THE RESILIENT HOMELAND: HOW DHS INTELLIGENCE SHOULD EMPOWER AMERICA TO PREPARE FOR, PREVENT, AND WITHSTAND TERRORIST ATTACKS ======================================================================= HEARING before the SUBCOMMITTEE ON INTELLIGENCE, INFORMATION SHARING, AND TERRORISM RISK ASSESSMENT of the COMMITTEE ON HOMELAND SECURITY HOUSE OF REPRESENTATIVES ONE HUNDRED TENTH CONGRESS SECOND SESSION __________ MAY 15, 2008 __________ Serial No. 110-115 __________ Printed for the use of the Committee on Homeland Security [GRAPHIC(S) NOT AVAILABLE IN TIFF FORMAT] Available via the World Wide Web: http://www.gpoaccess.gov/congress/ index.html __________ U.S. GOVERNMENT PRINTING OFFICE 43-940 PDF WASHINGTON : 2008 For sale by the Superintendent of Documents, U.S. Government Printing Office Internet: bookstore.gpo.gov Phone: toll free (866) 512-1800; DC area (202) 512-1800 Fax: (202) 512-2104 Mail: Stop IDCC, Washington, DC 20402-0001 COMMITTEE ON HOMELAND SECURITY Bennie G. Thompson, Mississippi, Chairman Loretta Sanchez, California Peter T. King, New York Edward J. Markey, Massachusetts Lamar Smith, Texas Norman D. Dicks, Washington Christopher Shays, Connecticut Jane Harman, California Mark E. Souder, Indiana Peter A. DeFazio, Oregon Tom Davis, Virginia Nita M. Lowey, New York Daniel E. Lungren, California Eleanor Holmes Norton, District of Mike Rogers, Alabama Columbia David G. Reichert, Washington Zoe Lofgren, California Michael T. McCaul, Texas Sheila Jackson Lee, Texas Charles W. Dent, Pennsylvania Donna M. Christensen, U.S. Virgin Ginny Brown-Waite, Florida Islands Gus M. Bilirakis, Florida Bob Etheridge, North Carolina David Davis, Tennessee James R. Langevin, Rhode Island Paul C. Broun, Georgia Henry Cuellar, Texas Candice S. Miller, Michigan Christopher P. Carney, Pennsylvania Yvette D. Clarke, New York Al Green, Texas Ed Perlmutter, Colorado Bill Pascrell, Jr., New Jersey Jessica Herrera-Flanigan, Staff Director & General Counsel Rosaline Cohen, Chief Counsel Michael Twinchek, Chief Clerk Robert O'Connor, Minority Staff Director ______ SUBCOMMITTEE ON INTELLIGENCE, INFORMATION SHARING, AND TERRORISM RISK ASSESSMENT Jane Harman, California, Chair Norman D. Dicks, Washington David G. Reichert, Washington James R. Langevin, Rhode Island Christopher Shays, Connecticut Christopher P. Carney, Pennsylvania Charles W. Dent, Pennsylvania Ed Perlmutter, Colorado Peter T. King, New York (Ex Bennie G. Thompson, Mississippi (Ex Officio) Officio) Thomas M. Finan, Director and Counsel Brandon Declet, Counsel Natalie Nixon, Deputy Chief Clerk Deron McElroy, Minority Senior Professional Staff Member (II) C O N T E N T S ---------- Page Statements The Honorable Jane Harman, a Representative in Congress From the State of California, and Chair, Subcommittee on Intelligence, Information Sharing, and Terrorism Risk Assessment............. 1 The Honorable David G. Reichert, a Representative in Congress From the State of Washington, and Ranking Member, Subcommittee on Intelligence, Information Sharing, and Terrorism Risk Assessment..................................................... 2 Witnesses Dr. Stephen E. Flynn, Ph.D., Jeane J. Kirkpatrick Senior Fellow for National Security Studies, Council on Foreign Relations: Oral Statement................................................. 4 Prepared Statement............................................. 6 Mr. Amos N. Guiora, Professor of Law, University of Utah: Oral Statement................................................. 9 Prepared Statement............................................. 11 Mr. R.P. Eddy, Executive Director, Center for Policing Terrorism, the Manhattan Institute for Policy Research: Oral Statement................................................. 17 Prepared Statement............................................. 19 THE RESILIENT HOMELAND: HOW DHS INTELLIGENCE SHOULD EMPOWER AMERICA TO PREPARE FOR, PREVENT, AND WITHSTAND TERRORIST ATTACKS ---------- Thursday, May 15, 2008 U.S. House of Representatives, Committee on Homeland Security, Subcommittee on Intelligence, Information Sharing, and Terrorism Risk Assessment, Washington, DC. The subcommittee met, pursuant to call, at 10:08 a.m., in Room 311, Cannon House Office Building, Hon. Jane Harman [chair of the subcommittee] presiding. Present: Representatives Harman, Dicks, Perlmutter, Reichert, Shays, and Dent. Ms. Harman. The subcommittee will come to order. We meet today to receive testimony on ``The Resilient Homeland: How DHS Intelligence Should Empower America to Prepare for, Prevent and Withstand Terrorist Attacks.'' For more than 6 years, the Bush administration has been relentlessly sounding the alarm about apocalyptic terrorist groups, but meaningful guidance to first responders about what to look for and what to do about these apocalyptic terrorist groups has been in short supply. One of today's witnesses, a valued friend and counselor, Dr. Stephen Flynn, labels this a ``toxic mix of fear and helplessness'' in his recently published article, ``America the Resilient.'' He sees it increasing the risk that the U.S. Government will overreact to another terrorist attack. I agree. What Dr. Flynn says about resiliency and information- sharing is also on the mark. He says, ``After decades of combating Soviet espionage during the Cold War, the Federal security establishment instinctively resists disclosing information for fear that it might end up in the wrong hands. Straight talk about the country's vulnerabilities and how to cope in emergencies is presumed to be too frightening for public consumption.'' Well, in my view, the American people deserve honesty about what threatens us and deserve an open discussion about what we need to do to protect ourselves and our families from the terrorists who want to kill us. Make no mistake: There are terrorists out there who want to kill us. This subcommittee has spent the last year-and-a-half working to get intelligence right for State, local and tribal law enforcement officers, the people who will most likely see something out of place and act to prevent the next attack. Starting with the information needs of State and locals is the way to go. I think we are unanimous, on a bipartisan basis, about that, and so is Matt Bettenhausen of California, Juliet Kayyem of Massachusetts, Frank Cilluffo at GW, who testified at last month's hearing. There is good news here. Let me be clear, there is good news here. Police and sheriff's officers increasingly see themselves as our Nation's first preventers. That is a term we use here too, but they use it. Obviously, it makes much more sense to prevent or disrupt an attack than to respond to one. At the same time, they have started to understand the full impact of what ``prevention'' means, that the critical infrastructure in their communities--power plants, mass transit, public health, chemical facilities, roadways, bridges and telecom--are all part of their protective responsibility. We are finally making progress, a point I stressed at a major conference in San Francisco in March. The Department of Homeland Security's intelligence products are better. They include some local input, and put first preventers in the private sector on notice about a number of things: which terror plots most threaten the homeland; what State, local and tribal private-sector leaders should be doing to prepare for them so we can bounce back quickly; and how best to put those preparations into action, by running drills and exercises and testing the resiliency of the systems we are establishing. By honestly assessing our vulnerabilities and preparing all levels of government, the private sector and the public to protect against them, we will become more and more secure in our ability to withstand attacks from our enemies. After all, what is terrorism? Terrorism is the ability to terrify. If we are prepared, or as prepared as we can be, we will surely be less terrified and surely have more capability to prevent attacks. I look forward to the testimony this morning. This is an excellent panel. I welcome all our witnesses. I now yield to the Ranking Member, Sheriff Reichert, for his opening remarks. Mr. Reichert. Thank you, Madam Chair. Good morning and thank all of you for being here this morning with us. We look forward to your testimony and your responses to our questions. While the Department of Homeland Security's Office of Intelligence and Analysis should be primarily focused on preventing terrorist attacks, they do have a role in resiliency and in ensuring that they have a full continuity of operational plans in place in case of a terrorist attack. As a part of these efforts, the Department of Homeland Security is working to ensure that they can provide the services that State and local governments need to prevent future attacks and recover from any attacks that may take place. In order to help with these resiliency efforts, the Department has worked hard to create an information-sharing system that is multilayered and fairly resilient. In addition to off-site facilities that can house analysts and intel components, DHS has several information-sharing councils that they can use to share information. These councils and information-sharing mechanisms, however, are only as good as the resiliency of the communications backbone. DHS has worked to create an unclassified Homeland Security Information Network, called HSIN, that is available from any computer terminal, making HSIN available even when other Government facilities are not. For secure communications, DHS has also built communications resiliency through the Homeland Secure Data Network and secure voice communications. Additionally, intelligence and analysis communications will benefit immensely from the legacy systems deployed to the fusion centers across the country. Many fusion centers have Department of Defense networks and communication through FBI, ICE, CBP and the Coast Guard. Ironically, one of the many things that we hear complaints about multiple networks and information systems may actually be helpful in making sure that States and locals have effective communication channels in the wake of an attack. Finally, while threat information can help prevent terrorism, specific information on the composition of the threat when available can help manage the consequences of an attack. I look forward to hearing from our witnesses today on what else I&A has done to aid resiliency and what they may be able to better do before the next attack. I yield. Ms. Harman. I thank the Ranking Member. Other members of the subcommittee are reminded that, under the committee rules, opening statements may be submitted for the record. It is now time to welcome our witness. Our first witness, Dr. Stephen Flynn, is the Jeane J. Kirkpatrick senior fellow for national security studies at the Council on Foreign Relations, where we he directs an ongoing private-sector working group on homeland security. Dr. Flynn is a consulting professor at the Center of International Security and Cooperation at Stanford and a senior fellow at the Wharton School of Risk Management and Decision Processes Center at the University of Pennsylvania. From August 2000 to February 2001, Dr. Flynn served as the lead consultant to the U.S. Commission on National Security. He served in the White House Military Office during the George H. W. Bush administration and as director for the global issues on the National Security Council staff during the Clinton administration. He is the author of many books and someone I call when I want to understand this issue better. Our second witness, Amos Guiora, is professor of law at the S.J. Quinney College of Law at the University of Utah. Professor Guiora teaches criminal law, global perspectives on counterterrorism, religion and terrorism, and national security law. His publications include the published case book, ``Global Perspectives on Counterterrorism,'' as well as the forthcoming titles, ``Constitutional Limits on Coercive Interrogation'' and ``Terrorism Primer.'' Professor Guiora writes and lectures extensively on issues such as legal aspects of counterterrorism, global perspectives of counterterrorism, terror financing, international law, and morality in armed conflict. He served for 19 years in the Israel Defense Forces Judge Advocate General Corps, where he held a number of major senior command positions. Our third witness, R.P. Eddy, is a senior fellow for counterterrorism at the Manhattan Institute and the executive director for the Center for Policing Terrorism, CPT. He is also CEO of Ergo Advisors. Mr. Eddy has worked with the NYPD, LAPD, the Greek Government, the United Nations, and various multinational corporations on terrorism and security issues. He is founding member of the International Counterterrorism Academic Community. Previously, Mr. Eddy was senior policy officer to the U.N. Secretary General, as director the counterterrorism at the White House National Security Council, chief of staff to the U.S. Ambassador to the United Nations, Richard Holbrooke; senior advisor for intelligence and counterterrorism to the Secretary of Energy; and a U.S. representative to international negotiations, including the creation of the International Criminal Court. Obviously, we have people who know this subject inside and out. The subcommittee welcomes you. Without objection, your full statements will be inserted in the record, and I urge you to summarize your statements, each of you, to summarize your statements for 5 minutes. There is a little clock that will start beeping close to 5 minutes. In order to allow time for questions, I will try to cut you off. Finally, let my say in advance, we are expecting procedural votes on the floor this morning, so this hearing may have to be recessed a couple of times. Hopefully, if we are very efficient, we will be able to do this and then leave for votes. Dr. Flynn, you are the first witness. STATEMENT OF STEPHEN E. FLYNN, PH.D., JEANE J. KIRKPATRICK SENIOR FELLOW FOR NATIONAL SECURITY STUDIES, COUNCIL ON FOREIGN RELATIONS Mr. Flynn. Thank you very much. It is an honor to be before you today and the distinguished members of this subcommittee on this hearing, which I really commend your leadership for hosting. To some extent, I increasingly describe myself as a bit like a reformed, recovering alcoholic, as a reformed national security guy. Reformed in two ways: first, in having to come to grips with the inherent limits of the professional tools often available to national security professionals to deal with the threat that we must as a Nation deal with in this post-9/11 world; and, second, for underestimating the capacity of the American people to play an essential role in supporting that. I would argue that I, like many of the generation of folks who are now at the front lines in our national security apparatus, are creatures of a Cold War where essentially the security was in the hands of a few while we, as everyday citizens, went about our lives. Problems were managed beyond our shores, and they were managed with the tools that we have available and dominate in, in terms of what other nations have around the world. But I make the case in my written testimony, and it is one that I feel increasingly more passionate about, that really, with the benefit of hindsight, we missed one of the most important and, I would argue, critical lessons of September 11. Nine-eleven taught us not only that we have a determined adversary who is intent on exploiting vulnerabilities here at home to cause mass destruction and disruption, but also that the greatest asset we have as our Nation is the ``we, the people'' part. That story is really captured in, not the first three airplanes, but the fourth, United 93. United 93 was, of course, the plane that got off the ground late, and it was the one plane where the passengers on board got information that was critical for them to do something extremely important in time enough for them to act. They got that information not because it was shared with them via the U.S. Government, but they got it in the course of frenzied phone calls made to friends and loved ones in the heart of the emergency, where they found out something that, again, parts of our U.S. Government knew but the general public did not know, which is that we had an adversary out there intent on taking an airplane and turning it into a missile. Armed with that information, those passengers did something that was critical for this body, as well as for the other branch of Government just down the other end of Pennsylvania Avenue. Armed that with information, they charged the cockpit and kept that target--foiled al Qaeda from reaching its likely intended target, which was here in Washington. There is an enormous irony and, in a larger sense, I would argue, a quintessentially heroic part of the American narrative captured in what those passengers did. The people who are gathered in this town with the sworn obligation, as our Constitution requires, of providing for the common defense were, themselves, on September 11 defended by one thing alone: an alerted, brave, everyday citizenry. The Air Force did not know the plane had been taken hostage and was heading this way. There were no Federal air marshals aboard the plane. The only thing that kept it from reaching its intended target was the alerted, courageous, everyday Americans who were gathered in that plane. That should have been something we in Washington took as a very sober lesson with a healthy element of humility: that, in the end, managing a threat that increasingly will be in the civil and economic space cannot possibly be achieved without including as many