer technologies, which saw communications travelling on computer networks as well as \u2018traditional\u2019 telecommunication channels. The lure of communications \u2018data at rest\u2019 (like emails sitting on computers), which removed the need for real time interception of signals, was too much to resist. The sigint folks started to develop the tools and techniques required to exploit cyberspace.<\/p>\n

In that sense there’s a natural synergy between sigint and military cyber operations. Whatever the organisational structure, an exchange of skills and expertise between the two is almost inevitable, and colocation makes sense. But there’s no obvious reason for both functions to be headed by the same person. Making DIRNSA a civilian position would make for better governance, and Cyber Command could properly remain a military position. We’re not privy to why the Obama administration has changed its mind in the past three years, but I think they’ve got it right this time.<\/p>\n","protected":false},"excerpt":{"rendered":"

There\u2019s a debate going on in the US at the moment that isn\u2019t attracting much commentary here. While it’s a touch arcane, it’s worthy of public discussion. The question is the organisational arrangement for America’s …<\/p>\n","protected":false},"author":6,"featured_media":28798,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[273,391,170,649],"class_list":["post-28796","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-counterterrorism","tag-cyber","tag-intelligence","tag-nsa"],"acf":[],"yoast_head":"\nCyber wrap special: two heads are better than one | The Strategist<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cyber wrap special: two heads are better than one | The Strategist\" \/>\n<meta property=\"og:description\" content=\"There\u2019s a debate going on in the US at the moment that isn\u2019t attracting much commentary here. While it’s a touch arcane, it’s worthy of public discussion. The question is the organisational arrangement for America’s ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/\" \/>\n<meta property=\"og:site_name\" content=\"The Strategist\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ASPI.org\" \/>\n<meta property=\"article:published_time\" content=\"2016-09-21T02:30:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-09-21T08:24:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2016\/09\/7562831366_66f986c3ea_o.gif\" \/>\n\t<meta property=\"og:image:width\" content=\"400\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/gif\" \/>\n<meta name=\"author\" content=\"Andrew Davies\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ASPI_org\" \/>\n<meta name=\"twitter:site\" content=\"@ASPI_org\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andrew Davies\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#website\",\"url\":\"https:\/\/www.aspistrategist.ru\/\",\"name\":\"The Strategist\",\"description\":\"ASPI's analysis and commentary site\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.aspistrategist.ru\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-AU\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-AU\",\"@id\":\"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/#primaryimage\",\"url\":\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2016\/09\/7562831366_66f986c3ea_o.gif\",\"contentUrl\":\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2016\/09\/7562831366_66f986c3ea_o.gif\",\"width\":400,\"height\":300},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/\",\"url\":\"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/\",\"name\":\"Cyber wrap special: two heads are better than one | The Strategist\",\"isPartOf\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/#primaryimage\"},\"datePublished\":\"2016-09-21T02:30:11+00:00\",\"dateModified\":\"2016-09-21T08:24:58+00:00\",\"author\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/08a9125f7af3039520d264e965235a73\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/#breadcrumb\"},\"inLanguage\":\"en-AU\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.aspistrategist.ru\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber wrap special: two heads are better than one\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/08a9125f7af3039520d264e965235a73\",\"name\":\"Andrew Davies\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-AU\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/bbb47ebb41d4978346dbf2e1d21b992a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/bbb47ebb41d4978346dbf2e1d21b992a?s=96&d=mm&r=g\",\"caption\":\"Andrew Davies\"},\"url\":\"https:\/\/www.aspistrategist.ru\/author\/andrew-davies\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cyber wrap special: two heads are better than one | The Strategist","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/","og_locale":"en_US","og_type":"article","og_title":"Cyber wrap special: two heads are better than one | The Strategist","og_description":"There\u2019s a debate going on in the US at the moment that isn\u2019t attracting much commentary here. While it’s a touch arcane, it’s worthy of public discussion. The question is the organisational arrangement for America’s ...","og_url":"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/","og_site_name":"The Strategist","article_publisher":"https:\/\/www.facebook.com\/ASPI.org","article_published_time":"2016-09-21T02:30:11+00:00","article_modified_time":"2016-09-21T08:24:58+00:00","og_image":[{"width":400,"height":300,"url":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2016\/09\/7562831366_66f986c3ea_o.gif","type":"image\/gif"}],"author":"Andrew Davies","twitter_card":"summary_large_image","twitter_creator":"@ASPI_org","twitter_site":"@ASPI_org","twitter_misc":{"Written by":"Andrew Davies","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/www.aspistrategist.ru\/#website","url":"https:\/\/www.aspistrategist.ru\/","name":"The Strategist","description":"ASPI's analysis and commentary site","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.aspistrategist.ru\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-AU"},{"@type":"ImageObject","inLanguage":"en-AU","@id":"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/#primaryimage","url":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2016\/09\/7562831366_66f986c3ea_o.gif","contentUrl":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2016\/09\/7562831366_66f986c3ea_o.gif","width":400,"height":300},{"@type":"WebPage","@id":"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/","url":"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/","name":"Cyber wrap special: two heads are better than one | The Strategist","isPartOf":{"@id":"https:\/\/www.aspistrategist.ru\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/#primaryimage"},"datePublished":"2016-09-21T02:30:11+00:00","dateModified":"2016-09-21T08:24:58+00:00","author":{"@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/08a9125f7af3039520d264e965235a73"},"breadcrumb":{"@id":"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/#breadcrumb"},"inLanguage":"en-AU","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.aspistrategist.ru\/cyber-wrap-special-two-heads-better-one\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.aspistrategist.ru\/"},{"@type":"ListItem","position":2,"name":"Cyber wrap special: two heads are better than one"}]},{"@type":"Person","@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/08a9125f7af3039520d264e965235a73","name":"Andrew Davies","image":{"@type":"ImageObject","inLanguage":"en-AU","@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/bbb47ebb41d4978346dbf2e1d21b992a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bbb47ebb41d4978346dbf2e1d21b992a?s=96&d=mm&r=g","caption":"Andrew Davies"},"url":"https:\/\/www.aspistrategist.ru\/author\/andrew-davies\/"}]}},"_links":{"self":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/28796"}],"collection":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/comments?post=28796"}],"version-history":[{"count":4,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/28796\/revisions"}],"predecessor-version":[{"id":28812,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/28796\/revisions\/28812"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/media\/28798"}],"wp:attachment":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/media?parent=28796"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/categories?post=28796"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/tags?post=28796"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}