This piece was first published by RUSI in London.  The views do not represent those of RUSI.

EXPERT PERSPECTIVE –The international community is coming under increasing pressure to recognise the Taliban and to unfreeze Afghan funds held by the IMF or to risk a humanitarian crisis over the winter and a resurgence of international terrorism.

As Afghanistan heads deeper into winter the desperate need is to avoid a humanitarian crisis. The World Food Programme has launched an appeal to feed up to 23 million people and Médecins sans Frontières have followed suit in the healthcare field. Fortunately, the distribution mechanisms are in place inside Afghanistan; what is needed is for the international community to ensure that UN humanitarian programmes are fully funded. This will require Western capitals to get over the shock of their recent defeat. It goes without saying that hunger and health should not be used as instruments of political leverage.

Meanwhile, it is becoming ever more apparent that the Taliban do not have the skills to administer a country which is far more complex than the Afghanistan of 1996 – when they began their previous and disastrous spell in office. They will need international assistance to stabilise the economy, get people back to work and, in time, continue the gradual infrastructure improvements which have been underway since 2002. China will doubtless be willing to assist in some areas but Beijing has already made clear that it is adopting a cautious, gradualist approach. However, there are emerging indications that the Taliban’s intransigent views are beginning to relax; such as their approval of the polio vaccination scheme and their willingness to work with UN humanitarian agencies.

The Taliban will also need outside help in defeating the threat from the Islamic State’s Khorasan Province (ISK). Already the Taliban are finding it difficult to counter similar asymmetric tactics which they used so successfully against Western forces. This is likely one of the subjects which CIA Director William Burns discussed with the Taliban during his visit on 24 August and where there is a mutual interest.

What can the international community (not just the West) realistically expect from the Taliban, following the militant group’s stunning victory? Maximalist demands will inevitably get short shrift.


The Cipher Brief hosts private briefings with the world’s most experienced national and global security experts.  Become a member today.


First, the Taliban should form a more inclusive government. According to multiple sources, the Taliban were intending to form such an administration had Ashraf Ghani not fled the country on 15 August. I am sceptical that this was ever their intention but former president Hamid Karzai and former reconciliation chief Abdullah Abdullah may have remained in Kabul on this understanding and Fatima Gailani, a former negotiator, insists this was the Taliban’s intention.

An inclusive government would need to include women and non-Taliban representatives from the Hazara, Uzbek and Tajik communities. It need not comprise the failed politicians and bloodstained warlords of the past, least of all Gulbuddin Hekmatyar and Abdul Rashid Dostum. It is surely time for a new generation of more technocratic Afghans to become involved in government. Some may be persuaded to return from abroad but they will need assurances for their safety.

Second, the international community should insist on female education at all levels be restored and for women to play a fuller role in society. The Taliban will baulk at this but they only need to look at Pakistan where women play an important role in an avowedly Islamic, if not Islamist, society.

Third, all neighbouring countries, as well as the wider world, want Afghanistan to commit to removing all terrorist bases and terrorists from its soil; not just ISK and Al-Qa’ida but also the Eastern Turkistan Islamic Movement, the Pakistani Taliban (TTP), anti-Iranian and anti-Indian groups, and Central Asian militant movements including the Islamic Movement of Uzbekistan.

Fourth, the Taliban should commit to allow people to join their families in exile if they wish and also cease the continuing search for and punishment of those Afghans who served the Afghan government and Western allies since 2001.


Go beyond the headlines with expert perspectives on today’s news with The Cipher Brief’s Daily Open-Source Podcast.  Listen here or wherever you listen to podcasts.


In an ideal world there would also be a fifth request: to remove Haqqani network members from the Taliban administration. However, that pass was sold when the US negotiator Zalmay Khalilzad engaged with the Haqqanis in Doha – another result of that calamitous dialogue. Furthermore, the current reality is that the Haqqanis control both Kabul and its airport and Sirajuddin Haqqani holds the key position of interior minister.

Instead, the Haqqanis need to be persuaded to prevent Al-Qa’ida regrouping in Afghanistan. Sirajuddin’s father was close to Osama bin Laden and the group retains its Al-Qa’ida connections. Pakistan is already using the Haqqanis to bring the TTP to the negotiating table. It remains to be seen how successful this will be. It is doubtful that the Haqqanis would be willing to take military action against a group from a similar area in the tribal borderlands. However, the Haqqanis could be useful as intermediaries, if not as enforcers.

Meanwhile, the wider Taliban, usually referred to as the ‘Kandaharis’, are increasingly exasperated by the entryist Haqqanis. Although they have worked together, there was never much love lost between the two. The Kandaharis have always distrusted the Haqqanis’ proximity to the Pakistani military. Since the Taliban takeover of Afghanistan, Mullah Abdul-Ghani Baradar, whose willingness to negotiate with the Kabul government in 2008 and 2010 earned him eight years in a Pakistani prison, has been sidelined. There will doubtless be a reckoning

A lasting regret of the US’s careless withdrawal is that Washington did not conclude a broader settlement for Afghanistan involving China, Iran, Russia, India and the Central Asian Republics. From now on it is essential to include all the neighbours in the discussion of recognition and the conditions required. But first the Afghans must be helped to survive the winter.

