Table of Contents

CHAPTER 10

MILITARY INTELLIGENCE BATTALION (COUNTERINTELLIGENCE)

This chapter describes the mission and organization of the MI battalion (CI). It discusses the functional activities of the battalion and the support role of CI in combating terrorism.

The MI battalion (CI) provides support in Europe and Southwest Asia. The MI company (CI), as part of the MI battalion (C&E), provides support in the Pacific, Korea, and Central and South America. The MI battalion (CI) and MI company (CI) function in a GS role to units operating within the theater or AO for which the MI brigade (EAC) has responsibility. Their missions are to provide MDCI support within the theater or AO. The MI battalion (CI), shown at Figure 10-1, is organized with an HHC and three CI companies.

The MI battalion (CI) and MI company (CI) perform basic CI functions:

• CI support within the COMMZ.
• CI investigations and special operations.
• CI technical support, TSCM, and polygraph.
• Liaison with designated joint and combined commands and host nation CI counterparts.
• Reinforcing CI support to US corps and other designated commands.

The general staff responsibilities of the MI battalion (CI) are similar to those described for the MI brigade (EAC) and other MI battalions (see Chapters 3 and 5). This battalion also has a unit ministry team assigned.

The HHC includes a battalion headquarters and a headquarters company. The battalion headquarters includes the battalion command group and staff sections. The headquarters company contains a headquarters section, unit ministry team, mechanized maintenance section, and a food service section.

The HHC provides--

• C² of assigned or attached units or elements.
• Staff planning.
• Management.
• Coordination of employment of battalion resources.
• Communications support.
• Unit maintenance.
• Recovery support for battalion equipment.
• CI technical support (TSCM and polygraph).

The S3 section plans, coordinates, and tasks organic and attached CI assets. The section provides the interface for tasking and reporting, with the MI brigade (EAC) and the CI section and SDT-HUMINT element of the EACIC.

The S3 section provides the TSCM and polygraph teams which support the battalion mission. It also has an analysis team that writes CI reports, summaries, and estimates. The analysis team maintains the MDCI data bases from information provided to it from the three CI companies. The information is derived from the MDCI functions of the companies: CI investigations; operations; collection; and the conduct of C-SIGINT, C-HUMINT, and counter-imagery intelligence (C-IMINT) analytical efforts. Figure 10-2 shows the organization of HHC, MI battalion (CI).

The MI battalion (CI) operates in a GS role in providing CI support throughout the theater AO. It may, however, deploy teams from its organic companies to reinforce corps or other CI EAC unit assets (for example, SOF units). If deployed, the teams remain under the C² of the battalion.

The structure of the MI company (CI) is the same, whether assigned to the MI battalion (CI) or to the MI battalion (C&E). Because the battalion has a pure CI mission, three CI companies are assigned vice the single company assigned to the MI battalion (C&E). See Chapter 6 for a complete description of the structure and functions of the separate elements of the MI company (CI) and other organizations with which the MI battalion (CI) may coordinate to accomplish its mission; they are the same as those for the MI battalion (C&E).

Army CI activities are directed against the multidiscipline intelligence collection efforts of our adversaries. In responding to the collection capabilities of an enemy (HUMINT, SIGINT, IMINT, and other collection means), MDCI must be able to identify what collection capabilities exist and recommend countermeasures to deny the information sought. Part of the CI mission includes countering, to the extent possible, various foreign and threat intelligence services other than intelligence collection activities, such as propaganda, disinformation, sabotage, terrorism, and assassination.

The conduct of the CI mission is accomplished through four basic functions: investigations, operations, collection, and analysis and production. The information (for example, C-HUMINT) resulting from the first three functions merges during the analytical process with the information generated from C-SIGINT and C-IMINT analytical functions. The battalion CI analysis team and the company operations sections translate the information into brief MDCI reports and products that support the operations staff (G3 or J3) section's OPSEC and deception staff planning processes.

