Counterintelligence Awareness

We may think it only happens in movies, but espionage is a very real threat. Spies are out there, they are targeting our nation’s most valuable information and technology, and they are more active than ever before.

The truth is that U.S. information and technologies are targeted every day. Advancements in technology have only made the modern day spy’s job easier. Every one of us plays a role in protecting our country and we must be vigilant.

What is Counterintelligence?

Counterintelligence is information gathered, and activities conducted to identify, deceive, exploit, disrupt, or protect against espionage, other intelligence activities, sabotage, or assassinations conducted for or on behalf of foreign powers, organizations, or persons, or their agents, or international terrorist organizations or activities.

The goal of counterintelligence is to:

  • Protect U.S. sensitive, controlled unclassified, and classified information and technology
  • Protect our nation’s critical assets: our people, advanced technologies, and protected information
  • Counter the activities of foreign spies
  • Keep weapons of mass destruction from falling into the wrong hands

Are You a Potential Target?

In short, anyone that has, or could have, access to targeted information, knowledge of information systems, or security procedures, is a potential target to foreign intelligence services. This includes:

  • Developers that research and develop leading technologies
  • Information Systems Personnel with access to cleared facility networks
  • Business Development Personnel supporting marketing and sales
  • Human Resources and Recruiting Personnel
  • Senior Managers and company owners
  • Subject Matter Experts involved with targeted technology
  • Administrative Staff with access to leadership calendars and proprietary information
  • Anyone that has access to national defense information

MCMO (Methods of Contact and Methods of Operation)

Common collection methods include:

Requests for Information (RFI) and Solicitations: Attempts to collect protected information by asking, petitioning, requesting, or eliciting protected information, technology, or persons.

Exploitation of Business Activities: Attempts to establish or leverage relationships to obtain access to protected information. Most commonly through joint ventures, partnerships, mergers and acquisitions.

Exploitation of Cyber Operations: Attempts to compromise or risk confidentiality, integrity, or availability of targeted networks, applications, credentials, or data.

Exploitation of Experts: Requests for peer or scientific review, invites to participate in foreign conferences, requests to collaborate with foreign academic institutions.

Exploitation of Insider Access: Attempts by trusted insiders to exploit their authorized placement or access.

Resume Submission: Applications by foreign individuals seeking academic or professional placement that could facilitate access to protected information.

Surveillance: Observation of equipment, facilities, sites, or personnel associated with classified contracts.

Clearance Advertising is Prohibited

Organizations that have been granted facility clearance under the National Industrial Security Program (NISP) are bound by 32 CFR Part 117 (NISPOM), which states that a cleared contractor may not use its favorable entity eligibility determination for advertising or promotional purposes.

“Advertising” that a company has a facility clearance is strictly prohibited. You may never state that your organization is a cleared facility, nor include any facility clearance information in any public facing space.

Countermeasures

A strong countermeasures plan utilizes defensive, offensive, and investigative measures to both detect and deter threats. Countermeasures may include:

  • Security Education and Counterintelligence Briefings
  • Physical Security measures
  • Cybersecurity measures
  • Personnel Security measures and training
  • Insider Threat Programs
  • Supply Chain Security
  • Technology Control Plans (TCPs)
  • OPSEC Plans

Resources and Additional Learning

As always, if you have any questions, ask your FSO! FSO PROS is here to help you navigate things to ensure you fulfill all requirements.

Related Articles

Unauthorized Disclosure

Unauthorized Disclosure: It’s Not Always Intentional

Unauthorized disclosures rarely begin with bad intentions. More often, they happen during quick conversations, fast moving emails, working in the wrong system, or assuming everyone in the room already has the appropriate need to know.

For those of us supporting the National Industrial Security Program (NISP), protecting classified information and Controlled Unclassified Information (CUI) is part of our daily responsibilities. While cyber and physical security tend to get most of the attention, routine interactions can create risks if we aren’t careful.

Read More
AI Driven Social Engineering

AI Driven Social Engineering: The New Threat Targeting Federal Contractors

Artificial intelligence driven social engineering is no longer a theoretical concern. It is already being used by adversaries to target federal contractors because of the sensitive information, predictable workflows, and publicly visible roles common in this environment. It is important to understand why this threat deserves your attention and how it affects every cleared and uncleared individual.

Read More

Learn how FSO PROS® can help
support your security program

Let’s discuss how we can help support your security and compliance needs.
Secret Link