of the people who occupy it as possible. Those will turn out to be everyday citizens, State and local officials, and private-sector leaders. We should have been working overtime in the immediate aftermath of September 11, empowering and informing and inspiring those very same players to be a part of the solution of managing the terrorist hazard. Unfortunately, we had a Cold War reflex, which was essentially to say the national security apparatus of this country must do whatever it takes, further empowered with new authorities and resources, to prevent and protect the American people from this ever happening again. Now, that is a potent tool, and I want to continue to use it. But the nature of this threat, again, as 9/11 should have taught us, is in a place which is more likely to be occupied by civilians than it is by our active-duty military, our spies or Federal law enforcement apparatus. What this screams to is the imperative that this hearing is holding, is a need to get information out to the people who are most likely to be the first preventers and the first responders, and engaging them in meaningful ways to deal with this hazard. What we have is enormous structural barriers, a culture that grew up in the Cold War that treats the American people as either potential victims or possibly, because they haven't been vetted, as part of the problem, but also the classification schemes and so forth that we have in place that make it difficult to get that information out to them. So I would be happy, of course, to address a lot of these issues and some of the recommendations I have here in my testimony during the questions. But I think what is fundamental here--and I hope this hearing can help to develop, and it is clearly something we will probably have to look toward in the next administration regardless of party--but is a change in course that really empowers and enables and inspires the American people to be a part of the solution and make sure that the Department of Homeland Security is able to provide them those tools. [The statement of Mr. Flynn follows:] prepared statement of stephen e. flynn May 15, 2008 Chairwoman Harman, Ranking Member Reichert, and distinguished members of the House Subcommittee on Intelligence, Information Sharing and Terrorism Risk Assessment, thank you for inviting me to provide an assessment of the current U.S. Government efforts to share intelligence and homeland security information with the American public. This issue has for too long received only cursory attention, and I commend your leadership for holding this important hearing today. As a stepping off point, it is my strongly held view that the single greatest lapse in leadership in response to the attacks of September 11, 2001 was the failure of the White House and Congress to look beyond the U.S. military and the national and homeland security agencies in formulating its response to the terrorist threat. As a result, it has neglected the Nation's greatest asset: the legacy of American grit, volunteerism, and ingenuity in the face of adversity. Instead, the Bush administration has sent a mixed message, declaring terrorism to be a clear and present danger while, at the same time, telling Americans to just go about their lives. Unlike during World War II when everyday people, industry leaders, and local and State officials were mobilized in a national effort, since 9/11, national security and homeland security officials have too often treated citizens as potential security risks to be held at arm's length or like helpless children in need of protection. Overwhelmingly, the national defense and Federal law enforcement community have chosen secrecy over openness when it comes to providing the general public with details about the nature of the terrorist threat and the actions required to mitigate and respond to that risk. Officials reflexively assert that candor would only ``provide ideas to the terrorist and spook the public.'' Not only is this instinct shortsighted and counterproductive, I would argue it ignores what should have been one of the central lessons from the 9/11 attacks. In retrospect, it is remarkable that Washington has done so little to enlist citizens and the private sector in addressing the vulnerability of the Nation to catastrophic terrorism. September 11 made clear two things. First, the targets of choice for current and future terrorists will be civilians and infrastructure. Second, safeguarding those targets can only be accomplished with an informed, inspired and mobilized public. The first preventers and the first responders are far more likely to be civilians and local officials, not soldiers or Federal law enforcement officers. The prevailing interpretation of September 11 focuses almost entirely on the three airliners that struck the World Trade Center towers and the Pentagon. President Bush concluded from those attacks that the U.S. Government needs to do whatever it takes to hunt down its enemies before they kill innocent civilians again. He has essentially said that this is a job that must be left to more fully empowered and resourced national security professionals. However, as I recently outlined in an article published in the March/April 2008 issue of Foreign Affairs, it is the story of United Airlines flight 93, the thwarted fourth plane which crashed 140 miles from its likely destination--the U.S. Capitol or the White House--that ought to have been the dominant 9/11 narrative. United 93 passengers foiled al Qaeda without any help from the U.S. Government. The North American Aerospace Defense Command (NORAD) could not intercept the flight. Officials did not even know that the plane had been hijacked. There were no Federal air marshals aboard. The passengers of United 93 mobilized to thwart their terrorist hijackers because they knew the hijackers' intention. United 93 was the last of the hijacked planes to get off the ground. Once the terrorists took control, they did not prevent passengers from making urgent calls to family and friends. These passengers found out something that their counterparts on the three earlier flights discovered only after it was too late to act: that the terrorists were on a suicide mission, intent on using the commandeered jet airline as a deadly missile. Armed with that information, the everyday Americans aboard United 93 did something very important: they charged the cockpit and prevented the plane from reaching its intended target. In the aftermath of September 11, Washington should have soberly embraced the implications of what was both an ironic and quintessentially American testament of national strength: that the legislative and executive centers of the U.S. Federal Government, whose constitutional duty is ``to provide for the common defense,'' were themselves defended that day by one thing alone: an alert and heroic citizenry. With regret, government officials should have acknowledged that the brave passengers aboard United 93 accomplished what they did without an advance warning of the threat, despite the fact that intelligence had been collected by the U.S. Government that terrorists were intent on using planes as missiles. That information had to be learned by way of frantic calls to family and friends during the height of the emergency. We will never know what might have happened aboard American Flight 11 or United Flight 175--the two planes flown into the World Trade Center towers in New York--if those passengers knew what their counterparts on United 93 were able to learn. But we do know that complying with the terrorist demand to remain quietly in their seat would have been an appropriate response for people who were relying for guidance on the pre-9/11 incidents of air hijackings. The pre-9/11 protocol was for passengers to do what they were told and leave it to professional negotiators or SWAT teams to deal with the captors after the plane landed. Had the U.S. Government been open about this risk, would the other plane passengers been more alert to the possibility that they were not involved in a conventional hijacking? Would they have decided to marshal a counterattack? Sadly, it never occurred to senior officials to share this critical information with the general public. Despite otherwise exemplary work, even the 9/11 Commission failed to discuss this issue in their final report. And, if anything, when it comes to developing responses to plausible threat scenarios, the instinct within the U.S. Department of Homeland Security and across the U.S. Government has been for officials embrace secrecy instead of openness. The discounting of the public can be traced to a culture of secrecy and paternalism that now pervades the national defense and Federal law enforcement communities. Though, in historical terms, this culture has relatively recent roots. From the founding of the American republic through World War II, everyday citizens were presumed to be willing and able to contribute to the Nation's security in times of war. It was only during the cold war that the general public was increasingly relegated to the sidelines. The immediacy, complexity, and lethality of the threat of nuclear weapons placed the fate of millions in the hands of a few. Combating Soviet espionage during this high-stake conflict resulted in an extensive classification system premised on sharing information only with well-vetted individuals who were assigned specific duties that provided them with ``a need to know.'' Despite the passage of nearly two decades since the fall of the Berlin Wall, this secretive system remains almost entirely intact. The sanctions for not protecting classified information from unlawful disclosure include arrest and imprisonment. Today we live in an era in which the most likely battlegrounds will lie outside the conventional military realm. Terrorists will increasingly target civilians and critical infrastructure which places a premium on creating open and inclusive processes that provide meaningful information about threats and vulnerabilities to the citizens and private sector leaders. These groups are the Nation's best positioned resources for devising and implementing plans for safeguarding likely targets, responding to attacks--as the United 93 story highlights--and recovering from them should prevention efforts fail. There is another vital imperative for placing greatest emphasis on information sharing: it is the key ingredient for building the kind of societal resilience that is essential to depriving al Qaeda and other terrorists of the fear dividend they hope to reap by attempting to carry out catastrophic attacks. In military terms, the United States is too large--and al Qaeda's capacity too limited--for an attack to cause damage that could weaken U.S. power in any meaningful way. What they can hope for is to spawn enough fear to spur Washington into overreacting in costly and self-destructive ways. Fear arises from the awareness of a threat coupled with a feeling powerless to deal with it. Although it is impossible to eliminate every threat that causes fear, Americans do have the power to manage fear as well as their reactions to it. However, for nearly 7 years, Washington has been sounding the alarm about weapons of mass destruction and radical jihadists while providing the American people with no meaningful guidance on how to deal with these threats or the consequences of a successful attack. This toxic mix of fear and helplessness jeopardizes U.S. security by increasing the risk that the U.S. Government will overreact in the event of another terrorist attack. What the Department of Homeland Security should be doing is arming Americans with greater confidence in their ability to prepare for and recover from terrorist strikes and disasters of all types. Bolstering confidence in our resilience will cap fear and in turn undermine much of the incentive our current and future adversaries have for incurring the costs and risks of targeting the U.S. homeland. The United States should be striving to develop the kind of resilience that the British displayed during World War II when V-1 bombs were raining down on London. Volunteers put the fires out, rescued the wounded from the rubble, and then went on with their lives until air-raid warnings were sounded again. More than a half century later, the United Kingdom showed its resilience once more after suicide bombers attacked the London Underground with the intent of crippling the city's public transportation system. That objective was foiled when resolute commuters showed up to board the trains the next morning. The approach the Department of Homeland Security should be pursuing is to gather and share as much threat, response, and recovery information as possible with private industry and State and local emergency responders. At the same time, it must place far greater emphasis on informing and engaging the American public. The key is to target the relevant audience with threat information that is matched with specific guidance on how to respond to the threat. To sounds alarms about the threat without providing people with details on what they should do only needlessly stokes anxiety. This is the fundamental problem with the color-coded national alert system. Undertaking this approach will require far more interaction with the private sector and civil society than the Department of Homeland Security can currently support. For instance, the private sector liaison office at DHS that has been capably led since its inception by Assistant Secretary Al Martinez-Fonts has only 15 civil service positions supported by seven contractors. The office responsible for Ready.Gov and the Citizen Corps is less than half that size. Citizen Corps has been funded at only $15 million per year, roughly what the United States is spending each and every hour in Iraq. The vast majority of contact the public has with the Department of Homeland Security arises from its interactions with its operational agencies like TSA, CBP, ICE, the U.S. Coast Guard, and the Secret Service. The law enforcement and security missions of these organizations have frequently translated into strained and even adversarial relationships with private industry and the general public. This is a formula that guarantees failure. When it comes to protecting the critical foundations that support our way of life and quality of life there are few law enforcement or security officials in government who have an intimate understanding of the design and operation of the complex infrastructure or who are capable of recognizing the real versus the perceived issues. Since Federal, State, and local agencies rarely work well together, if they are left to their own devices, the result is bound to be a mix of unacknowledged gaps and misguided or redundant requirements. The problem boils down to this: the design, ownership, and day-to- day operational knowledge of many of America's most essential systems rest almost exclusively with the private sector, both domestic and foreign. But the security of these systems throughout and following the cold war era has been handled almost exclusively by military, national security, and Federal law enforcement professionals. Government officials are unable to protect things about which they have only a peripheral understanding and over which they have limited jurisdiction, and the market, left on its own, is unlikely to provide the socially desired level of security and dependability. What is required is a truly collaborative approach which engages civil society and taps extensive private-sector capabilities and ingenuity for managing risk and coping with disasters. A critical barrier to advancing collaboration is excessive secrecy throughout the Federal Government reinforced by a reflexive tendency to classify material or to designate it as ``For Official Use Only'' or ``Treat as Classified.'' This instinct is enormously counterproductive since it holds the process of information system hostage to a completely overwhelmed and increasingly dysfunctional security clearance process. In order to successfully accomplish its core mission, the Department of Homeland Security should be taking the lead within the Federal Government in instituting controls to prevent the inappropriate classification of information and to work aggressively to declassify material so that vital information reaches the people who are best positioned to act on it. The Department of Homeland Security should be provided with a clear mandate for public outreach and 750 new positions to be deployed to major cities around the country and at its headquarters. Each morning these individuals should arrive at their office and respond to this question: ``Who needs homeland security-related information and how can I work to get it to them?'' DHS should be the chief Federal conduit for sharing intelligence and threat, response, and recovery information with the Nation. They should lead the charge of moving the intelligence community away from its cold war ``need-to-know'' paradigm and toward the essential ``need-to-share'' paradigm that today's threat imperative requires. Three tactical changes should be made immediately to help signal the overdue change in direction on information sharing. First, DHS should abandon the color-coded national alert system. Its fatal flaw is that it provides no meaningful guidance to the general public on what they should do. An alert system will never work at the national level. It must be tailored to regions, communities, and sectors where there is a known audience. Second, DHS should embrace the notion of ``resilience'' as a core strategic objective. Resilience is