Read more expert-driven national security insights, perspective and analysis in The Cipher Brief

The post What Stands Between the Taliban and Recognition appeared first on The Cipher Brief.

find more fun & mates at SoShow now !

Australia’s Jewish community has condemned the repeated displays of Nazi references at anti-vaccine and anti-lockdown rallies in Victoria, some of which saw the state premier depicted as Adolf Hitler.

Daniel Aghion, the president of the Jewish Community Council of Victoria, claims that references to the genocidal regime of the Nazis amid the current unrest over pandemic rules is a false equivalence.

“The Nazis had the intention of wiping from the face of the Earth a race or religion simply because of what they were,” Aghion told Guardian Australia. “Nothing in the current proposals is remotely like that, and the comparison to Nazi Germany is therefore shocking, inappropriate and wrong,” he added.

Aghion’s comments come after demonstrators, protesting against pandemic laws, referenced Nazi Germany in an effort to make their point. Some carried placards depicting state premier, Daniel Andrews, as Hitler. 

 Wendy Lovell, a Liberal MP, had also claimed laws proposed to govern future pandemics were similar to Germany’s 1933 Enabling Act – which allowed the Reich government to issue laws without the consent of parliament and preceded atrocities, most notably the Holocaust.

MP Bernie Finn had gone as far as to share a social media post depicting the state premier as Hitler. It was later deleted.Laws proposed by Andrews seek to grant powers to the state leaders in the event of another pandemic. Under the move, the minister “may make any order… that the minister believes is reasonably necessary to protect public health.” 

Opponents claim the legislation, which would see power concentrated with the head of state and health minister, is too broad and far reaching.

If you like this story, share it with a friend!

find more fun & mates at SoShow now !

Cipher Brief Expert Tim Willasey-Wilsey is a Visiting Professor at King’s College, London and a former senior British diplomat. From 1996 to 1999 he was senior advisor to the British government on overseas counterterrorism.  This piece was first published by RUSI in London.  The views do not represent those of RUSI.


Analysis of openly available sources indicates that a British report shared with the US in December 1998 described an early stage of the 9/11 plot.


EXPERT PERSPECTIVE — Two extracts from Presidential Daily Briefs (PDB) are given some prominence in the 9/11 Commission report into the terrorist attacks in New York and Washington on 11 September 2001. One is from a PDB delivered to President Bill Clinton on 4 December 1998, and the other is from a PDB given to President George W Bush on 6 August 2001. Both are presented inside a textbox and both contain intelligence ‘from a friendly government’ which provided the first and only significant suggestion that Al-Qa’ida (AQ) planned to hijack aircraft in the US.

Eight months after the attacks, under Congressional pressure, the Bush administration was obliged to reveal some details of the PDBs, and on 17 May 2002 the New York Times disclosed that ‘the report provided to the president on Aug. 6, which warned him that Mr. bin Laden’s followers might hijack airplanes, was based on 1998 intelligence data drawn from a single British source, government officials said today’. The British government was obliged to acknowledge that the intelligence came from British sources. The Guardian reported on 18 May that ‘The memo received by Bush on 6 August contained unconfirmed information passed on by British intelligence in 1998’. The Independent ran much the same story with additional detail.

Both PDBs quoted from one British report from December 1998. The key question is whether this report, with its significant deviations from what actually happened on the day, actually referred to the 9/11 operation. Subsequently published evidence points compellingly to this indeed being an early version of the 9/11 plan.

The heavily redacted British contribution was shown on pages 127 and 128 of the 9/11 Commission’s report. It reads:

‘On Friday December 4 1998 the CIA included an article in the Presidential Daily Brief (PDB) describing intelligence received from a friendly government about a hijacking in the United States.

‘SUBJECT. Bin Laden preparing to hijack US aircraft. Reporting [passage redacted] suggests bin Laden and his allies are preparing for attacks in the US including an aircraft hijacking to obtain the release of Sheikh Omar Abdal Rahman,  Ramzi Yousef and Muhammad Sadiq Awda. One source quoted a senior member of the Gamaat Al-Islamiya (GI) saying that “as of late October the GI had completed planning for an operation in the US on behalf of bin Laden but that the operation was on hold. A senior bin Laden operative from Saudi Arabia was to visit GI counterparts in the US soon thereafter to discuss options – perhaps including an aircraft hijacking. GI leader Islambouli in late September was planning to hijack a US airliner during “the next couple of weeks” to free Abdal Rahman and the other prisoners according to what may be another source. The same source late last month said that bin Laden might implement plans to hijack aircraft before the beginning of Ramadan on 20 December and that two members of the operational team had evaded security checks during a recent trial run at an unidentified New York airport.’


The Cipher Brief hosts private briefings with the world’s most experienced national and global security experts.  Become a member today.


In May 2002 the US National Security Advisor Condoleezza Rice issued a statement observing (correctly) that the report had mentioned ‘hijacking in the traditional sense’ with no indication that aircraft would be used as weapons of mass destruction. Her testimony to the 9/11 Commission made broadly the same point.

Indeed, even in late 1998, there was a profusion of threat reports of which the aviation strand was just one. The MI5 official history comments aptly that the Service was puzzled as to why there were so many more reports of threats than actual attacks: ‘Even the most reliably sourced intelligence received on this question usually consists of a snapshot of a proposed plan being discussed. Most of the reporting does not make clear how far advanced the plan is’ (Christopher Andrew, The Defence of the Realm, pp. 802–806). What MI5 did not realise at the time was that AQ operations could take up to three years from inception to execution.

