Monday, September 2, 2024

US intelligence agencies seek closer partnerships with private sector

Cousins should not marry.* The spawn of such unions are apt to be riddled with all sorts of pathologies.

From DefenseOne:

The nation's top intelligence director outlined a list of new and expanded initiatives.

U.S. spy agencies are broadening their efforts to collaborate with the private sector via a slew of new initiatives to foster the kind of government-industry partnerships that have helped analysts study data, track terrorists, and thwart cyberattacks.

Among several new projects, the intelligence community will soon add private-sector engagement to its workforce performance objectives. It is also working to improve analysts' access to industry and academia-provided data, National Intelligence Director Avril Haines said Tuesday.

“We know that the private sector increasingly possesses certain unique and specialized talent, knowledge and capabilities in key fields of critical importance to national security that we don’t have access to in the government,” Haines said at an event in Bethesda, Maryland, hosted by the Intelligence and National Security Alliance, a nonprofit group supporting the U.S. intelligence community and industry counterparts.

The IC is training a team to downgrade classified information so it can be transferred to private companies, while agencies are developing a library of cleared intelligence products.

An Office of Partnership Engagement within ODNI has been established to facilitate and evaluate these efforts, she added.

Efforts are underway to bolster initiatives, like the National Security Agency’s Cybersecurity Collaboration Center, that enable the government and private sector to share information about cybercriminals and nation-state hackers.

Intelligence officials are working on acquisition guidance to help agencies sponsor sensitive compartmented information facilities, or SCIFs, for contractors, Haines said. SCIFs are air-gapped facilities used for exchanging classified data between intelligence operatives and officials.

Since 2001, the intelligence community has heavily leaned on the private sector for technology services to help their analysts, cyber warriors, and researchers spy on targets overseas and keep hackers out of U.S. critical infrastructure. The relationship was built on concerns that intelligence agencies and private firms were too stovepiped to properly share information to stop the plane hijackings.

For instance, the NSA for years had amassed a robust collection of zero-day exploits — hacks that target unknown system vulnerabilities that get their name because developers have “zero days” to patch them — that were discovered by private firms and sold to the agency to be used later for device break-ins....

*Here's a five-hundred year old infographic making a similar point:

https://media.wired.com/photos/593264b058b0d64bb35d14fa/master/w_582,c_limit/52_Trustees-of-the-British-Museum.jpg 

"Tree of Consanguinity," Decretalium copiosum argumentum, ca. 1450-1510. (Detail).
 "A woodcut depicting the various ties between family members in the popular
 archetype of the tree of consanguinity."
—Credit: The Trustees of the British Museum

Last seen in 2017's "Huh, This Data Visualization Thing is Older Than I thought"