a concept that has the advantage of being an adult-like acknowledgment that disasters cannot always been prevented, but pragmatic measures can be taken to minimize the risk of occurrence and the consequences that can flow from them. In addition, resilience can only be achieved by an open and inclusive process that serves as a check on the secretive instincts of security professionals. Third, DHS must commit itself to making information sharing with local officials, the private sector, and the general public a two-way street with robust capabilities in place to support this. Only if DHS is committed to leading a team-effort will it achieve its mission. In the end, it is essential that the next administration revisit the excessive reliance President Bush has placed on the U.S. military and intelligence community for dealing with the dangers associated with terrorism. These capabilities were developed for a different adversary, in a different time during which a closed and secretive culture was justifiable. However, America's greatest asset has always been and remains the industry, inventiveness, and patriotism of its people. Actively engaging the public in the work of managing the hazards of our post-9/11 world must be the top priority for the next President and the U.S. Congress. Thank you and I look forward to responding to your questions. Ms. Harman. Thank you, Dr. Flynn. I think this subcommittee has been channeling your thoughts for quite a while. Mr. Guiora. STATEMENT OF AMOS N. GUIORA, PROFESSOR OF LAW, UNIVERSITY OF UTAH Mr. Guiora. Thank you very much. It is a pleasure and an honor to be here this morning. When I examined the issue that I have been asked to address this morning, I think that, in order to frame the issue, I think what we need to do is to establish the paradigm. To do so required defining terms, because I think without defining terms it is going to be very difficult for this subcommittee to go forward. So the question is, what is effectiveness? What is accountability? What is terrorism? What is counterterrorism? What is homeland security? What is this threat assessment that we are all talking about? Because without doing that, we can't really begin the process of discussing a private-public partnership in information-sharing. So I begin with what is terrorism. I think terrorism is obviously an attack against innocent civilians for the purpose of advancing a cause. There are a variety of causes out there. But when we talk, then, about counterterrorism, we need to understand that there are inherent limits on what counterterrorism is and what counterterrorism can do, meaning that when we talk about effectiveness in counterterrorism, the inherent understanding is that there are limits on power. How, then, does that play into what we are talking about here, information-sharing? Information-sharing must play itself out on two different levels simultaneously, not in a linear fashion. First, as you referred to in your opening statement, there must be information-sharing between local, State and Federal Government. Without that up and down, bottom-up and top-down, without that, it is going to be absolutely impossible for the first preventers to be involved and to understand what is happening. In addition to that, there must also be information-sharing between the public sector and the private sector. That obviously raises important constitutional legal questions in terms of how we are going to have a partnership between the two. But if we don't begin the process of having online, active information-sharing between the public and the private sector, I suggest that it will be all but impossible to truly develop a homeland security strategy. If we don't have a homeland security strategy, then all we are really doing is having a tactical response to an attack, rather than having a strategic preventive policy in place beforehand. I would suggest, then, Madam Chairwoman, there are three things that we need to talk about. No. 1 is clearly defined roles between the Government and the private sector. No. 2, in order to establish this coordinated preventive and response plan, we are going to have to articulate and institutionalize the information-sharing. No. 3, in order to most effectively implement that, I think it is going to be incumbent upon the Congress, maybe starting with this subcommittee, to develop simulation exercises that are scenario-based in which both the private sector and public sector can work together for the following purposes: No. 1, to develop a plan in advance of; and, No. 2, to develop a plan that would enable a response in the aftermath of. If we are going to talk about resilience, we also have to then define what is resilience and what are our reasonable expectations. Given the fact that I think it is going to be impossible to prevent all acts of terrorism, the question is, what are we going to try to do? What we are going to try to do, Madam Chairwoman, is to have a plan that enables us to minimize the loss, minimize the cost in the aftermath of the attack. Which also means that we have to be very honest with the American people, in terms of what are the reasonable expectations. Resilience, then, is a plan that must be implemented with reasonable expectations, also given the fact that there are limited resources. Ultimately, then, I would say, with respect to my opening statement, that it is going to require cooperation and coordination in information-sharing between the internal sectors and external sectors. I would just say, in conclusion, that the work that I have done with my students at the University of Utah, what we have really tried to do is to articulate the limits of power and how that then plays into the development of an effective resilience plan. Thank you. [The statement of Mr. Guiora follows:] Prepared Statement of Amos N. Guiora* --------------------------------------------------------------------------- * Professor of Law, S.J. Quinney College of Law, University of Utah. Publications include Global Perspectives on Counter-terrorism, casebook (Aspen); Constitutional Limits on Coercive Interrogation (OUP); Understanding Counterterrorism (Aspen, Fall 2008); and, general editor, Annual Review--Top Ten Global Security Law Review Articles, Vol. I (Oxford University Press, 2008). I would like to thank Tara Harrison, Pete Lattin, Rachel Otto, Rich Roberts, Evan Tea, Artemis Vamianakis, and Tasha Williams. --------------------------------------------------------------------------- May 15, 2008 i. introduction To ensure a resilient homeland in a post-9/11 society, the United States must have a homeland security strategy that (1) understands the threat, (2) effectively counters the threat while preserving American values, (3) establishes a system of accountability, and (4) creates public-private and Federal-State partnerships facilitating intelligence sharing and the continuity of society in the aftermath of an attack. It is necessary to work with clear definitions of the terms and concepts that frame this strategy. As I have previously articulated, ``one of the greatest hindrances to a cogent discussion of terrorism and counterterrorism has been that the terms lack clear, universal definitions.''\1\ For this reason, I will provide clear, concrete definitions of all key terms relevant to articulating strategy necessary for a resilient homeland. --------------------------------------------------------------------------- \1\ Amos N. Guiora, Global Perspectives on Counterterrorism (Aspen Publishers 2007) [hereinafter Guiora, Global Perspectives]. --------------------------------------------------------------------------- ii. understanding the threat A. Terrorism: Recommended Definition \2\ --------------------------------------------------------------------------- \2\ Id. at 5. --------------------------------------------------------------------------- I define terrorism as: ``Terrorism: Acts of politically based violence aimed at innocent civilians \3\ with the intent to cause physical harm, including death, and/or conducting psychological warfare against a population aimed at intimidating it from conducting its daily life in a normal fashion.'' --------------------------------------------------------------------------- \3\ [Sic]. --------------------------------------------------------------------------- I have chosen the definition above because it captures the core elements of terrorism in clear and concise language. In reviewing scholarship and terrorists' writings, the overwhelming impression is that causing harm (physical or psychological) to the innocent civilian population is the central characteristic of terrorist action. The available literature articulates that harming civilians is the most effective manner--from the terrorist mindset--to effectuate their goals. While causing death or injury to the innocent civilian population is the ``means to the end,'' I also suggest that intimidation of the population is of equal importance from the terrorist perspective. The emphasis--whether resulting in death, injury, property damage, or intimidation--is the attack, in whichever form, on the innocent civilian population. Accordingly, government must develop counterterrorism policies that protect the innocent civilian population. In addition, the importance of impacting ``daily life'' cannot--and should not--be underestimated. Terrorism is a daily grind; it must be understood in the context of daily attacks rather than one-time, dramatic-effect attacks (such as 9/11). Smaller, more frequent attacks, while perhaps less ``dramatic,'' have a much greater long-term effect on an innocent civilian population than does a one-time major event whose undeniable short-term effect may not linger. iii. effectively countering the threat while preserving american values A. Counterterrorism: Recommended Definition I define counterterrorism as: ``Counterterrorism: The term must be viewed with two prongs (separate, yet of equal importance): the actions of a state, proactive or reactive, intended to kill or injure terrorists and/or to cause serious significant damage to the terrorist's infrastructure \4\ and re-financing (financing) of socio- economic depressed regions of the world and educating communities regarding democracy and its values''. --------------------------------------------------------------------------- \4\ Guiora, Global Perspectives, supra note 1, at 139. --------------------------------------------------------------------------- Counterterrorism ``is a never-ending war of attrition conducted in baby steps comprised of some victories [and] some defeats.'' Defining counterterrorism is inextricably linked to the definitions and limits of terrorism. Counterterrorism must also be considered in the context of domestic balancing, international law, judicial activism, intelligence gathering, and interrogation of detainees. Furthermore, any useful definition of counterterrorism requires a recognition of critical attributes of operational counterterrorism-- ``actionable intelligence, operational capability, and an understanding that swift victory is, at best, a fiction.''\5\ Counterterrorism in civil democratic societies must also be ``conducted according to the rule of law and morality in armed conflict.''\6\ --------------------------------------------------------------------------- \5\ Id. \6\ Id. at 140. --------------------------------------------------------------------------- I propose that ``operational counterterrorism is effective if the terrorist infrastructure suffers serious damage, thereby preventing a particular, planned attack from going forth and postponing or impacting plans for future attacks.''\7\ It is important to note, that ``the damage is not permanent; terrorism cannot be defeated. However, the tactical impact of the measures above should not be minimized . . . [B]y attacking the terrorist--rather than the state sponsor--the effectiveness model described above is not strategic and therefore inherently limited.''\8\ --------------------------------------------------------------------------- \7\ Id. \8\ Id. --------------------------------------------------------------------------- B. Homeland Security: Recommended Definition I define Homeland Security as: ``Homeland Security: A group of preventative measures undertaken by a state in an attempt to reduce the probability that a terrorist attack will occur. This strategy will be fluid, constantly reassessing the balance between rights of the individual and rights of the state. A realistic strategy must prioritize threats according to their probability and imminence.'' Priorities must be established according to the limits, both ideologically and fiscally, that the American people will support. In examining government policy in the aftermath of 9/11 the lack of a concentrated and realistic focus is dramatically apparent. In seeking to address ``all'' possible threats, the policy was, in actuality, not a policy. Numerous State, Federal and municipal agencies must work together to ensure public safety in the United States. These include law enforcement agencies, the military and intelligence gathering and analysis realms, public health, and emergency response sectors, which coordinate activities with the community's utilities, infrastructure, transportation, police and fire personnel. Job security, education, and community values in the aftermath of an attack are critical components of homeland security. Executive branch documents name two particular areas the United States must be protected against in the context of homeland security: first, al-Qaeda, its affiliates (international and domestic), and those inspired by them; and catastrophic events, including natural disasters and man-made accidents.\9\ Scholars have suggested three priorities with respect to homeland security: border security, critical infrastructure protection, and intelligence analysis.\10\ --------------------------------------------------------------------------- \9\ Id. at 21. \10\ Paul Light & James Lindsay, Council on Foreign Relations, Views of Homeland Security (2002); http://www.cfr.org/publication/6395/ views_of_homeland_security.html. --------------------------------------------------------------------------- C. Effectiveness: Recommended Definition I define effectiveness as: ``Effective counterterrorism causes the terrorist infrastructure to suffer serious damage--including damage to finances, intelligence, resources, or personnel--thereby preventing a particular, planned attack from going forth and/or postponing or impacting plans for future attacks while minimizing collateral damage, exercising fiscal responsibility, and preserving civil liberties.'' This definition incorporates the following premises: (1) terrorism is not ``100 percent preventable''; (2) counterterrorism must have a short-term (tactical) as well as a long-term (strategic) component; and (3) counterterrorism must be conducted while balancing competing interests of human life, financial cost, and civil liberty. 1. Terrorism Is Not 100 Percent Preventable. Security analysts are wont to frame recommended counterterrorism measures in an effectiveness paradigm that demands ``fool proof'' safeguards. However, it must be clearly stated that terrorism is not 100 percent preventable. A successful terrorist attack does not mean existing counterterrorism measures are ineffective. The inverse is also true: the absence of terrorist attacks does not necessarily indicate existing counterterrorism measures are effective. 2. Counterterrorism Must Have a Short-Term as Well as a Long-Term Perspective. If a counterterrorism strategy only targets short-term threats, it will likely overlook other (long-term) real threats. It is important to note that terrorist organizations define effectiveness through the prism of ``long-term'' strategic considerations.\11\ To understand the terrorist mind-set, it is necessary to appreciate the determination, resilience, and single-mindedness with which terrorists work. Terrorists are willing to engage in a ``war of attrition'' with enormous personal hardship for the individual and his immediate family to achieve specific goals. Counterterrorism, both strategically and tactically, must be premised on this reality. Engaging in a never- ending cycle of violence is one means by which terrorist organizations signal to various audiences (the general public, followers, and the relevant government) their commitment to the cause. --------------------------------------------------------------------------- \11\ Guiora, Global Perspectives, supra note 1, at 14. --------------------------------------------------------------------------- 3. Counterterrorism Must Be Conducted in Balance With Competing Interests of Human Life, Financial Cost, and Civil Liberty. ``Finding a balance between national security and the rights of individuals is the most significant issue faced by liberal democratic nations developing a counterterrorism strategy. Without a balance between these two tensions, democratic societies lose the very ethos for which they fight. As Benjamin Franklin once said, `those who would give up essential liberty, to purchase a little temporary safety, deserve neither liberty nor safety.'\12\ Indeed, it is imperative for democracies to avoid infringing on political freedoms and civil liberties. Yet, a government's ultimate responsibility is protecting its citizens. This struggle to balance competing interests may be the most fundamental dilemma confronting democracies today.''