Steve Coll writes that ‘Within the morass of intelligence lay ominous patterns. One was an interest by bin Laden’s operatives in the use of aircraft … yet at the counter terrorism security group meetings and at the CIA’s counter terrorist centre there was no special emphasis placed on bin Laden’s threat to civil aviation or on the several exposed plots where his followers had considered turning hijacked airplanes into cruise missiles’ (Steve Coll, Ghost Wars, pp. 419–420).

Although the December 1998 report appears fragmentary, there were a number of aspects of particular interest. The first was the name Ramzi Yousef. Yousef had studied electrical engineering at Swansea Institute from 1986 to 1990 before exploding a massive bomb under the World Trade Centre in February 1993 and then planning the Bojinka Plot against airliners in the Philippines in 1994. Yousef had been arrested in Islamabad in February 1995 and sent to the US, where he was tried and imprisoned for life. He was an energetic and imaginative terrorist, and his uncle Khalid Sheikh Mohammed was also known to move in terrorist circles.

The aviation link must have struck a chord, too. The British were also interested in Hussain Kherchtou, who had been in Kenya at the time of the Embassy bombings and was himself a pilot. He later provided a debrief to the FBI. His story and his courtship by the British came into the public domain because of a subsequent US court case and a talkative FBI officer.

The Egyptian angle also would have provoked little surprise. On 19 November 1995 Egyptian terrorists had blown up the Egyptian Embassy in Islamabad, killing 13 – only yards from the British High Commission compound with its exposed staff housing and kindergarten. The British had a miraculous escape that day.

The concern for the release of Sheikh Abdal Rahman, ‘the Blind Sheikh’, was consistent with the widespread devotion which the preacher inspired among Islamist radicals and particularly Egyptians. His imprisonment in New York for his part in Yousef’s attack on the World Trade Centre had caused significant distress among his many adherents, who all wanted his release.

The idea that AQ would strike the US had first surfaced in 1997 and felt like the logical next step. Only a month beforehand (in November 1998), AQ had attacked two US Embassies in Kenya and Tanzania, killing 224 people including 12 US citizens. These operations had served as a wake-up call for those who thought the AQ threat was being exaggerated, and some who even conceived of Osama bin Laden himself as a benign figure who had somehow got out of his depth.

There were also some puzzling elements in the report. The first was the rather outdated idea of hijacking an aircraft to demand the release of the Blind Sheikh. It felt more in tune with Palestinian terrorist methods of the 1970s, and it was already known that Ramzi Yousef had developed the idea of exploding full airliners in flight.

The involvement of Gama’at Islamiya (GI) seemed odd. Bin Laden was known to be close to Ayman Al-Zawahiri of Egyptian Islamic Jihad (EIJ), with whom GI were usually at daggers drawn. At the time GI were conceived of more as domestic Egyptian terrorists compared to the internationalist EIJ. Indeed, GI’s most recent operation had been the Luxor Massacre of November 1997, which killed 56 foreign tourists.


Go beyond the headlines with expert perspectives on today’s news with The Cipher Brief’s Daily Open-Source Podcast.  Listen here or wherever you listen to podcasts.


The name Islambouli carried great resonance. This was Mohammed Shawqi Islambouli, who had tried to assassinate Egyptian President Hosni Mubarak in Addis Ababa in 1995. His brother Khalid had been one of the assassins of President Anwar Sadat in October 1981 and had been tried and executed in Cairo. However, although Mohammed was thought to be in Afghanistan, he was not then known to be close to bin Laden, let alone Al-Zawahiri.

The dates made little sense. On the one hand an attack seemed imminent, but on the other hand it was ‘on hold’. But such is the nature of counterterrorist reporting: small fragments of a much bigger jigsaw.

Nonetheless, the report was taken very seriously on its receipt in the US. President Bill Clinton’s counterterrorism advisor Richard Clarke summoned his Counterterrorism Security Group. ‘To address the hijacking warning, the group agreed that New York airports should go to maximum security starting that weekend. They agreed to boost security at other East coast airports. The CIA agreed to distribute versions of the report to the FBI and FAA to pass to the New York Police Department and the airlines. The FAA issued a security directive on December 8, with specific requirements for more intensive air carrier screening of passengers and more oversight of the screening process, at all three New York City area airports.’

Of course, when 9/11 happened nearly three years later, there were two very significant differences. Although aircraft were indeed hijacked, they were used as missiles rather than as bargaining chips, and the terrorists were mainly Saudi and not Egyptian. So what happened between December 1998 and September 2001 which could explain these changes?

The 9/11 Commission report (drawing on material from the interrogation of Khalid Sheikh Mohammed) provides a fascinating section on AQ’s development of aviation methodology. Even before bin Laden had left Sudan in mid-1996, he had allegedly discussed the use of aircraft with Mohammed Atef: ‘(1) they rejected hijackings aimed at gaining the release of imprisoned comrades as too complex, because al Qaeda had no friendly countries in which to land a plane and then negotiate; (2) they considered the bombing of commercial flights in midair, as carried out against Pan Am Flight 103 over Lockerbie, Scotland, a promising means to inflict massive casualties; and (3) they did not yet consider using hijacked aircraft as weapons against other targets.’

