[Back]
[Index]
[Next] 		FM 34-37
Strategic, Departmental, and Operational IEW Operations
 Preliminary Draft

CHAPTER 5
CONUS Counterintelligence Brigade

This chapter addresses the mission and structure of the CONUS based CI Brigade. While most resources are located in CONUS, the Brigade has a global mission. This chapter discusses the resources available and how they provide CI support to Joint organization, US Army commands, US Army departmental activities, DoD agencies and the national intelligence community. It also discusses the functional and coordination structure of the CONUS CI Brigade and provides insight into the duties of the key elements of the group and how they interact.

MISSION

The CONUS CI Brigade has a world- wide mission of identifing, detecting, exploiting and neutralizing foreign collection activities directed at US Army forces, secrets, and technologies.

This encompasses both offensive and defensive CI operations and counterespionage investigations to include investigation of Army information network denial/ disruption and computer systems' penetrations and attempted penetrations. The Brigade's assets are tailored to support--

  • Unified, joint, and combined commands.

  • Other US Army theater commands.

  • US Army corps and divisions.

  • DoD agencies.

  • National intelligence agencies

    The functions of the group are to--

  • Provide the CI/ HUMINT connection between strategic/ departmental levels to the national intelligence infrastructure.

  • Plan and execute the full range of CI/ HUMINT functions to satisfy Army Title X requirements.

  • Project tailored CI teams with technical, collection, investigative, operations and analysis capabilities to reinforce and support operational level and deployed commanders.

  • Conduct advanced CI and HUMINT training for Department of the Army (DA) and DoD in special investigative, collection, and operations techniques. This includes the Technical CI School and the Advanced Foreign CI Training Course. Also provides resources to the Military Operational Training Course.

  • Manage Army- level CI/ HUMINT collection operations to meet DoD and Army intelligence information needs and to populate databases to meet lower echelon IPB requirements.

  • Serve as the Army executive agent for dedicated CI support to international treaty verification, DoD acquisition systems protection programs, and all Army and several national special access programs.

  • Provide dedicated CI support to Special Operations Forces (SOF) and special mission units (SMU) by working against FISS efforts to collect intelligence on SOF and SMU. CI mission responsibility is divided between organic CI assets assigned to SOF units, and the CONUS- based strategic CI assets for dedicated support to various SOF and SMU missions.

  • Support DoD intelligence systems security site based accreditation and SCI contractors.

  • Act as the Army's executive agent for freedom of information act/ privacy act requirements for all HUMINT and CI record information.

  • Establish and operate a case control office to manage CI investigations and operations.

  • Conduct polygraph examinations for INSCOM and other DoD activities.

  • Provide ADP security support as directed by INSCOM to the Army through the conduct of comprehensive ADP security services, engineering services, software analysis services, and advice and assistance.

  • Provide global TSCM investigations to detect and neutralize technical surveillance penetrations, technical surveillance hazards, and physical security weaknesses.

  • Conduct laboratory analysis of technical surveillance devices and technical surveillance hazards worldwide.

  • Provide defense against methods of entry (DAME) services to INSCOM and provide technical DAME advice and assistance worldwide as directed.

  • Approve Army cryptofacilities in CONUS before establishment, alteration, expansion, or relocation.

  • Review plans for new construction of and provide field TEMPEST test support to select Army facilities. These facilities are designed to process classified information electronically to ensure adequate protection against compromising emanations.

  • Collect and analyze emissions of Army emitters. It does this during developmental and operational testing of weapons systems and during field training exercises (FTXs) to determine their vulnerability to SIGINT exploitation.

  • Provide CI support to warfighters to aid in the establishment of unit OPSEC programs.

  • Establish and maintain operational coordination with local, state, and federal investigative, law enforcement, and intelligence organizations to fulfill mission requirements.

  • Provide support to the NCA's Alternate Joint Communications Center.

  • Provide dedicated CI support to the Defense Nuclear Agency (DNA) and its field activities.

    ORGANIZATION

    The CONUS CI Brigade, shown at Figure 5- 1, has a HHC and four battalions: CI Field Operations, Foreign Counterintelligence, CI Services, and CI Support (Reserve Component).11

    INSERT LINE AND BLOCK CHARTFigure 5- 1

    CI FIELD OPERATIONS BATTALION (COUNTERINTELLIGENCE)

    The mission of the CI Field Operations Battalion (CI FOB) is to conduct investigations and operations in response to alleged threats against the US Army. Investigative support is provided to theater units and designated DoD activities within CONUS, Alaska, and Puerto Rico, or as otherwise directed by the group commander.

    CORE COMPETENCIES

    1. Reinforce designated units with tactically- tailored CI deployment packages.

    2. Conduct CI operations and analysis to detect and neutralize FIS threats to technology.

    3. Conduct CI operations to detect and neutralize FIS and threats to warfighters.

    4. On order, reinforce designated tactical units with specialized CI support.

    5. Conduct Red Team Operations.

    ORGANIZATION

    This battalion performs its mission through geographically dispersed military intelligence detachments (MIDs), executing the battalion's mission in a specific area. These MIDs are further broken down as needed into resident offices (ROs) to facilitate battalion mission execution. The number of MIDs and ROs are tailored to mission requirements.