\13\ --------------------------------------------------------------------------- \12\ Benjamin Franklin, Pennsylvania Assembly: Reply to the Governor, Nov. 11, 1755. The Papers of Benjamin Franklin, Leonard W. Labaree ed., vol. 6, p. 242 (1963). \13\ Guiora, Global Perspectives, supra note 1, at 19. --------------------------------------------------------------------------- iv. accountability A. Recommended Definition I define accountability as: ``Accountability: Articulating in a transparent manner the effectiveness or ineffectiveness of a particular counterterrorism measure or strategy to one's superiors who have the power to rectify or discontinue measures.'' The 9/11 Commission Report emphasizes in detail the need for standards of accountability in developing and implementing counterterrorism measures. The 9/11 Commission correctly stated that ``effective public policies . . . need concrete objectives.''\14\ That is, in the struggle against terrorism, ``agencies need to be able to measure success.''\15\ --------------------------------------------------------------------------- \14\ ``What to Do? A Global Strategy?'', The 9/11 Commission Report (364). \15\ Id. --------------------------------------------------------------------------- Without standards for accountability, Congress unwittingly creates an unfettered executive. ``An unfettered executive, unrestrained by courts and legislatures, is detrimental to liberal democracies attempting to balance national security and individual rights.''\16\ Furthermore, when neither the legislature nor the judiciary rein the executive in, the former is bound to make mistakes whereby more- effective alternative means are often overlooked. Particularly in the murkiness and uncertainty of drawn-out amorphous operational counterterrorism, the executive must know there are clear guidelines determining accountability. Counterterrorism requires both strict separation of powers and checks and balances. --------------------------------------------------------------------------- \16\ Guiora, Global Perspectives, supra note 1, at 75. --------------------------------------------------------------------------- v. resiliency A. Recommended Definition I define resiliency as: ``Resiliency: the capacity to prepare for, withstand, and endure terrorist attacks in order to assure continuity.'' B. Establishing Partnerships Post-9/11 and in the wake of Hurricane Katrina, one of the most important lessons learned by the United States was the dire consequences of the break-down in communications between governmental agencies amongst themselves and with the private sector. Ineffective communication directly led to hesitation, confusion, lost time, and ultimately lost property and lives. Effective cooperation and coordination between governmental agencies within, and among, the Federal, State, and local governments is essential to achieving a successful homeland security strategy. However, in order to realize resiliency, it is paramount that there is clear cooperation and coordination between the public sector and the private sector. The importance of the public-private initiative is outlined in the Department of Homeland Security's recent National Response Framework (``NRF''), which defines the roles and responsibilities of the government (Federal, State, local, and tribal) and the private sector (private business and/or NGO). As articulated in the NRF, ``Government agencies are responsible for protecting the lives and property of their citizens and promoting their well-being. However, the government does not, and cannot, work alone. In many facets of an incident, the government works with the private-sector groups as partners in emergency management.''\17\ --------------------------------------------------------------------------- \17\ National Response Framework (hereinafter ``NRF''), Department of Homeland Security, (January 2008) at 18, available at http:// www.fema.gov/pdf/emergency/nrf/nrf-core.pdf. --------------------------------------------------------------------------- The NRF outlines five critical roles played by the private sector during both disasters and terror attacks. First, privately owned critical infrastructures such as transportation, private utilities, financial institutions, and hospitals play a significant role in economic recovery from disaster and terror incidents.\18\ Second, ``owners and operators of certain regulated facilities or hazardous operation may be legally responsible for preparing for and preventing incidents from occurring and responding to an incident once it occurs.''\19\ Third, private business ``provide response resources during an incident--including specialized teams, essential service providers, equipment, and advanced technologies.''\20\ Fourth, private entities ``may serve as partners in local and State emergency preparedness and response organizations and activities.''\21\ Fifth, private entities play an important role ``as the key element of the national economy, private-sector resilience and continuity of operations planning, as well as recovery and restoration from an actual incident, represent essential homeland security activities.''\22\ --------------------------------------------------------------------------- \18\ Id. \19\ Id. at 19 (this legal responsibility is exemplified by the owners and operators of nuclear power plants obligated under Federal regulations to maintain emergency plans and conduct training for a response to such an incident). \20\ Id. \21\ Id. \22\ Id. --------------------------------------------------------------------------- A necessary component to establishing a resilient homeland, therefore, is a viable public-private sector partnership that is based on: (1) Defined roles and responsibilities; (2) articulating a coordinated prevention-response plan; and, (3) repeated training or simulation exercises using the prevention-response plan against realistic disaster/terror scenarios. 1. Defined Roles and Responsibilities In forging lasting partnerships between the public and private sectors, the private sector (private business and/or NGO) must define its role and responsibilities relative to the public sector on all government levels (local, State, and Federal). Agencies such as the New York Red Cross must work alongside FEMA and the NYPD in an effort to respond to a disaster or another terrorist attack. These partnerships must be created using individual liaisons to private and public entities predicated on clearly defined roles and responsibilities and open and frequent communication. 2. Articulating a Plan The private sector must work closely with the public sector to articulate, develop and implement a disaster/terror prevention prevention/response plan. Such a plan must implement the clearly defined roles and responsibilities outlined above. Additionally, a proposed plan need take into account multiple scenarios addressing prevention and response thereby ensuring that different entities are seeking to achieve similar goals. The plan will ensure that different organizations see the ``big picture'' and know their particular responsibilities within the larger framework. 3. Training and Simulation Fundamental to creating and maintaining the public-private sector initiative is consistent training and simulation exercises. Members of the private and public sector should conduct scenario-based, simulation exercises (together and separately) with respect to the proposed plan. These exercises must include realistic disaster scenarios subject to real-life time constraints testing the effectiveness with which both the private and public sectors respond to complicated and complex attacks and disasters. Such training and simulation will ensure that the public and private sectors understand--both theoretically and practically--the vital necessity of cooperation and coordination. Such scenario-based simulation exercises--in highlighting existing institutionalized and systemic weaknesses--most effectively facilitate the development of an effective homeland security strategy. C. Goals for Partnerships Public-private partnerships, if properly developed and implemented, are the key to economic recovery. Such a partnership--in the aftermath of a disaster or attack--facilitates the resilience of critical infrastructure including transportation, utilities, financial institutions, and hospital care. By strategically strengthening security, sharing intelligence, and creating plans for post-attack procedures (including evacuation plans, transportation plans, identifying places of refuge, and providing basic supplies to aid first-responders) such partnerships become the key to a secure and resilient homeland. 1. Prevention & Resiliency Through Intelligence Sharing The Department of Homeland Security (DHS) has provided excellent guidance regarding how to frame intelligence sharing between the public and private sectors. The importance of information before, during and after a disaster or attack is vital to resilience. Information sharing is, perhaps, the single most important aspect of successful resilience. Information sharing requires government agencies (Federal, State and local) to share information both amongst themselves and with the private sector. Furthermore, it requires that the private sector-- subject to existing legal and constitutional limits--share information with the public sector. Successful information sharing requires cooperation and coordination both internally (within sectors) and cross sectors (between public-private entities). The process must be institutionalized, requiring a fundamental re- articulation of homeland security strategy. While various public sector agencies are historically hesitant (predicated on policy, culture and legal restraints) to share information with other agencies--much less the private sector--the lessons of 9/11 and Katrina speak for themselves. Resilience in the aftermath of either disaster or attack requires Federal, State and local government agencies to understand that information sharing is vital to the Nation's homeland security. That information sharing process must include the private sector. Otherwise, the mistakes of yesterday will inevitably re-occur. To that end, DHS recommends that public and private agencies:\23\ --------------------------------------------------------------------------- \23\ Engaging the Private Sector to Promote Homeland Security: Law Enforcement-Private Security Partnerships: New Realities Law Enforcement in the Post-9/11 Era, U.S. Department of Justice Bureau of Justice Assistance, September 2005, at vi, available at http:// www.ncjrs.gov/pdffiles1/bja/210678.pdf. ---------------------------------------------------------------------------Prepare memorandums of understanding and formal coordination agreements describing mechanisms for exchanging information regarding vulnerabilities and risks; Use community policing initiatives, strategies, and tactics to identify suspicious activities related to terrorism; Establish a regional prevention information command center; and Coordinate the flow of information regarding infrastructure. In addition, the National Infrastructure Advisory Council published a report on private and public sector intelligence coordination and made the following recommendations:\24\ --------------------------------------------------------------------------- \24\ National Infrastructure Advisory Council Public Private Sector Intelligence Coordination Final Report and Recommendations by the Council, July 11, 2006, available at http://www.dhs.gov/xlibrary/ assets/niac/niac_icwgreport_july06.pdf. --------------------------------------------------------------------------- 1. Senior Executive Information Sharing.--Develop a voluntary executive-level information sharing process between critical infrastructure CEOs and senior intelligence officers. Begin with a pilot program of volunteer chief executives of one sector, with the goal of expanding to all sectors. 2. Best Practices for the Private Sector.--The U.S. Attorney General should publish a best practices guide for private sector employers to avoid being in conflict with the law. This guide should clarify legal issues surrounding the apparent conflict between privacy laws and counter terrorism laws involving employees. Moreover, it should clarify the limits of private sector cooperation with the IC. 3. Existing Mechanisms.--Leverage existing information- sharing mechanisms as clearinghouses for information to and from critical infrastructure owners and operators. This takes advantage of the realities that exist sector by sector. 4. National-Level Fusion Capability.--Establish or modify existing government entities to enable national- and State- level intelligence and information fusion capability focused on Critical Infrastructure Protection (CIP). 5. Staffing.--Create additional--Sector Specialist positions at the executive and operational levels as applicable in the IC. These specialists should be civil servants who have the ability to develop a deep understanding of their private sector partners. 6. Training.--Develop an ongoing training and career development program for sector specialists within intelligence agencies. 7. RFI Process.--Develop a formal, and objectively manageable, homeland security intelligence and information requirements process, including requests for information (RFIs). This should include specific, bi-directional processes tailored sector by sector. 8. Standardize SBU Markings and Restrictions.--The Federal Government should rationalize and standardize the use of SBU markings, especially ``For Official Use Only.'' 2. Providing Critical Infrastructure--Continuity Planning In order to play their essential role of re-establishing critical infrastructure after an attack, private entities must have continuity plans. These plans must take into account the known threats,\25\ which are only ``known'' through intelligence sharing between the public and private sectors, as discussed above. These plans must also take into account the components essential to re-establishing the service that the particular entity provides. These plans must provide details regarding how the particular entity will promptly resume service, which may differ depending on the form of attack. In addition, the plan must articulate how the entity will communicate with the public sector after an attack and what, if any, assistance the entity will surely or likely need from the public sector in order to promptly re-establish service. --------------------------------------------------------------------------- \25\ See Appendix A for a classification of ``known'' risks. For this discussion, all risks, including the imminent, foreseeable, long- range, and uncertain are considered ``known'' threats. --------------------------------------------------------------------------- The United Kingdom has enacted legislation requiring contingency plans. That legislation, the Civil Contingencies Act, requires certain private entities to ``maintain plans to ensure that they can continue to exercise their functions in the event of an emergency so far as is reasonably practicable.''\26\ Specifically, entities are required to makes arrangements to warn and inform the public, handle emergencies, and make provisions to ensure that the entity's ordinary functions can be continued to the extent necessary.\27\ To ensure effectiveness, the legislation also requires entities enact training programs for those directly involved in the execution of the continuity plan.\28\ To assist the entities, the legislation requires local authorities to provide advice and assistance to businesses and voluntary organizations in relation to business continuity.\29\ --------------------------------------------------------------------------- \26\ UK Resilience: Business Continuity, May 7, 2008, available at http://www.ukresilience.info/preparedness/businesscontinuity.aspx (last visited May 10, 2008). \27\ Id. \28\ Id. \29\ Id. --------------------------------------------------------------------------- New York City has taken a first step at creating similar legislation. New York City's Local Law 26 (2004) amended the existing administrative code in relation to building safety in the city.\30\ In particular, this new law requires owners of big buildings, in coordination with the FDNY, to prepare detailed plans, train staff members and conduct full evacuation drills of the entire building every 3 years.