So, why was the idea of a traditional hijacking still being discussed as late as December 1998? The answer must lie in the Egyptian jihadists’ determination to win the release of the Blind Sheikh. Mustafa Hamid, a journalist who was with bin Laden in Afghanistan, provides illuminating insight into the wrangling between EIJ and GI in Afghanistan. Hamid documents the tortuous process by which GI, with some reluctance, formed a union (‘The World Islamic Front against Jews and Crusaders’) with AQ, EIJ and others, but recounts how GI insisted on secrecy about their involvement. Hamid also describes GI’s determination to obtain the Blind Sheikh’s release and the involvement of one of their operatives in the African Embassy bombings (Mustafa Hamid and Leah Farrall, The Arabs at War in Afghanistan, p. 241 and pp. 263–266). So GI was indeed part of bin Laden’s group in Afghanistan and was involved in operations at the time of the December 1998 report.

However, bin Laden became increasingly irritated by the endless squabbling among the two Egyptian groups. Lawrence Wright, drawing upon a variety of sources, chronicles the disastrous attack on Luxor, which had the effect of alienating the Egyptian population from both groups. When on 23 February 1998 bin Laden’s second fatwa announcing the ‘World Islamic Front’ was published in an Arabic newspaper in London, GI were appalled, and some members tried to have Rahman pronounced emir instead of bin Laden. No wonder that Wright concludes that ‘bin Laden had had enough of the in-fighting between the Egyptian factions. He told both groups that their operations in Egypt were ineffectual and too expensive and that it was time for them to turn their guns on the United States and Israel’ (Lawrence Wright, The Looming Tower, pp. 290–296). This may explain why the December 1998 report mentions the operation being ‘on hold’. Between December and the spring of 1999, the GI team and Islambouli must have been stood down.

According to the 9/11 Commission report, in March or April 1999, Khalid Sheikh Mohammed (KSM) – who had hitherto allegedly been on the fringes of AQ – was summoned to Kandahar, where he discussed the aircraft plan with bin Laden and Mohammed Atef. Four operatives were chosen to begin work on the US project. However, ‘travel issues … played a part in al Qaeda’s operational planning from the very start. During the spring and summer of 1999, KSM realized that Khallad and Abu Bara, both of whom were Yemenis, would not be able to obtain US visas as easily as Saudi operatives like Mihdhar and Hazmi’. And so, the 9/11 plot developed with 15 of the 19 terrorists being Saudi nationals. Only Mohammed Atta was Egyptian.

KSM’s key involvement in the 9/11 plot makes it evident that there could not have been a second GI plot running in parallel, because KSM and Islambouli were close associates. Robert Baer and the 9/11 Commission report agree that KSM and Islambouli were working together in Qatar in the mid-1990s. For KSM it must have been difficult to abandon the rescue of his nephew, but he would have known that a traditional hostage release operation had none of the ambition or scale of bin Laden’s new thinking.

On 6 August 2001, only five weeks before the attacks, the December 1998 report featured once again in the PDB given to George W Bush at Crawford, Texas, entitled ‘Bin Laden determined to strike in US’. It began: ‘Clandestine foreign government and media reports indicate bin Laden since 1997 has wanted to conduct terrorist attacks in the US’, and concluded: ‘We have not been able to corroborate some of the more sensational threat reporting such as that from a [redacted] Service in 1998 saying that bin Laden wanted to hijack a US aircraft to gain the release of “blind Sheikh” Omar Abdal Rahman and other US-held extremists … Nevertheless, FBI information since that time indicates patterns of suspicious activity in this country consistent with preparations for hijackings or other types of attacks.’

The PDB of 6 August caused some discomfort to the Bush administration and led to a National Security Archive page devoted to that one PDB (of which the December 1998 British report was just one constituent part).

The CIA Director George Tenet, who had been a tireless pursuer of the AQ threat before 9/11 and a regular correspondent with and visitor to London, regretted that more had not been done ‘to protect the United States against the threat. To cite two obvious and tragic failures, only after 9/11 were cockpit doors hardened and passengers forbidden from carrying box-cutters aboard US commercial airliners’ (George Tenet, At the Centre of the Storm, p. 205).

The British report of December 1998 was fragmentary, and while it was certainly ‘sensational’, it was not half as sensational as the actual events of that unforgettable and tragic day.

The views expressed in this Commentary are the authors, and do not represent those of RUSI or any other institution.

Read more expert-driven national security insights, perspective and analysis in The Cipher Brief

The post The British and 9/11 appeared first on The Cipher Brief.

find more fun & mates at SoShow now !

As information emerges about Islamic State of Khorasan, or ISIS-K – the terrorist group that claimed responsibility for last week’s suicide attack that killed 13 US service members and more than 160 Afghans – there is an increased effort to predict how Afghanistan, under Taliban rule, may emerge once again as a breeding ground for terrorist groups.

A United Nations report released in June estimates that thousands of fighters from the region had already poured into Afghanistan.  Many of them are believed to be affiliated with either the Taliban – still seen as a terrorist organization – or al Qaeda or ISIS-K.