The same MDCI functions are accomplished throughout the spectrum of conflict. However, during contingency or LIC operations, the emphasis is on using HUMINT techniques to collect information to counter an enemy's collection capabilities or hostile operations.

CI assets, in two- or four-person teams, may be deployed throughout the theater AO. The teams are assigned either an area or a unit mission. The most effective employment technique for these teams is to assign areas of responsibility. The team assumes a GS mission and the conduct of its functions supports all units within its area of responsibility. The GS role is the best support mission for teams because it allows limited CI assets to support the entire force within the area covered. In the GS role the teams can also respond to theater PIR and IR collection tasks in a specific AO. CI teams employed with unit support missions also are best used in a GS role for the same reasons.

CI support to rear operations is described in FM 34-60 and FM 34-60A. This support includes--

• Maintaining liaison with military and civilian police, civilian and MI agencies, and civil affairs units for information exchange and assistance. Cooperation between agencies is essential in defeating the rear area threat, and effective liaison is the key to this cooperation. Liaison prevents duplication of effort; ensures maximum dissemination and use of intelligence; and assists in planning unified efforts by the agencies involved. Liaison with local civil agencies also can provide I&W intelligence.
• Providing threat awareness training to supported units. A well-developed security education program, SAEDA classes, and threat awareness training in supported units are essential to minimize FIS operations. CI personnel provide training and information on the threat to unit security managers and are responsible for channels used to report suspicious activity. CI personnel also provide security advice and assistance to supported units.
• Conducting LLSOs throughout the COMMZ to provide I&W information on potential rear area activity. Low-level sources can be individuals who serve as paid or unpaid informants for US intelligence special agent personnel. They provide information on personalities and activities gained from their routine daily activities. Examples include the local barber, storekeeper, or maid. These LLSOs are established around critical areas or activities to provide I&W information on potential enemy activity in the rear area.
• Conducting LLSOs during contingency or actual combat operations. In LIC, EAC CI units conduct low-level operations to identify threats to US forces. In a theater where corps and division CI assets are deployed, EAC CI units integrate these LLSOs with those of ECB units. When initiated, these types of LLSOs are directed at gathering combat information on a potential hostile force or on an actual threat force. The planning and conduct of LLSOs are covered in FM 34-60A.
• Investigating incidents. CI investigations are directed by the theater subcontrol office. They can lead to the identification, nullification, or exploitation of agents of hostile actions. These investigations include incidents of espionage, sabotage, subversion, sedition, treason, and terrorism. CI teams also must effect liaison with the US Army Criminal Investigation Division (CID).
• Providing data to the black, gray, and white lists that identify personnel of CI interest. Teams conduct operations that provide data used to compile these lists. Black lists contain the names of persons hostile to US interests and whose capture, nullification, or exploitation are of prime importance. Gray lists contain names of persons whose inclinations or attitudes toward US interests are uncertain. White lists contain names of persons favorably inclined toward US interests who need to be protected from enemy targeting. (These lists are covered in FM 34-60.)

CI support to combating terrorism is described in FM 34-60. This support consists of defensive and offensive measures. There is no specified point where antiterrorism measures end and counterterrorism measures begin.

DEFENSIVE MEASURES

Defensive, or antiterrorism, measures are--

• Taken to reduce the vulnerabilities of personnel, their dependents, facilities, and equipment.
• Commonly referred to as "hardening of a target." CI personnel recommend protective measures to key command personnel in a specific AO about a potential terrorist threat.
• Supported by CI personnel conducting investigations consistent with appropriate regulations and host-nation laws.

OFFENSIVE MEASURES

Offensive, or counterterrorism, measures are--

• Taken in response to specific terrorist acts, including the collection of information and threat analysis in support of such responses.
• Direct actions taken against a terrorist group provide information that supports direct actions.

This includes interdiction and apprehension. CI investigations and operations of specific terrorist groups committing a terrorist act.