\31\ While evacuation plans are an essential first component of a contingency plan, they are not enough to establish even the hope for a resilient homeland. --------------------------------------------------------------------------- \30\ See Jim Dwyer. Evacuation Plans Due for High Rises in New York City, New York Times (August 5, 2004), available at http:// query.nytimes.com/gst/ fullpage.html?res=9B03E2DA153CF936A3575BC0A9629C8B63 (last visited April 11, 2008). \31\ Id. --------------------------------------------------------------------------- The following is a list of suggested measures that would most effectively facilitate resilience in the aftermath of a disaster or attack: Educate the private sector regarding the importance of continuity plans; Educate the public about the importance of continuity plans for the private sector; Offer expertise in the form of training to enable private entities to create continuity plans; Require oversight in exchange for the expertise; Pass legislation that puts the private sector on notice regarding the importance of continuity plans; Encourage States to pass legislation mandating continuity plans, to the extent a State has such power; Offer financial incentives, possibly tax incentives, to entities that establish continuity plans and continue updating those plans. vi. conclusion Not only the public sector, but also the private must contemplate resiliency must before a terrorist attack occurs. Sophisticated planning--based on scenario-based simulation exercises--will significantly contribute to creating a resilient homeland. The first step to making the homeland resilient to a terrorist attack requires defining terrorism, counterterrorism, effective counterterrorism and accountability. Terrorism poses a threat that cannot be eliminated. Nor can the government truthfully claim that it will prevent all terrorist attacks. While measures can be implemented to prevent attacks civil, democratic societies must recognize that at some terrorist attacks will succeed. In an effort to minimize both the chances of a particular attack and the consequences of a successful attack it is necessary to create public-private sector partnerships. Such partnerships must be based upon communication, mutual (subject to legal and constitutional limits) information sharing and defined roles. Such partnerships will facilitate the development of continuity plans seeking to ensure the restoration of infrastructure vital to the Nation. Resilience depends on such cooperation; information sharing between and among the public and private sectors is the essence of that relationship. Ms. Harman. Thank you very much, Mr. Guiora. Mr. Eddy. STATEMENT OF R.P. EDDY, EXECUTIVE DIRECTOR, CENTER FOR POLICING TERRORISM, THE MANHATTAN INSTITUTE FOR POLICY RESEARCH Mr. Eddy. Madam Chair, members of the committee, thank you very much for the opportunity to be speaking here. I fully agree with some of the statements made by the Chair that we learned many of the wrong lessons after 9/11. That morning, we all looked to the skies for the Air Force F-16s; we looked to Washington to protect us. The main thrust of Federal efforts since then certainly has been deployed overseas, funding the Intelligence Community and working with the FBI. But State and local police, when considered, were considered as first responders. They were funded to be, in effect, the clean- up crew to help remediate our communities after the terrorists launched a successful attack. This focus in funding on Federal forces and not local police, on international intelligence and not internal awareness, is wise only if our enemies are outside our borders and we can stop them before they get in. But the reality is much more complicated and much more dangerous, as this committee is well aware. Our next 9/11 is as likely to be from terrorists inside our borders as it is from terrorists outside our borders. Terrorism everywhere is increasingly homegrown. This committee has done much good work on that. Nearly every major attack since 9/11 around the world had a very strong homegrown component. There have been, as you know, well over 12 U.S. locales in which terrorist activities have been disrupted in the last 5 years. In each of these incidents, the perpetrators were not infiltrators. They were residents, they were citizens, they were the neighbors next door. They had all the necessary IDs and all the excuses. They didn't have to blend in; they already were in. Soon after 9/11, the NYPD realized they had to tackle prevention on their own. They asked me and the Manhattan Institute to build them a think tank to support them as they ramped up their counterterrorism operations. NYPD wasn't getting the Federal support necessary to detect and defeat terrorism then, and most police forces are not getting the information now. Since our start with the NYPD, the CPT, the Center for Policing Terrorism, Manhattan Institute, has expanded to become involved with other agencies, such as the LAPD and the New Jersey State Police. Our focus is to advocate to and enable core police departments to become first preventers and to adapt the practice of intelligence-led policing. I humbly suggest three categories of solution to the topic of today's hearing, in which you can build resiliency and improve our overall counterterrorism posture, while also strengthening capacity of State and local police against all hazards, the entire range of challenges that they face. First, support national counterterrorism academies. The CPT is proud to have partnered with LAPD, LA Sheriff's Department and others to launch the National Counterterrorism Academy just a few months ago. We already have more than 60 students from over 27 public agencies and private-sector companies throughout California and Nevada. The topics of instruction include precisely what I have described before--homegrown radicalization, method of interdicting terrorist finance, case studies of significant attacks--all of these taught by world-class instructors. Over the next year, the academy will expand its offerings, will seek additional funding to grow a bricks-and-mortar location, a virtual online academy, a digital library, and mobile training teams. Under LAPD's guidance and Chief Bratton's leadership, a small staff of professionals will develop the curricula, manage operations, and outsource the instruction to the best and the brightest. To fully fund 3 years of this academy, teaching hundreds of police and private leaders in the ``train the trainers'' model, injecting intelligence-led policing and first preventers practices into hundreds of departments will cost less than $4 million. DHS should fund NCTA and its East Coast counterpart in 2009. I skipped that part; I am sorry. We are building a sister academy in New Jersey, and we are going to build a regional structure in between. No. 2 suggestion is to support intelligence-led policing in the Foreign Liaison Officer Program. Looking at the intelligence picture throughout the homegrown threat, we need to shift our paradigm from believing that we have to simply solve for how to get intelligence and training from DHS or from the Federal family to State and locals, and instead we have to recognize that most of the intelligence relevant to State and locals is simply not being collected federally. There are not huge buckets of magic information and intelligence sitting in Federal SCIFs that will solve all the problems of big cities. In fact, there are three things we have to understand about this: First, a vast array of useful intelligence for counterterrorism and other crimes is already in our communities. Generally, homegrown terrorists live in the communities where they plot and are in the communities in which they are going to launch their attacks. Even most foreign-born plots have a very strong local dimension. Recall that two of the 9/11 hijackers were pulled over and released before the hijackings for speeding. No. 2, police are simply the best entity suited to collect this intelligence. Our hugely decentralized police force, over 17,000 police departments, ensures that police come from the communities, they have community access, and generally the community trusts them. Local entities also have broader legal allowances to investigate crimes and assess the risks in their communities. Then, of course, there are the numbers. We know there are 730,000 police in this Nation but perhaps less than 2,500 FBI agents focusing on domestic counterterrorism. No Federal entity has the exposure, the tools and the breadth to collect local information. Third, while police are best suited to collect this critical intelligence to prevent terrorism, they simply are not collecting it. That is to say, much of what we tend to think about intelligence-sharing, which is that we have to grease the skids downhill from the Federal Government to locals, isn't entirely correct. We also have to figure out how to enable the locals to collect on their own and how that information can work laterally. Intelligence-led policing is exactly that. At the strategic level, DHS should teach intelligence-led policing and push that out at the user level. They can do that through the fusion centers. Just as James Q. Wilson and George---- Ms. Harman. Could you summarize, please, Mr. Eddy? Mr. Eddy. I will. My final summary, I guess, based on resiliency--a resilient homeland is based on numerous layers of prevention and response, but it is important to realize we cannot begin to consider true resiliency until we know that the 730,000 local police are recruited to the cause. I also suggest that the Federal Government consider implementing the LA Police Department's Archangel program across the Nation to allow to you have a much more comprehensive and clear ability to assess vulnerabilities across the country in a clear fashion. Thank you very much. [The statement of Mr. Eddy follows:] Prepared Statement of R.P. Eddy May 15, 2008 Chairman, members of the committee, my sincere thanks for inviting me to speak with you today. Our Federal Government learned some of the wrong lessons from 9/11. That morning we all looked to the skies for the Air Force F-16's and we looked to Washington to protect us. The main thrust of Federal effort since then answered that call: troops were deployed overseas, funding for the CIA and NSA was greatly increased, and the FBI has begun to focus more on counterterrorism. But State and local police, when considered, were considered only as the ``first responders'' of terrorism. They were funded to be--in effect--the clean-up crew to remediate our communities after the terrorists launched a successful attack. This focus and funding--on Federal forces and not local police, on international intelligence and not internal awareness--is wise only if our enemies are outside our borders and we can stop them before they get in. But our reality is much more complicated, and much more dangerous. Our next 9/11 is as likely to be from terrorists already within our borders as is it to be from terrorists overseas who plot to penetrate our Nation. Terrorism everywhere is increasingly homegrown. The trend line is unmistakable: it runs from the 2002 Bali nightclub bombings, to the 2003 attacks in Casablanca and Istanbul, through the 2005 subway bombings in London and to the foiled plans to bomb jumbo-jets flying from London to the United States in 2006. But we need not look only overseas for examples of the local threat. Consider this partial list of U.S. locales in which terrorist activities have been disrupted in the last 5 years: Lackawanna, NY; Bly, OR; Lodi, CA; Torrance, CA; Iredell County, NC; Miami, FL; Toledo, OH; and Syracuse, NY. In each of these incidents, and in dozens of other smaller ones, the perpetrators were not infiltrators. They were residents, citizens, neighbors-next- door. They had all the necessary IDs and excuses. They didn't have to blend in; they were in. Of course we do still face a threat from international terrorists seeking to hit us at home, a la 9/11. In these instances as well, State and local law enforcement are the critical line of defense. Recall that two of the 9/11 hijackers were pulled over by local police on routine traffic stops and released. These terrorists lived in our towns, ate at our restaurants, and studied at our schools for many months. It is much more likely that the Nation's 730,000 local police officers--with years on the beat and connections with all aspects of the community--and not the perhaps 2,500 FBI agents dedicated to domestic counterterrorism, or other Federal forces, will have the situational awareness to identify and locate terrorists already in our midst. Soon after 9/11, the NYPD realized they had to tackle prevention on their own. They asked me and the Manhattan Institute to build them a small think-tank to support them as they ramped up their counterterrorism capabilities. NYPD wasn't getting the Federal support necessary to detect and defeat terrorists then, and most police forces still aren't now. Since our start with NYPD, The Center for Policing Terrorism at the Manhattan Institute for Policy Research (CPT) has expanded to become involved with other agencies such as the Los Angeles Police Department and the New Jersey State Police. CPT's focus is to advocate to and enable core police departments to become ``first preventers'' and to adopt the practice of ``intelligence led policing.'' CPT is supported entirely by private philanthropy. Our donors, who span the political spectrum, have enabled CPT to fill gaps in public funding, gaps that I believe should not exist. I hope to bring to you today an invested understanding of what needs to be done to prevent terrorism in our Nation. By invested I mean: my donors, my colleagues, and I have put our money where our collective mouth is. I am not an academic promoting theories or a contractor looking for support. I have the honor of representing a small group of dedicated citizens who have sought Federal leadership and Federal funding, and when we found both lacking we went and created the solutions on our own, with our own dollars. I humbly suggest three categories of solution--all with minimal budget impact--in which Congress can build resiliency and improve our overall counterterrorism posture, while also strengthening the capacity of our State and local police against the entire range of hazards. 1. support national counterterrorism academies CPT is proud to have partnered with LAPD to begin building the National Counter-Terrorism Academy (NCTA), funded by the Ahmanson Foundation and the State of California. NCTA already has 60 students from more than 27 public agencies and private sector companies throughout the States of California and Nevada. Topics of instruction include homegrown radicalization, methods for interdicting terrorism finance and case studies of significant terrorism plots presented by the investigators themselves.\1\ --------------------------------------------------------------------------- \1\ Manhattan Institute, Manhattan Institute and LAPD Unveil Counter-Terrorism Academy for State and Local Cops, Press Release, March 10, 2008. --------------------------------------------------------------------------- Over the next year, the Academy will expand its course offerings, seek additional funding and grow to eventually include four components: a bricks-and-mortar location in Los Angeles; a virtual, or online, academy; a digital library; and mobile academic teams. Under the LAPD's guidance and Chief Bratton's leadership, a small staff of professionals will develop curricula, manage operations and outsource the instruction to the best and brightest. The Academy will augment and serve as a focal point for existing Federal training programs and strengthen the intellectual body of homeland security knowledge by adding the critical perspective of local agencies. The training will be tailored to the needs of the up-and- coming leaders in State and local agencies and their counterparts in the public safety and private security fields. NCTA does not compete with existing institutions like FLETC. Rather it offers a first-rate, dedicated option for police leaders to become evangelists and trainers of first prevention and intelligence-led policing doctrine. In just a few months of operation, NCTA has already proven to be such a success that we are eager to expand the model across the Nation. CPT is already underway in discussions to partner with the New Jersey State Police to build a sister academy on the East Coast. We are happy to note that the Bureau of Justice Assistance was heavily represented in these discussions. This academy will scale from the LA academy and draw on the same virtual library, training teams, and other key assets of the NCTA. Though the NCTA academy is teaching nearly 30 public agencies the skills they need to prevent and respond to terrorism, as well as many other hazards, proposals for modest levels of Federal funding have not been accepted. To fully fund 3 full years of NCTA operation, teaching hundreds of police and private leaders in a train-the-trainers model, injecting intelligence-led policing and first preventers practices into hundreds of departments, and establishing the premier online library of written materials and videotaped lectures available to police across the nations will cost less than $4,000,000. DHS should fund NCTA and its East Coast counterpart in 2009. 2. support intelligence-led policing and foreign liaison officers Looking at the intelligence picture through the reality of the homegrown threat, we need to shift our paradigm from believing we have to solve for simply how to get intel and training from DHS (or other Federal entities) to State and locals, and instead recognize most of the intelligence relevant to State and locals simply is not being collected federally. There are not huge buckets full of magic intelligence sitting in Federal SCIFS that will solve all the puzzles of big city police. It has become a well-worn criticism that there is very little tasking in Federal collection toward things useful to State and locals, and that the sharing of what does exist is pitiful. While Federal organization, tasking and sharing certainly needs to be fixed, we also must learn three simple things: 1. A vast array of useful intelligence for CT and many other crimes is in our communities. Generally homegrown threats will only be detected in the communities where they are plotted and to be launched, but even most foreign-borne plots will demand that terrorists spend real time attempting to integrate into the fabric of our communities. This is intelligence that will come from close connections with the communities and the establishment of situational awareness in the way only our hometown police can do. 2. Police are simply the best entity suited to collect this intelligence. Our hugely decentralize police system (the United States has over 17,000 police departments) ensures police come from the communities, they have the community access and generally the community trust to find this information. Local entities also generally have broader legal allowances to investigate crimes and assess risk in their communities. Then there are the numbers: there are, of course, 730,000 police in this nation but perhaps less than 2,500 FBI agents focusing on domestic counterterrorism.