The New York Times reports that ISIS-K was created six years ago by members of the Pakistani branch of the Taliban.  There is a range of thought among experts as to what their ability to successfully carry out a terrorist attack in a Taliban-ruled area means for the terrorist threat moving forward. 

The Cipher Brief spoke with respected terrorism experts Bruce Hoffman, Mitch Silber and Colin Clarke to get their thoughts on the current risk of terrorist attacks against Americans both home and abroad. 

Bruce Hoffman, Terrorism Expert and Professor, Georgetown University

Cipher Brief Expert Bruce Hoffman is a professor at Georgetown University and served as a commissioner on the Independent Commission to Review the FBI’s Post-9/11 Response to Terrorism and Radicalization.  He is also a Scholar-in-Residence for Counterterrorism at CIA.

Mitch Silber, Former Director of Analysis, NYPD

Cipher Brief Expert Mitch Silber served as Director of Intelligence Analysis at the New York City Police Department and served as principal advisor to the Deputy Commissioner of Intelligence on counterterrorism policy and analysis. He is now executive director of the Community Security Initiative.

Colin Clarke, Director of Policy and Research, The Soufan Group

Colin P. Clarke, Ph.D., is the Director of Policy and Research at The Soufan Group. Clarke’s research focuses on domestic and transnational terrorism, international security, and geopolitics. He is also a senior research fellow at The Soufan Center.  

The Cipher Brief: If the United Nations Report issued in June is accurate, and there are thousands of fighters from the region who have poured into Afghanistan – many associated with known terrorist groups – is there any way that the administration can say ‘mission accomplished’ in terms of degrading terrorism’s presence in Afghanistan? 

Hoffman: No. As those numbers from the report released by the United Nations Support and Sanctions Monitoring Team highlight, Afghanistan is again becoming a jihadi magnet and will likely continue to be so into the future. The suicide bomb attacks outside the gates of Kabul International Airport last Thursday underscore the multiplicity of terrorist groups already present in that country.

In addition to ISIS-K, there is the Haqqani Network, al Qaeda and, of course, the Taliban. Terrorism thrives in conditions of chaos and instability which the terrorists hope to spread to other countries and eventually across regions.

Much as Salafi-Jihadi terrorists migrated from existing battlefields in South Asia back to the Middle East, North Africa, and the Caucasus in the 1990s; spread to East and West Africa in the early 2000s; blossomed during the Arab Spring to wage civil wars in Syria, Libya, and the Sahel, in the early twenty-teens; the same phenomenon is unfolding in Afghanistan.

Silber:  Frankly, I don’t think any of the four administrations can make the claim that the policy goal of making Afghanistan inhospitable to serve as a safe haven for Al Qaeda or other similarly oriented jihadist groups has been accomplished.  Certainly, at a number of times during the last twenty years, the threat that jihadist groups, most importantly — Al Qaeda — has presented, in terms of their ability to project a threat to the United States has been diminished, the degradation of the threat was only temporary.

The Cipher Brief: How confident are you that Al Qaeda and ISIS are unable to plan and execute attacks against the U.S. domestically? 

Hoffman:  The credulous Doha negotiations with the Taliban that led to the withdrawal of U.S. military forces from Afghanistan and subsequently to the Taliban’s blitzkrieg across Afghanistan and then to the shambolic evacuation of our diplomats and citizens, has painted a huge target on America’s back. Like sharks in the water, terrorists will smell blood. As my Council on Foreign Relations colleague, Jacob Ware, and I wrote in War on the Rocks, in May, every time terrorism has forced the U.S. to withdraw from a conflict zone where it had committed ground forces, whether in Lebanon in 1984; Somalia in 1993; and Iraq in 2011, it has led to more terrorism worldwide, not less, and thus made the U.S. less safe.

At a time when our country continues to grapple with the COVID pandemic; when climate change is pulverizing the Gulf States with Hurricane Ida and California with worsening wildfires; when the January 6th insurrection at the U.S. Capitol building continues to smolder with incidents such as the bomb threat that paralyzed the area near the Library of Congress and Cannon House Office Building earlier this month; coupled with ongoing cyberattacks and peer competition from China and Russia and concerns over Iran’s nuclear aspirations; our terrorist adversaries may well conclude that the U.S. is sufficiently preoccupied or distracted by any or all of the preceding and therefore conclude that the time to strike the homeland is opportune. It would very unlikely entail a repeat of the catastrophic September 11th 2001 attacks. But a terrorist strike along the lines of the 2019 shootings at Naval Air Station Pensacola; the 2017 suicide bombing of a concert venue in Manchester, England; the coordinated suicide attacks on London transport in 2005; the 2004 Madrid commuter train bombings; or any kind of significant lone wolf incident perpetrated in the name of some existing terrorist movement would likely re-create the widespread fear and anxiety that are terrorism’s stock-in-trade. Twice in the past three years, it should also be noted, members of al-Shabaab – perhaps al Qaeda’s least technologically proficient franchise – have been arrested both in the Philippines and in an undisclosed African country engaging in the same flight training that four of the 9/11 hijackers undertook before their fateful, history-changing coordinated attack.

Silber:  At this very moment, it is unlikely that Al Qaeda or ISIS-K have the infrastructure, resources, recruits and external planning ability to strike the United States based on statements by the IC and senior DoD officials to Congress.  However, without any, or only limited external pressure by the U.S. military as a result of the retreat from Afghanistan, these networks and capabilities can be reconstituted in the coming months and certainly groups like Al Qaeda have never given up their desire to strike the American homeland.