    Typically the CI FOB, shown at Figure 5- 2, has a headquarters and support detachment, four- to- five MIDs, and one- to- five ROs for each MID.

    INSERT Figure 5- 2. CI FOB.

    BATTALION HEADQUARTERS AND SUPPORT DETACHMENT

    The battalion commander is authorized direct coordination with supported US Army elements and designated DOD agencies to accomplish the mission. Although many of the subordinate detachments are in DS of CONUS- wide local commanders or program managers, the CI FOB commander retains C2. The headquarters and support detachment consists of a detachment commander, NCOIC, and administrative personnel to perform routine personnel, administrative, and supply actions for battalion headquarters personnel.

    MILITARY INTELLIGENCE DETACHMENT

    The MID is the C2 element of subordinate CI ROs in the conduct of the CI mission. The MID and the RO--

  • Conduct CI operations and activities to include CE investigations, operations, and services.

  • Support C- SIGINT functions, SAPs, cryptofacility validations, cryptonet security evaluations, and personnel security screening program interviews.

  • Conduct operational coordination with local, state, and Federal law enforcement and intelligence agencies.

  • Conduct SAEDA and FIS threat briefings.

  • Conduct vulnerability and threat assessments.

    FOREIGN COUNTERINTELLIGENCE BATTALION

    The mission of the Foreign Counterintelligence Battalion (FCIB) is to conduct offensive and defensive CI operations and investigations to detect, identify, exploit and neutralize foreign intelligence activities directed at the US Army, Joint Commands, and DoD Agencies. CORE COMPETENCIES

    1. Conduct offensive and defensive CI operations.

    2. Investigate incidents of possible espionage.

    3. Execute multi- discipline counterintelligence technical operations and investigations.

    4. Conduct information warfare technical investigations and operations.

    5. In concert with DHS, conduct briefings, debriefings and elicitation.

    6. Conduct TSCM and/ or TEMPEST inspections, testing, and investigations through the deployment of technically tailored teams as needed.

    ORGANIZATION

    The FCIB is dedicated to ...

    The FCIB, shown at Figure 5-??, is organized with a headquarters and support detachment and tailored Detachments located in CONUS, Europe and Pacific. The Detachments are tailored to conduct operations and investigations based on requirements generated by Joint Commands, Army Service Component Commands, Army Major Commands, Departmental agencies, and DoD organizations.

    BATTALION HEADQUARTERS AND SUPPORT DETACHMENT

    The battalion commander is the primary Counterespionage (CE) officer within the brigade and is directly responsible to the commander for CE matters. The battalion provides GS CE coverage to CONUS and OCONUS units.

    FOREIGN COUNTERINTELLIGENCE DETACHMENTS

    The FCIDs:

  • Conduct CI investigations and operations, as required.

  • Conduct operational coordination with Federal, state, and local law enforcement, investigative, and intelligence organizations within assigned geographical areas of responsibility.

  • Conduct CE operations and investigations and provide services for DA and other organizations, as directed by CG, INSCOM.

  • Conduct all CI operations in accordance with applicable regulations, laws, and statutes as directed.

  • Conduct surveillance and counter- surveillance operations

    TECHNICAL SUPPORT DETACHMENT

    The technical support detachment consists of a headquarters section, TSCM operations team, TEMPEST inspection and testing team, electronic security (ELSEC) team, crytofacility inspection team, counter- measures support team, and a DAME team.

    CI SERVICES BATTALION (COUNTERINTELLIGENCE - TECHNICAL)

    The CI SB provides technical services and training in support of DA and DOD organizations. It acts as proponent for Army- wide technical CI investigations, services, and instructions. This battalion performs a GS mission for theater units and conducts the following technical CI functions:

  • DAME support.

  • Polygraph testing.

  • Automatic data processing security service (ADPSS) support.

  • C- SIGINT monitoring.

  • Army CI Center (ACIC).

    CORE COMPETENCIES

    1. Conduct CI investigations, analysis and operations to detect and neutralize adversary threats to technology.

    2. Conduct CI Operations and analysis to detect and neutralize adversary threats to warfighters.

    3. Employ technically tailored CI teams worldwide.

    4. Provide direct CI support to DoD and DA Special Access Programs and the Acquisition Systems Protection Program.

    5. Provide dedicated CI and OPSEC support to Special Operations Forces.

    ORGANIZATION

    The CI SB, shown at Figure ??, includes a headquarters and support detachment, technical support detachment, polygraph detachment, ADPSS detachment, C- SIGINT detachment, ACIC, ACCO, and TEMPEST detachment.

    Figure ??. CI SB.

    HEADQUARTERS AND SUPPORT DETACHMENT

    The headquarters and support detachment has a battalion headquarters, support team, and training team. It provides C2 of organic and attached units of elements; provides intelligence oversight, staff planning, communications, logistics, personnel, and administrative support; and provides CI support and specialized CI training.