\2\ No Federal entity has the exposure, the insight, the tools, let alone the breadth to collect local threat information. --------------------------------------------------------------------------- \2\ Federal Law Enforcement Statistics, U.S. Department of Justice, Office of Justice Programs Bureau of Justice Statistics. Available at http://www.ojp.usdoj.gov/bjs/lawenf.htm [accessed 5/9/2008]. --------------------------------------------------------------------------- 3. But, while Police are best suited to collect this critical intelligence, most simply are not collecting. That is to say, we miss much of the need (versus the homegrown terror threat at least) when we think we simply need to grease the skids of information downhill. It is as critical for DHS to help police collect the intelligence that exists in their communities as it is for DHS to share intelligence with police. After the success of community-led policing and COMPSTAT, the next major innovation in policing is upon us. Intelligence-led policing is the ultimate addition of strategy to counterterrorism and fighting crime. It is conceptually simple: police departments should create intelligence opportunities and use the outcomes to direct their limited resources. A tiny number of U.S. police departments have intelligence capacities; the vast majority does not. Though we need to be mindful of the past abuses by some police departments in the 1960's, today's police departments are vastly different organizations, and intelligence gathering must be integrated into police work, and not just for counterterrorism. ILP can be applied to virtually every public safety challenge police face. Having a firm understanding of a challenge, in real time, improves decisionmaking and produces better results. Resiliency begins with the way we think about problems and deal with mental adversity. Enhancing local intelligence capabilities will allow us to achieve exactly that. Fusion centers hold tremendous promise. Though they exist in every State, many lack real strategy on how to share intelligence across, up and down. Fusion centers also offer a perfect vessel to push the necessity and tactics of Intelligence-led policing to their client police departments, but again many are not resourced to do so. At the strategic level DHS should begin to preach the value of intelligence-led policing, and at the user level, institute a pilot plan via the fusion centers to teach intelligence-led policing to local police departments. Intelligence-led policing and First Preventers doctrine transforms police departments into proactive counterterrorism agencies. Not only will they continue to thwart dozens of terrorist incidents, this posture will deter untold potential homegrown terrorists as it will create a hostile environment for violent extremists. Much as the Broken Windows theory created by George Kelling and James Q. Wilson and implemented by Chief Bratton revolutionized crime fighting, so too will these tools revolutionize the Nation's fight against terrorists. Although controversial for the FBI and State, police should take intelligence collection to the international level. NYPD's international liaison program is a well-known success. The NYPD officers stationed with foreign counterparts in major overseas metropolitan police departments have built NYPD's knowledge networks and best practices \3\ immensely. These relationships inform NYPD's thinking not only on counterterrorism, but also on fighting crime and other hazards. --------------------------------------------------------------------------- \3\ Kelling, George L., and Bratton, William J. Policing Terrorism. Civic Bulletin, No. 43, September 2006, page 6. --------------------------------------------------------------------------- We were very pleased to see this committee propose the concept of a Foreign Liaison Officers Against Terrorism (FLOAT) Program as part of the LEAPS legislation. Since 2003, we have proposed a program much like FLOAT, in which 5-10 major city police departments would each assign one officer overseas to liaison relationships with foreign police departments. Ideally each city would send an experienced officer to an area they know well. LA could send an officer of Indonesian heritage to Jakarta, Miami could send a Colombian-American to Bogota, Detroit could send an Arab-American to Cairo, etc. These officers would embed with the local police to collect information on counterterrorism. The regular reporting from the liaison officers would then be pooled to the intelligence apparatus of all participating police departments, and others. I won't get into a detailed defense here of why police need their own international liaison relationships, but suffice it to say, the current reporting back from FBI and State generally does not make it to police. When it does, it is obvious these departments are curious about very different lessons and learnings than the locals. Instead of being seen as adversarial, Federal agencies should see the police liaison presence as a complement to Federal activities which can also provide real-time threat reporting to their local agencies.\4\ --------------------------------------------------------------------------- \4\ LEAP Proposal, page 10. --------------------------------------------------------------------------- As this initiative has not made progress at the Federal level, CPT leadership is endeavoring to launch a FLOAT program funded by the local police and donor dollars. Presuming the police departments will continue to pay the salary and benefits of the officers, we estimate the cost for housing and travel and other incidentals to be less than $100,000 per year per officer. We will also arrange to create and house the fusion hub that will task, collect and distribute the liaison reports. NCTA, discussed above, is an obvious home to serve as the hub to disseminate FLOAT reports throughout the police community. Again, there is an obvious Federal role here and we urge the committee to fund international police liaisons. 3. support strategic resource allocation Local police agencies are the most knowledgeable resource when it comes to their own critical assets. While many States and localities have done impressive work understanding and cataloguing critical assets and key resources in their jurisdictions, there is a stark lack of uniformity in terms, methodologies and fundamental approaches. We believe that this ultimately hinders the ability of national level decisionmakers to make risk-based resource allocation decisions, since there is not a baseline for comparing assets across jurisdictions. We believe that a common approach for evaluating critical infrastructure should be mandated on State and local agencies. There is good news here. The LAPD, in partnership with DHS has developed Operation Archangel, a robust methodology and information technology system for evaluating and protecting critical infrastructure. Archangel was created to utilize cooperation and coordination across departments as well as public and private sectors to facilitate the strategic application and management of information and resources to prevent, deter, mitigate, and respond to an attack.\5\ It is well thought-out and vetted and could be easily and cheaply incorporated around the country. --------------------------------------------------------------------------- \5\ Los Angeles Police Department, Operation Archangel. http:// www.lapdonline.org/emergency_services_division/content_basic_view/33044 [accessed 4/7/2008]. --------------------------------------------------------------------------- Resiliency Comes From First Preventers and Intelligence-led Policing The focus of your hearing today, a resilient homeland--cities and towns that can return to stability after a disaster--relies on numerous layers of prevention and response preparation. But it is important to realize that we cannot begin to consider true resiliency until we know the 730,000 local police are recruited to the cause. When CPT goes to police leadership across the nations to help them build prevention capacities, we find many police departments to be nearly tabula rasa when it comes to counterterrorism. This is not to say they are not eager to be involved with CT, rather most police departments--particularly in major cities--are already very overburdened and under-resourced. If they don't see a clear and present terrorism danger to their city, it is hard to convince elected officials or their staff to shift their limited resources from fighting crime to counterterrorism. But we have had success and can be successful elsewhere for two reasons: 1. Police leaders quickly realize that the ``First Preventers'' curricula and intelligence-led policing helps police and their local partners not just with CT, but against ``all hazards,'' and 2. These concepts resonate with the highly successful proactive policing models such as COMPSTAT of the 1990's. Most agree the Londoners were resilient to the 7/7 subway bombings because of the long English history with terrorism and even cultural memories of WWII. We should not presume to think we can change American mindsets, but a process of empowerment and knowledge-sharing is, of course, key to reducing panic in the event of an attack. Local police departments are not just the crux of public safety in over 17,000 communities, but they are also the public servants most integrated with the populace. By offering police insights and the ability to proactively understand and pre-empt terrorism, we are in fact injecting this confidence into our communities. I would counsel that while we work hard to adopt the goals of resiliency into nearly everything related to counterterrorism, we also realize that sometimes resiliency will not be an option. Some attack scenarios, including some we judge as highly likely in the medium term, are so horrific that the only real strategic alternative is prevention. I close by noting that I propose these initiatives not as a theoretician, but as a representative of a group of citizens that have since soon after 9/11 found aspects of Federal leadership in domestic counterterrorism lacking so have been funding and enacting, on our own, solutions to support our best hope for a secure homeland: our local police. Appendix.--Los Angeles Police Department News Release lapd starts its national counter-terrorism academy March 10, 2008, Los Angeles, California. Mayor Antonio Villaraigosa and Police Chief William Bratton jointly announced the model for what is expected become a National Counter- Terrorism Academy (NCTA) for State and local law enforcement--the first of its kind in the country created by local law enforcement and its private partners. ``Police officers are out in the communities every day, gathering critical information and fighting crime. With the proper training, we can apply the skills we already have to the fight against terrorism as well,'' said Chief Bratton. ``This academy will offer standardized, counter-terrorism training that teaches us how to apply the crime- fighting and information-gathering strengths we already have to the issue of terrorism.'' The pilot program for the Academy, which starts today and runs through July 30, will bring world-class counter-terrorism training to nearly 70 students from more than 27 public agencies and private sector companies throughout the State of California and Nevada. Topics of instruction include homegrown radicalization, methods for interdicting terrorism finance and case studies of significant terrorism plots presented by the investigators themselves. The pilot program is a public-private partnership between the LAPD and the Center for Policing Terrorism at the Manhattan Institute, a think tank with a long history of confronting the most challenging public policy issues. ``The Manhattan Institute welcomes the opportunity to contribute to a curriculum that will expose law enforcement and other public safety professionals to imaginative thinking about the links between common crime and political violence, and to do so without losing sight of constitutional rights and civil liberties,'' said Howard Husock, the institute's vice president for policy research. The pilot program was funded primarily by the Ahmanson Foundation. The State of California has provided additional funding for the further development of the academy. Over the next year, the Academy will expand its course offerings, seek additional funding and grow to eventually include four components: a bricks-and-mortar location in Los Angeles; a virtual, or online, academy; a digital library; and mobile academic teams. Under the LAPD's guidance and Chief Bratton's leadership, a small staff of professionals will develop curricula, manage operations and outsource the instruction to the best and brightest. The Academy will augment and serve as a focal point for existing Federal training programs and strengthen the intellectual body of homeland security knowledge by adding the critical perspective of local agencies. The training will be tailored to the needs of the up and coming leaders in State and local agencies and their counterparts in the public safety and private security fields. Background In the wake of 9/11, America's roughly 700,000 State, local and tribal law enforcers stand to play a critical role in homeland security as ``First Preventers'' of terrorism and other crimes. Despite this potential, there is no training academy where officers can receive basic homeland security education based on a standardized curriculum specifically tailored to their needs. The Los Angeles Police Department, under the leadership of Chief Bratton, proposes the creation of a national academy in Los Angeles that will fill that void while serving as a vehicle to promote and teach the philosophy of Intelligence-Led Policing--a policing model in which operations are guided by intelligence gathering and analysis rather than the other way around. If you have any questions, please contact Media Relations Section. Ms. Harman. Thank you very much. I think all of the testimony was right on point and excellent. We have a large member turnout, so I am going to be sure that my own questions are limited strictly, including the answers, to 5 minutes. I have two questions. I will ask them both at once and ask you all to comment, or whoever would like to. First, Mr. Guiora was trying to define the term ``resilience,'' and he included things, at least the way I wrote them down, like preparation, participation, managing expectations. I want to ask--because, in your case specifically, you spent many years at the IDF in Israel--whether there isn't also a cultural or experiential dimension to this. Israelis have been the test bed for terrorism for 60 years or maybe, depending on which bible you read, 60 millennia. But, at any rate, after terrorist attacks, within a matter of hours, the attack site is cleaned up, the yellow police tape is gone, and people go back to business. That is a hugely impressive act. It doesn't happen in America. So I just want to ask if there is another dimension to this. My second question is to pick up on what Dr. Flynn said about overclassification. I wonder--and the reason I am asking this is because our subcommittee is readying legislation on this subject. But I wonder if overclassification is one of the main stumbling blocks to sharing information? So let me ask you to respond in any order, and I am watching the clock. Mr. Guiora. I will begin with the question about the Israeli response to acts of terrorism. You are absolutely right. We have been, in a sense, if you will, conditioned on how to respond. The Israeli version of the Department of Homeland Security, the Home Front Command, there is a response, there is a prepared, institutionalized response, which the public is a critical aspect of that. That is correct. That being said, I think in terms of the subcommittee and the Homeland Security Committee, there is no reason that this process of institutionalizing a response can't begin here in the United States. I would say that 9/11 is a very unusual kind of terror attack. It is not the daily fabric of terrorism. I think that in order to have a more effective public response, what we have to do is to begin, maybe through you, to educate the people on how to respond in the case of an act of terrorism, which goes exactly what to resiliency is. I think the most important aspect of all this is to institutionalize both the preparation and the response, rather than to have it at a tactical level and thereby to develop a more strategic response. That, I think, in terms of, God forbid, there be another terrorist attack in the United States, that would lead to more effective prevention, and maybe more importantly, a more effective response too. But it is all about institutionalizing and educating the public. Ms. Harman. Thank you. Dr. Flynn. Mr. Flynn. Well, one key component of resilience you captured very well, Chairwoman Harman, in your opening statement, which was about making terror less terrifying. Really, at its heart, fear, which is of course the main ingredient of terror, is really two things. It is, first, an awareness of threat of vulnerability. So what a terrorist