Clarke:  I think it is unlikely that AQ or ISIS will be able to attack the U.S. homeland.  We’ve spent the better part of the past two decades shoring up homeland defense. We’ve got CT tools now that we didn’t have twenty years ago. That said, the picture could look quite different 6, 12, 18 months from now. Both of those organizations are capable of regenerating an external operations planning capability. There is also the worry of inspired attacks.


The Cipher Brief hosts private briefings with the world’s most experienced national and global security experts.  Become a member today.


The Cipher Brief:  Some analysts have said that morale among terrorist or Islamic extremist groups is extremely high due to the circumstances surrounding the US pullout in Afghanistan, do you agree and if so what does that mean? 

Hoffman:  Yes. Of course. Both Sunni and Shi’a terrorist movements around the globe have applauded the Taliban’s re-conquest of Afghanistan and routing of the U.S. military. For Sunni Salafi-Jihadi terrorists, the events there this past month validate the strategy articulated by Usama bin Laden just before the 2004 U.S. presidential election, when he described the ease with which al-Qaeda had been able to “bled Russia for 10 years, until it went bankrupt and was forced to withdraw in defeat” from Afghanistan in 1989, and predicted that the same fate would eventually befall the U.S. And, Sayed Hassan Nasrallah, the Secretary-General of Hezbollah, a Shi’a terrorist organization, for instance, last week delivered a sermon where he described America’s “historic and humiliating defeat in Afghanistan as representing, “the moral downfall of America.”

Silber:  Jihadi chat rooms and online extremist networks are feeling like they have the wind behind them.  It took twenty years, but before the 20th anniversary of the attacks of 9/11 an Islamic emirate has been re-established in Afghanistan.  Suddenly, what seemed impossible has become possible and Islamist insurgencies all throughout the Middle East and South Asia can take inspiration by the determination of the Taliban in their efforts to overthrow a secular democratic government and replace it with an Islamist one.

Clarke:  I do expect morale to be high among terrorist and especially Islamic extremists given the turn of events we’ve seen in Afghanistan. We’re a week and a half out from the 20-year anniversary of 9/11, and Al Qaeda leaders are returning to Afghanistan (this is being displayed in AQ propaganda). We’ve seen al-Qaeda affiliates all over the globe congratulating the Taliban for their victory. I don’t want to overstate the case here, but I do believe that what has occurred in Afghanistan will be a serious boost for the global jihadist movement right at the same time the U.S. and its allies are shifting from counterterrorism to great power competition. There will be fewer resources and energy to deal with terrorists, right at the time we have major threats metastasizing in Afghanistan, potentially with both a reinvigorated al-Qaeda and a stubbornly resilient ISKP.

Read also Mike Leiter’s Why We’re Much Safer from Terrorism Now, Than We Were After 9/11 in The Cipher Brief 

Read also Why We Need a New National Defense Strategy (for terrorism) exclusively in The Cipher Brief 


Go beyond the headlines with expert perspectives on today’s news with The Cipher Brief’s Daily Open-Source Podcast.  Listen here or wherever you listen to podcasts.


 

The post The Risk of Terrorism at Home and Abroad appeared first on The Cipher Brief.

find more fun & mates at SoShow now !

As the U.S. works toward getting more 11,000 Americans, diplomats and Afghan allies out of the country, what kind of Taliban should the U.S. expect to deal with in Afghanistan?  So far, there have been assurances from the Taliban that a new regime may not be as brutal as regimes past, but few who have worked with the Taliban believe the assurances.  How might the regime work with, or shelter groups like al-Qaeda, which is the reason why the U.S. entered into Afghanistan after 9/11.  And how might a massive-scale exodus of Afghans impact neighboring countries?

The Cipher Brief sat down with the former National Intelligence Manager for Iran at ODNI, Norman T. Roule to get his expert-level perspective.

Norman T. Roule, Former National Intelligence Manager for Iran, ODNI

Cipher Brief Expert Norm Roule served for 34-years in the Central Intelligence Agency, managing numerous programs relating to Iran and the Middle East. He served as the National Intelligence Manager for Iran (NIM-I) at the Office of the Director of National Intelligence from November 2008 until September 2017.  As NIM-I, he was the principal Intelligence Community (IC) official responsible for overseeing all aspects of national intelligence policy and activities related to Iran, to include IC engagement on Iran issues with senior policy makers in the National Security Council and the Department of State.

The Cipher Brief: How would you characterize the international community’s response to the Taliban victory in Afghanistan?

Roule:  Historians of the future will likely describe the response to the Taliban victory as a strange mix of apathy and confusion.

In terms of apathy, there is extraordinary irony in the fact that after spending so much blood and treasure to defeat Da’esh efforts to establish an extremist Islamic Republic in Syria and impose its oppression over Iraqis and Syrians, the international community failed to prevent the creation of an Islamic Republic in Afghanistan. Many of the arguments behind our involvement in Syria – from a refugee crisis to the need to deny international Islamic militants a home to birth new terror groups – apply to Afghanistan. Whether or not one supported this decision, it is hard to avoid thinking that this episode will embolden militants worldwide.