    MI Detachments (MID)

    The primary mission of the MIDs of the CI OIB is to provide OPSEC support to DA and DOD SAPs. MID commanders exercise C2 over ROs subordinate to the detachment.

    They:

  • Provide CI support to active and reserve Army units.

  • Are generally organized to support SAP- related facilities, organizations, and operations within a designated area of responsibility.

  • Provide OPSEC advice and assistance to SAPs in a GS role.

  • Keep the group headquarters informed on the SAP's activities and milestones.

  • Ensure that local hostile intelligence threat estimates are correct and tailored to SAP requirements.

    POLYGRAPH DETACHMENT

    The polygraph detachment consists of a headquarters section, training team, operations team, and screening team. It schedules examinations, reviews case files, conducts examinations, and prepares reports to determine the truthfulness of gathered information and screening.33

    AUTOMATIC DATA PROCESSING SECURITY SERVICE DETACHMENT

    The ADPSS detachment consists of a headquarters section, systems testing and evaluation branch, analysis team, and field evaluation team. The testing and evaluation branch is augmented by six additional mobilization designee evaluation teams in wartime.

    The ADPSS detachment provides ADP security support in accordance with AR 380- 380 to units within the AO. It does this by conducting full ADP security, engineering, and software analysis services and by providing advice and assistance. On request, it also provides technical assistance in CE investigations. The detachment provides assistance and evaluation on automation security, including--

  • Security management.

  • Hardware security.

  • Communications security.

  • Information security.

  • Software security.

  • Procedural security.

  • Personnel security.

  • Physical and environment security.

    OPERATIONS SECURITY SUPPORT DETACHMENT

    The OSD develops, plans, coordinates, and oversees CI OPSEC support to DOD SAPs in a DS role. The OSD receives its tasking through the chain of command from the Deputy Under Secretary of Defense (Policy). An OSD assessment team determines the feasibility and scope of the proposed SAP. Once granted SAP status, the OSD provides OPSEC advice and assistance from the conception of the SAP; through the research and development cycle, testing, and fielding; or through activation of the SAP. This enhanced security program is continued until the Vice Chief of Staff, US Army, decides to discontinue the SAP.

    The chief of the DS teams subordinate to the OSD briefs the security posture of each SAP during the annual SAP Oversight Committee and makes recommendations for the revalidation of the programs. The OSD acts as the "eyes and ears" of the Deputy Chief of Staff for Intelligence and the Technology Management Office, as they ensure adherence of adequate OPSEC procedures.

    The OSD also coordinates with the Defense Investigative Service to ensure that DOD contractors comply with appropriate SAP personnel security procedure guides, DoDD 5220.22M, and DODD 5220.22R. The OSD deals primarily with the DA staff, national level intelligence activities, MACOMs, national test facilities, and SAP program managers. The OSD does not have geographical AOs.

    DEFENSE NUCLEAR AGENCY MILITARY INTELLIGENCE DETACHMENT

    The DNA MID performs the same mission as the OSD but provides dedicated, tailored CI and OPSEC support services to DNA and its field activities at locations throughout CONUS.

    COUNTERINTELLIGENCE SUPPORT DETACHMENT

    Like the DNA MID, the CI Support Detachment (CISD) provides dedicated OPSEC support. This detachment supports SOF during training missions. It provides CI and security investigation support to them as directed by DA. Although the detachment receives its operational taskings from DA, C2 of the detachment remains with the commander, CI OIB.

    It inspects classified information- processing facilities to ensure compliance with and to detect deviation from approved installation practices as outlined in applicable technical bulletins and regulations. It also conducts TEMPEST tests (laboratory- type examinations under controlled conditions) and field tests to determine the existence and nature of conducted or radiated signals from electronic equipment.

    ARMY COUNTERINTELLIGENCE CENTER

    The ACIC consist of................. It provides multi- discipline counterintelligence analysis in support of Army forces, programs, operations, and CI investigations.

    CI SUPPORT BATTALION (RESERVE COMPONENT)

    The mission of the CI Support Battalion (Reserve Component) (CISB( RC)) is to augment the CONUS CI Bde in it's global mission to identify, detect, exploit and neutralize foreign collection activities directed at US Army Forces, secrets and technologies. The CISB( RC) provides tailored CI/ HUMINT teams to address shortages in both peace and contingency operations.

    CORE COMPETENCIES

    1. On order, reinforce designated units with tailored CI/ HUMINT teams.

    2. Conduct CI operations and analysis to detect and neutralize FIS threats to technology.

    3. Conduct CI operations to detect and neutralize FIS and threats to warfighters.

    4. On order, in concert with DHS, conduct briefings, debriefings and elicitation.

    5. Provide direct CI support to DoD and DA Special Access Programs and the Acquisition Systems Protection Program.

    ORGANIZATION

    The CISB( RC) performs its mission through task- organized CI/ HUMINT teams.