does, if they take us by surprise, is they take things we would think are benign and we didn't pay much attention to and suddenly see them as vulnerable or see them as they pose a threat. The second component, the most critical one, is a sense of powerlessness with dealing with that threat of vulnerability. I would argue, therefore, the Nation is more at risk today than we were on September 11 for being terrified, because we get a lot from Washington about our sense of threat and vulnerability, and because we have failed to give the American people and the people they turn to first, the first responders and first preventers, the tools they need to manage and respond and recover from these. Now, we say a child is fearless when they don't know putting a hand on the stove is going to hurt. But what we do is we give them information, and ultimately that vulnerability is there, but we work our way through it. In the same way, while getting information is so important to the American people, is it bounds the fear and it gives us confidence to bounce back, which is very much a part of the American tradition. It is in our DNA to be resilient as a people. Specifically, on the classification issue, there is just no question that the system is broken, fundamentally broken. The clearance process is completely overwhelmed. Because things get routinely overclassified, they can't get to the people who need it. There are horror stories of locals who present information to the Federal Government, who classifies it, and then they are told they can't share it with their own chiefs, never mind anybody else, because those locals don't have the clearances to share it. As soon as you are in the process, you are in a morass that makes information-sharing impossible. We are not dealing with Soviet espionage here. We are dealing in a case where, as the DNI has said, we need to be more geared toward the need-to-share than the need-to-know. The rules, the entire structure, is still built on the need-to- know. Until that changes, which is just the work that this subcommittee needs to do and the administration should have done, we are basically digging ourselves into a deeper hole. Ms. Harman. Thank you. Mr. Eddy, I couldn't get to you under my strict rules, but I am sure you will have an opportunity to address these questions and others as others ask you questions. The ranking member is now recognized for 5 minutes. Let me add that I will recognize people who came before the gavel in the order that you would expect. Those who came afterwards will be recognized in the order that they arrived. Mr. Reichert. Mr. Reichert. I thank you, Madam Chair. I want to first, again, thank you for being here. Remembering that this week is National Police Week, and today we are watching thousands of our local police officers visiting Washington, DC, to remember their brothers and sisters who have fallen in defending freedom here in the United States of America. I spent 33 years in law enforcement before I came here. I liken your description of cultural change to a change from the 1970s patrol mentality that we had when I was in a patrol car-- with dark brown hair, by the way, a long time ago--where today we have community policing. A philosophical cultural change had to take place to include the community. It was a very difficult thing to do. So I want to touch on the cultural issues that the Chair has touched on, more in the way of how you overcome those. I think there are two ways. No. 1 certainly is the personal relationship, and then, No. 2, there has to be a commitment. Sometimes a commitment is attached to money. So I hear a lot from my sheriff's friends, my police chief friends across the Nation regarding recent efforts to cut some of the monies going to local law enforcement in their efforts to be a part of the fusion center. FTEs, for example, are a very important asset to any police department, but the smaller you get, the more important that asset becomes. But it doesn't mean that you are not involved in the homeland security effort, one way or another. I have heard the horror stories, too. I am aware of the barriers and those things that prevent us from sharing information. I am excited to hear that you have all recognized the barriers. What do we do about the cultural change at a national level? Then, also, your opinions on, if we are to spend more money, which I believe we must, in aiding our local officials, what do you spend it on? Mr. Eddy. I appreciate that very thoughtful question. Let me give you my brief thoughts on it and see if there is some time for my fellow panelists here. I would suggest that, first of all, the police are the most present and woven aspect of government in our local communities, so they can be the beginning of resiliency. Having them be trained and aware will allow to you have a more resilient and robust community. Community policing obviously helps with that. The next evolution since community policing, of course, has been COMPSTAT and, we think, intelligence-led policing. That is where the Federal Government can be of huge asset to the local police. The need for FTEs, the need for analysts, the need for folks who learn intelligence and that can inject that into policing not only will make police better for counterterrorism, it will make them better against all hazards. The proof is irrefutable, and the cost is minimal. So it is a way to increase highly leveraged dollars, increased police efficiency, by getting in and helping them with intelligence programs. These fusion centers are a great way to get there, is a quick answer. Mr. Guiora. I think that what is going to be very critical, in terms of responding to your question, is to institutionalize changing the emphasis of how the police are going about their work, I think from a law enforcement paradigm to a counterterrorism paradigm. Particularly, if we think about homegrown terrorism, that raises, obviously, again, important constitutional legal questions. But I think that in my meetings with police around the country, it is clear that this change in focus is going to be critical, which ties in directly, going back to your question, Madam Chairwoman, about how we go about educating the public. Because I think the police and the public are going to have to work very closely together in changing a cultural focus and institutionalizing that. That will, I think, also require reallocation of resources. I think in terms of how we go forward, we are going to have to be very honest with the public that terrorism is out there; it is a constant threat. No, we cannot prevent every act of terrorism. It is impossible to do that. What are the limits in terms of how we go about preventing acts of terrorism, protecting ourselves? But it really is going to require also institutionalizing the educational process with respect to the public. Mr. Flynn. The only thing I would add, perhaps, just reinforce, in the experience as a retired Coast Guard officer, cops talk to cops; they don't talk to bureaucracies. So the things that are most important are finding ways in which we enhance those relationships by creating the kind of training academy that R.P. Eddy was talking about, broaden those out, and finding mechanisms, fusion centers and so forth, where people do come together. But the education can really be the multiplier in creating those settings. I just had the opportunity to go to the National Fire Academy. They had their 20th anniversary. Every year they have a reunion of all the graduates of that institution, over 200 fire chiefs were there. That relationship, you could tell, is as thick as blood. It is across the country, and they come voluntarily on their own dime to those reunions. So those things are not hugely expensive, but facilitating it--but, most important, I think, is a sense of it is not a caste system, where the Feds and the national security apparatus, that is real place where we put our money and resources, and the locals, well, get to this when you get to it. We are structured, basically, where most locals are sending one or two officers, perhaps, off to a joint terrorism task force, checking that box, and going about the daily policing. We are not figuring out how we integrate the counterterrorism mission into the course of normal police work, and recognizing that is where ultimately we are going to get our biggest bang for the buck. Ms. Harman. Thank you very much. Mr. Dicks is recognized for 5 minutes. Mr. Dicks. Let me follow up on that. What is the best way to do that? How do we work with the local police in order to do that? I mean, I remember the story we had out in Los Angeles where there was a group people that had come out of the prison system, and they got arrested on I think it was a crime, a robbery of some sort. Then they found out, when they went to their homes to arrest them, they found out that--they had been sensitized to look for this other kind of information. They found this stuff that looked like, you know, something that a terrorist might by doing, and, therefore, they discovered that this was, in fact, a terrorist ring. So, I mean, who should do this? Should the Department of Homeland Security work with the police departments or through the fusion centers? How do you start the educational process? I like your academy idea. I think that is a good one. Mr. Eddy. I will answer that briefly, Congressman Dicks. Right now, as far as I can tell, working with a number of police departments, they are entirely puzzled as to the answer to that question. They don't know to whom they should turn to try and get information. Whereas 2, 3, 4 years ago, the Federal Government apparently couldn't really care less about working with the police, now it appears there is some sort of rush to be the one who does this. So what is clear and necessary is that this Congress figure out what those lines of authority are. I think the President recently waived something so that DHS lost part of their role to the DCI to be an intelligence fusion capacity for State and locals. I could certainly be confused about that. But I think that---- Mr. Dicks. Say that again. What happened? Mr. Eddy. My understanding is that, via presidential waiver, the DCI, within the DCI, I think within the NCTC, they are now taking on part of the role to share information with State and locals, a role that presumably could have been better filled at some point by DHS or by FBI. Although, I would say that whoever will share that information and whoever will take the initiative should be the ones to do it. Most critical to realize, though, is it is not just about getting the information pushed down to the State and locals. It is about enabling the State and locals to collect it on their own, in a constitutional manner. Right now they don't have the capacity to do so, because they don't have the time or the skills or the money to do it. So I would suggest the NCTCA academy that we proposed and we have already launched in L.A. become a Federal model. It is a fantastic, high-leverage way to teach police how to get involved with intelligence and intelligence-led policing. I would suggest the foreign liaison---- Mr. Dicks. So they go to the academy and they come back and then they educate the rest of the police force. Mr. Eddy. Exactly. They go once every 2 weeks for 2 hours to get trained by world-class professionals to begin thinking about first preventers. That only works if you have an intelligence capacity bringing analysis in. So you have to have analysts in the Department or in the fusion center looking at international attacks, looking at domestic threats, and bringing that intelligence in and saying, listen--the Lodi case, to which you referred, is a perfect example of what I am describing. Those police were sensitized via our program and the work by John Miller and Chief Bratton to look for things that are suspicious and ask the next question, and that ended what could have been a horrific series of attacks. We need more success stories like that. Mr. Flynn. If I might add just one very brief illustration of doing this right but the barriers that you run into--the NYPD, shortly after the 7/7 attack in London in 2005, that they had a foreign liaison law enforcement official there, but they came back with photos of the Leeds apartment, which was a long ways from London, where the suicide packs were made up. They took two trailers, and they recreated that apartment with everything basically as it was in that apartment. They ran virtually every NYPD patrolman through those trailers and said, ``If you see this when you are out in the domestic, if you see this when you are dealing with a burglary, it is not a meth lab or kitchen chemistry. This is what is going on here.'' Now, that could be made available to folks at Newark, which is just across the river, or elsewhere, but there are no training resources or other things for that occur. NYPD doesn't have a budget to train the rest of the law enforcement. So there are a lot of self-help ways where this can happen as a cross-fertilization, but this has not been seen as a priority to support at the national level, at the Federal level. Mr. Guiora. If I could just add one comment to that, I think, Congressman Dicks, to answer your question, it is going to require articulating, not rearticulating, but articulating the counterterrorism paradigm in terms of homegrown terrorism. I don't think we have really begun doing that. It makes people very uncomfortable. I think it is going to require doing that. I think in terms of the police, State and then moving up to the Federal Government, up and down in terms of this interaction, it is going to require, for instance, as I said earlier, having scenario-based simulation exercises where the local police are working with State government and Federal Government, in trying to get to the essence of your question-- -- Mr. Dicks. Well, I have 14 seconds left. To me, that is the way to do this, is to bring the Federal people and the State people together and do case studies or scenarios and move from that. I would hope these fusion centers that we have created would also play a role in this. Mr. Guiora. I have 2 seconds. I think it is also going to require thinking long and hard about various constitutional questions, in terms of the limits of various jurisdictional issues. But I think the time, clearly, is now to address those issues and not to wait until tomorrow. Mr. Eddy. It is easier to do those with State and locals than with Federals. Ms. Harman. Thank you very much. Mr. Dent is now recognized for 5 minutes. Mr. Dent. Thank you, Madam Chair. Good morning. Mr. Eddy, you mentioned in your testimony, and then I guess Dr. Flynn touched on it just a few moments ago, but you mentioned it, the concept of a foreign liaison program for State and local law enforcement, and partially because foreign reporting is apparently not getting to the State and local levels. Should the Federal Government, in your view, be footing the bill for State and local officials to bypass Federal intelligence agencies, or should there just be more of an effort to make sure that this information is shared better? I would like to hear what you have to say, as well as Dr. Flynn, on that point. Mr. Eddy. I appreciate that question, Congressman. I helped build the NYPD foreign liaison program, which has been massively successful. Dr. Flynn was describing earlier the 7/7 trailers. Those were only buildable because we had police officers in London looking at this site and learning about it. The thing that we have to understand is different bosses, different agendas mean you ask different questions and you look for different answers. So if you have an FBI legal attache overseas and he arrives at the site of an attack, versus an NYPD police officer at the site of an attack, they are looking for very different things, and they are doing different things, and they are probably doing them well. The FBI officer is looking for issues that are necessary for his line of authority. The NYPD officer is looking for issues about subway security; he is looking at issues about the way the security was set up, how far the garbage cans were from their front door. The list goes on and on and on. The ability to have overseas intelligence--I mean, you know, it is so axiomatic to say we live in a global world, the terrorist threat is everywhere and anywhere at the same time. You have to be aware of what is going on around us. If you don't have that intelligence collected from a police point of view, it doesn't matter if you share or don't. So, right now, I don't believe that it is even collected the way that it needs to be collected for State and locals. So the idea of bypassing the FBI or bypassing State is not the way I look at it. I look at it as complementing the collection and bringing more resources into the United States. That is something that the foreign liaisons can do. The proposal in the LEAB legislation, to me, seems very smart. So my center, my leadership and donors, we are going to take this on on our own, because the Federal Government hasn't put money into it. I helped build it for NYPD. We are going to build it for a number of other police departments. LAPD is interested; Miami and Chicago also are. So we are going to have these departments each assign one police officer that they will pay for their salary, and then local donors will pay for their travel and their housing. We will send them overseas, and they will do this collection and this integration with the local police. Then, of course, that will be pooled amongst all the Police Executive Research Forum communities to