In terms of confusion, we seem to be unable to accept that no one can predict the course and pace of crowd dynamics that so quickly eroded Afghan resistance. We live in a world where people acknowledge their inability to predict who will win our presidential elections but insist the Intelligence Community can somehow predict the day events will occur in a denied environment. But such a worst-case possibility should have been part of the planning deck and resourced on the ground accordingly.

The Cipher Brief: How would you expect the international community to respond in the coming days?

Roule: Absent a Taliban attack, operations at the airport should proceed more smoothly as our response architecture grows. Beyond that, much depends on how the Taliban act in the coming weeks. The group is not a monolith. Their success was highly likely as much a surprise to them as anyone. As they define their path and choose their leaders, there will be internal debates, jockeying for power, and perhaps some violent infighting.

In terms of indicators of the regime’s direction, we may want to consider the following questions:

First and foremost, how will the Taliban respond to our ongoing evacuation? Thus far, they seem willing to let us leave untouched, probably believing that the sooner we get out, the easier it will be for them to take control. At the same time, international media coverage of the evacuation will impose a strategic embarrassment on Washington.

Second, to what extent have the Taliban changed? They certainly understand that diplomacy played a role in their victory. Some of their leaders have spent hundreds of hours with foreign diplomats and traveled to multiple foreign capitals. How will these leaders merge such experiences into governance with more insular colleagues? They are likely to talk initially about compromise regarding women’s rights and inclusion of opponents in the government, but this may well be another effort to buy time. The international community has few pressure points over the group. How this plays out will be a good indicator of how they plan to run the country.

Next, how will they handle the issue of al-Qaida and other terrorists? We cannot overlook the deep connections between the Taliban and al-Qaida. If they believe the international community will limit its response to demarches, press statements, and empty sanctions, many in the group will be inclined to allow al-Qaida to reorganize.

Last, I would look at the refugee issue. They are likely to welcome external aid and allow at least some humanitarian groups to remain in country. Doing so requires no political concessions, addresses a domestic headache, and provides an opportunity for corruption. Humanitarian groups also offer a lever the Taliban can use against the West, i.e., refrain from criticizing us, or we will block your humanitarian operations. The Houthis have done this with great effect in Yemen.


The Cipher Brief hosts private briefings with the world’s most experienced national and global security experts.  Become a member today.


The Cipher Brief: How do you think will China, Russia, and other adversaries will respond to the withdrawal? 

Roule: Chinese propagandists have aggressively exploited our evacuation from Afghanistan. Its media is already claiming that these events show Taiwan that “once war breaks out in the Straits, the island’s defense will collapse in hours, and the US military won’t come to respond.” China’s press has also reportedly announced that the U.S. will not stand by Hong Kong activists.

Beijing, Tehran, and their proxies will likely point to the withdrawal as evidence that the U.S. is a declining power, unwilling or incapable of defending its friends. It will be lost on no one that whereas the U.S. has abandoned Afghanistan, Russia, China, and Iran have not wavered in support of their – admittedly few and otherwise isolated – allies.

In a worse case, if our adversaries believe the withdrawal reflects a lack of national resolve, they may be tempted to test our will on other issues. In this case, a miscalculation could lead to a conventional war in another theater.

The Cipher Brief: What would you say to those who say that the withdrawal demonstrates that the U.S. will only focus on strategic interests?

Roule:  Certainly, this argument has an appeal. It is true that our strategic adversaries like nothing better than the U.S. expending resources and diplomatic energy in such areas as Afghanistan, in part because we are, in essence, protecting their interests for free. But it does beg two questions.

First, what will happen differently next year regarding China, Russia, efforts to combat climate change, and cyber actors, now that we are out of Afghanistan? Second, what exactly is a U.S. strategic interest that we would protect? Estonia? Bahrain? Taiwan?

This argument also glosses over how others respond to such a posture. If a country perceives itself outside the international community’s protection, it will likely accommodate an aggressor. Our next call for a coalition of the willing will likely meet with less enthusiasm.

U.S. influence depends on the respect shown to us in multiple arenas. The echoes of this localized respect become self-reinforcing. We should think about what happens to collective international security if these echoes are silenced.

Last, this argument inherently argues that values are strategic interests. Unless violence directly touches Americans, we will limit our response to diplomacy and public statements. Such protests are unlikely to stop those behind a future Srebrenica massacre or the Rwandan genocide. Indeed, one can make a case that such a response might even encourage such events.

The Cipher Brief: How can the U.S. now best demonstrate its national resolve?

Roule:  As the saying goes, the best way to demonstrate national resolve is to demonstrate national resolve. Fair or not, this episode will tar the Biden administration. It doesn’t help that some allies reportedly have complained that the U.S. did not sufficiently consult with them on its decision to withdraw. Public criticism of the withdrawal decision by some of our closest European partners is growing. Adversaries will now consider their action through the lens of Afghanistan, much as the post-Vietnam malaise encouraged Soviet aggression in the 1970s.

I am not saying that we can’t reverse this situation. The U.S. withdrawal from Lebanon in 1984 caused many to question U.S. resolve. Although it did signal an end to U.S. (and international) efforts to eradicate Hezbollah, Reagan’s actions in other arenas (to include Afghanistan) restored the image of U.S. national resolve. Difficult diplomacy and a demonstration of our willingness to use military power when needed lay ahead.