bring that intelligence in. So it is not a bypassing; it is critical piece of intelligence that needs to be collected. Mr. Dent. Dr. Flynn. Mr. Flynn. I really would reinforce that. What we are really talking about is building essentially different lines of capabilities, using different assets we have as a Nation, which is extraordinary professional local police who can interact with their counterparts oversees. I recently, just a few months ago, had a chance to give a talk to New Jersey's law enforcement community. I was getting a ride by one of the State police detectives, and I was asking him about the relationship with the FBI, which historically is a bit of a challenge in most communities. He said, ``Yeah, everything is fine. In fact, we have a new guy here in Newark. And I was kind of interested, I went with him to a meeting we had to go to. And we were running a bit late, and he kept circling around the building we had to go to. And I said, `Look, there is a parking space right here; why don't you park there?' And it turned out the agent didn't know how to parallel park.'' That just highlights one issue, which is that locals don't tend to stand out when they do their local policing in a way that somebody from outside coming in does. It is a culture, it is a whole--so we have that strength that we want to take advantage of. That has counterparts overseas. How people talk and interact is different at that level. The bottom line is this, the new battlespace is the civil economic space. Who is going to be there? Then how do we get information to those players? We should be working overtime as a Nation finding the resources to basically capitalize on relationships that exist and being able to build up that expertise. Mr. Dent. I guess, to follow up--I appreciate your answers. They are well thought-out. But do you think we should be assigning more State and local police officials then to help Federal intelligence officials prepare product, intelligence product? Is that what we need to be doing more of? Mr. Flynn. Absolutely. There is little question that they see, often, things that the Federal law enforcement people don't. Particularly when we talk about things like critical infrastructure and so forth where there is often not a lot of resident expertise at the Federal law enforcement level, where you go to a community where someone has been in port for a long time--you have L.A. police, marine police forces who have been operating in the port for 30 years. They are going to know a heck of a lot more than a new FBI mission that brings them into the port. So capitalizing on that is so important. They help to tell you what is real and what is not, and finding a liaison and making sure we have that capability. Again, we are not trying to replace things. We are really trying to make sure that we get better collaboration than we have had before. Mr. Guiora. Can I just add one comment on that, Congressman Dent? Mr. Dent. Sure. Mr. Guiora. I think what really needs to happen is we need to articulate what is it we are trying to do. So if you move the policeman and you have them working closer with Federal officials, the question is, for what purpose? Is there, again, a large, overriding, strategic thought behind it, or are you just responding or thinking tactically rather than strategically? Because, without thinking about the strategic question, all you are going to be doing is moving people from here to here without some sophisticated thought process behind it. Ms. Harman. Thank you very much. I would just point out for the record that this subcommittee has worked for almost 2 years to force, and now by force of law, the inclusion of State and local law enforcement in the preparation of intelligence products by the NCTC. They are now, as an organization, called the ITAG. We have had a number of hearings about this. I think all of us continue to believe not only that they are valuable, but that they should be doing more and more so that these products are much more useful by the people who are actually going to find and prevent the next terror attack. Mr. Perlmutter is recognized for 5 minutes. Mr. Perlmutter. Thanks, Madam Chair. First of all, I got here late, but just in the discussion I have learned a lot. One of the things I hadn't really summarized it, in the need-to-know versus need-to-share. The need-to-share is preventative, you know, prevention kind of approach, as opposed to need-to-know, where you want to capture somebody. So that helped me, kind of, you know, understand this whole categorization, classification a lot better. My question comes more of a constitutional question. On bouncing back, which several of you talked about the resilience, one of the reasons that I think we don't bounce back as quickly as we might is because there are circumstances, the attack, whatever, is played and played and played and played again, to the point that--and I will just take one of my kids. Sort of, 9/11 traumatized the heck out of her, and lots of other people obviously. Here I am in Denver, Colorado, watching it again and again and again. I think the first amendment, you know, clearly limits the ability--allows the media to play it as many times as they want. But, you know, you guys looking at this issue of bouncing back and the public bouncing back, what do we do about that? Mr. Guiora. I think, in terms of the first amendment, obviously, freedom of speech amendment, the media rights are clearly articulated. I would take that to a different paradigm, though, Congressman Perlmutter. What needs to be made clear to the public is that terrorism is going to occur and it is a reality. Going back to your original question, in Israel my 11-year- old will tell you it is a matter of time until there is another terrorist bombing, just like there was yesterday. That is the reality. I think once the public understands and once leadership articulates to the public that this is our new reality, this post-9/11 world, it is what it is, it will help us in a much more effective manner to create and articulate a new paradigm in terms of going forward. The media is going to play the role of watchdog; that is inevitable. TV will have the pictures over and over again. Your child, hopefully, won't have to be traumatized again. But in the context of articulating up and down to the public that this is the new reality, it will make it much more feasible or realistic to respond to acts of terrorism. If we think that we are going to defeat terrorism, if we think that we are going to prevent acts of terrorism, then when it happens, we are going to say, ``Oh, it can't be.'' But it is the reality, and it really does require rearticulating how we educate the public. Mr. Flynn. I would just reinforce this notion about the education of the public, that it is not just, ``Here is a threat, here is a threat, here is a threat and vulnerability,'' but, ``Here are tangible things that you can do to make yourself safer and better prepared.'' It is important, also, though, to understand resilience as a concept, which is drawn heavily from the folks who did earthquake issues, is built in up front. We are seeing this tragedy in China right now, and of course virtually all the buildings that have come down were ones that weren't resilient enough to withstand a foreseeable event and the result is massive loss of life and destruction of property. You build resilience up front by, in that case, designing buildings well enough to withstand the expected level of forces. I think the real point here is that terrorism is a fact of life, as natural disasters are. We need to acknowledge that, but not just say that is out there in the ether. You give people things to do. You give them information which will make them better prepared and able to ride these things. When they do, inevitably they are less terrified. It is difficult for me as a retired Coast Guard officer; I came in at age 17. We have an unofficial motto in the Coast Guard: You have to go out, but you don't have to come back. The whole notion is you do whatever it takes to rescue somebody by going into harm's way. But when you develop the skills for doing that here, I found my crew always were empowered. They grew up in the process of giving them the skills to deal with the terror that Mother Nature could put on us here. So part of it is just dealing with that reality, and we need to do it. On the media issue very specifically, it has just got to cut both ways. We know, in the Second World War, the media both entertained and informed. But we have to find ways to create incentives and engagement with the media as an industry, just like other private-sector entities with critical infrastructure, to address this issue. There are messages that hurt, messages that cause fear, and there are messages that can be quite helpful. I have made just very basic recommendations to the media about making sure you have a ready list of people who really know what they are talking about, so when things go on, you can get their faces in front of the cameras instead of a talking head or the guy who wrote a spy thriller last week who is coming in now because the producer knows him. There are mechanical things that we can ask the industry to do, but we haven't engaged them in a constructive way. I found media executives, when I had a chance to talk with them, they are responsive to this. But, again, the Government has never made the outreach, largely by saying, ``We are holding our cards close to the chest. We are taking care of terrorism. You go about your lives. You go to the mall.'' All this is really heightening anxiety, almost guaranteeing more trauma than we need to have from what our eventuality is. Mr. Perlmutter. Thank you. Ms. Harman. Thank you. Mr. Shays is now recognized for 5 minutes. Mr. Shays. Thank you, Madam Chairman, for holding this hearing. I would like to get into two areas. One, I would like your comment on whether you think the media, the so-called ``terrorist experts'' on TV, are contributing to helping people understand the threat and dealing with the threat, or are they insignificant, or are they moving the public in the wrong direction. I would like all three of you to answer. Mr. Eddy. If I can take a shot at that, and that builds nicely on the previous question. I think a lesson that we learned in New York and that we are trying to teach in Los Angeles is that the media exposure after an attack or before attack can largely be shaped by the engagement you had beforehand, just as Dr. Flynn was saying. So part of what we encouraged NYPD to do, for example, is bring the media in early, before anything happens, and give them a tour. You end up getting a positive press story out of that, about, ``Look how strong and resilient the police department is,'' and that is positive---- Mr. Shays. Well, you guys are the experts. I am talking about the talking-head types that show up on the talking-head programs. Mr. Eddy. Sure. Well, I think we were, kind of, talking about this earlier amongst ourselves. It is, sort of--they are very--well, most of---- Mr. Shays. I need a short answer. Mr. Eddy. Not positive, don't have a very positive impact, and tend to play to the producers, who want you to stoke fear, because that sells TV minutes and commercials. Mr. Shays. Thank you. Mr. Guiora. I think a true expert can be very effective in terms of explaining what the threat is and what is going to be the appropriate response and what is the realistic response. A non-expert talking head who is going to be playing to various audiences I think, Congressman Shays, is going to be very ineffective. A real expert who can speak clearly, concisely and precisely is going to be very effective in terms of explaining to the public how do we go forward and what is next. Mr. Flynn. Fundamentally, it is usually how the interviews are structured, classically ``what happened'' instead of ``what do we do about it.'' So to the extent of what do people know and what should people be doing. So the fact that, basically, the media stories often stop with just reporting what happened and the terrorist experts are explaining that without giving information, that can just sort of feed the sense that this is an omnipotent threat which is unbounded and which there is nothing we can do. People feel powerless as a result. Mr. Shays. Well, it strikes me that, therefore, what you are telling me is that the experts in law enforcement and so on should not give up the time to leave this large void to be filled by people who aren't going to make a contribution. Let me talk about overclassification. I chaired the National Security Subcommittee of the Oversight Committee, of Government Reform, and am now its ranking member. We had a number of hearings. The defense witness said that 50 percent was overclassified, and the nongovernment folks said up to 90 percent was overclassified. That strikes me as perhaps accurate, somewhere in between those two, but has, I think, horrific implications. I would be interested to know your reactions. You touched on it a little bit. But give me an example of where overclassification can hurt and what you think about the issue in general. I will start with you, Dr. Flynn. Mr. Flynn. Probably the place where it hurts the most is dealing with the private sector in safeguarding critical infrastructure. What you have, of course, are the people who design and operate that infrastructure, know its real vulnerabilities and know its real strengths. Most of the people who are actually assessing it are in a classified world and making best guesses, and most of those educated, best guesses are usually very uneducated. So you can't have this conversation. If you think about what happened in 2003 in the Northeast when the grid went down, as a result, as we found out quickly, not by acts of terror but trees overgrowing and triggering a series of events that shut that grid down, it was easy for us to learn how to mitigate that in the future and respond better because we had everybody in the room--Canadians, State hearings and so forth. I can imagine the scenario where the information started that we had pulled out maps or charts from Afghanistan that somebody was targeting towers, and then that was shared only with chief security officers, well, what would the industry do about that? The problem wasn't the towers. The problem was how the grid was integrated. So that is really the key, is where it is going to get fixed. Mr. Shays. Thank you. Mr. Guiora. To your question, last week I met with some agents from the FBI, and I told them that the only way we can begin discussing resilience is by having public-private information-sharing. They turned more white than the color of your shirt and more red than the color of the University of Utah. I said the only way that we can begin addressing the issue is by information-sharing, which goes exactly to the issue of minimizing classification, because otherwise---- Mr. Shays. Why did they turn white or red or whatever color? Mr. Guiora. Because I think they found the idea of having to share information with the private sector to be problematic on a practical level, on a policy level and on a constitutional level, which goes back to the issue of we can't go forward without information-sharing. Mr. Shays. Mr. Eddy, you have 10 seconds. Mr. Eddy. I think one of the quick solutions would be to try and figure out who the U.S. military reservists are within police departments and see if you can access a clearance that way, so you have one channel then, at least, where someone is cleared. I don't find overclassification to be as much of a threat as most people do, because I think the ultimate threat information can move its way down to the police department if it needs to. I think intelligence, actually, is more important lateral and local. That is real the intel is going to come from, and at that point doesn't need to be classified. Mr. Shays. Thank you. Ms. Harman. Thank you, Mr. Shays. Thank you to our members and to our witnesses for a really extraordinarily good hour-plus of conversation about these issues. Let me just say to Mr. Eddy, in closing remarks, that we think--and we are, again, readying this bill--that protecting sources and methods is the right justification for classifying information. Protecting turf and protecting oneself from political embarrassment are not good reasons. So our focus is going to be on how to make the system work as it should work. I do think, consistent with what Dr. Flynn has said, that that will enable us to move more information more quickly to people who need it. But you are also right that a lot of what has to change is that police departments and sheriff's departments have to be educated to do what they can do better than anyone else. So I think this hearing confirms something this subcommittee believes on a bipartisan basis, which is that we need to be advocates at that level, and we need to be sure that the people at that level get what they need from this level, not the other way around. Because they are the people who will be the true first preventers and who will connect the dots, as Mr. Dicks was talking about, and figure out that a series of gas station robberies wasn't a series of gas station robberies, it was an effort to collect money to fund a terror cell that was going to attack Jewish sites and military recruiting centers in the Los Angeles area, as an example. So I thank you for your testimony. This is what we work on in this subcommittee, and hopefully we are adding value. For sure, you are. The hearing stands adjourned. [Whereupon, at 11:10 a.m., the subcommittee was adjourned.]