Go beyond the headlines with expert perspectives on today’s news with The Cipher Brief’s Daily Open-Source Podcast.  Listen here or wherever you listen to podcasts.


The Cipher Brief: What does the return of the Taliban mean for al-Qaeda?

Roule:  There is little reason to believe the Taliban-Al-Qaida relationship will not resume, although al-Qaeda is a fragmented and a pale version of its original stature. Nonetheless, it is easy to imagine the delight of its remaining leadership and cadres. Elements in Iran will likely seek to return to Afghanistan, perhaps assuring Iran that in exchange for tolerance of periodic transit of Iranian territory, the group will use its influence with the Taliban to protect Iran’s interests. We should watch for any signs of a return to Afghanistan by Zawahiri’s deputy, Sayf al-Adel, who is currently in Iran with other members of the group’s leadership council.

But al-Qaeda is not the only actor on this stage. Its leader Ayman al-Zawahiri has not appeared for months and has far less influence than Osama Bin Laden. Afghanistan also hosts al-Qaeda in the Indian Subcontinent (AQIS), ISIS, and other groups. The Taliban have emptied Afghanistan’s prisons which held deeply committed and dangerous militants who may gravitate to whatever new militant leadership might arise. But a lethal threat to Americans is sure to appear. The only questions are its size, goals, and reach.

The Cipher Brief: What does the U.S. withdrawal mean for China and Russia?

Roule: Both countries have sought to undercut U.S. influence in Afghanistan. They will each be delighted with the rhetorical violence of our internal debate over the withdrawal. But they also enjoyed the stability our engagement provided in a country so close to their borders.

Both countries have developed relations with the Taliban. I believe each hosted a Taliban delegation in recent weeks. It shouldn’t be lost on us that neither country felt compelled to withdraw its personnel from Kabul. That’s a pretty good sign of their confidence in the relationship.

Outside of Afghanistan, each will use the withdrawal to increase their influence with Central Asian actors – including Turkey. Coordination on terrorism and narcotics issues will come most easily. For example, Uzbekistan will worry that the Taliban will renew support of the violent Islamic Movement of Uzbekistan, which has long maintained a presence in Afghanistan.

China’s concerns will be threefold. Beijing will use economic and diplomatic inducements to ensure that the Taliban do not encourage unrest among China’s oppressed Uighur population, let alone support the East Turkistan Islamic Movement or other Chinese militants in Xinjiang province. Next, Beijing will want to explore the Belt and Road access Afghanistan offers. Last, China will likely test whether it can achieve a commercially viable deal to mine Lithium and other minerals. In that mine operations require many years to develop and a vast amount of capital to construct, such arrangements are likely to be few given Afghanistan’s unpredictable political and security environment.

As for Russia, the U.S. withdrawal offers a chance for greater influence in Central Asia. We should watch for signs of new Russian military bases in the region. Moscow’s concern that Afghanistan will once more become a sanctuary for anti-Russian terrorists will also drive its relationship with the Taliban.

The Cipher Brief: What about Iran and Pakistan?

Roule: Iran has long maintained a relationship with Taliban elements. Reportedly, this involved sanctuary and provision of some weaponry. Tehran’s goals were to hedge its bets in Afghanistan, influence the enemies of the U.S., and protect the Shi’a of Afghanistan.

On the last point, Iran may have much work to do. Taliban personnel reportedly tore down Shi’a posters as they entered Kabul. Tehran must now contend with the consequences of refugees and the rise of warlords on its border.

The current head of Iran’s Qods Force, Esmail Qaani, has considerable experience on Afghan issues, and I expect he will play a prominent role in Iran’s response. We should watch to see how the Qods Force deploys its seasoned Afghan Fatemiyoun proxies from Syria.

Pakistan’s long-time relationship with the Taliban will give it more influence over the group than other countries. But Islamabad also will be on the receiving end of a flood of refugees, renewed militant terrorism in its loosely-controlled border areas, and Western pressure for its support of the Taliban. Ties to the Taliban may also complicate Islamabad’s relationship with India and China.

The Cipher Brief: What does this mean for the U.S. intelligence community?

Roule: The counterterrorism cadre of the US intelligence community and its partners have achieved extraordinary successes in the last years. But their work is now more complicated but no less urgent. For example, our withdrawal has reduced collection streams and potential access when the Afghanistan-based terrorist threat has only begun to grow. This challenge arrives as we shift counterterrorism resources from al-Qaeda to domestic extremists, cyber threats, and China.

The Cipher Brief: Any final comments?

Roule: If I may, I would like to close with a couple of brief comments.

First, we need to do everything we can to support personnel on the ground in Afghanistan. They – and their support teams at home – are trying to restore order in the middle of a hurricane. We are watching heroism at its best.

Next, the narrative of Afghanistan is unsurprisingly partisan. But politics shouldn’t obscure the truth. For more than twenty years, thousands of American and coalition partners volunteered to risk their lives in Afghanistan. We didn’t come to colonize. We didn’t steal Afghan resources. The operational goals were to bring Bin Laden to justice, destroy al-Qaeda, and prevent Afghanistan from becoming a haven for the group in the future. We also worked to transform Afghan society. The need for this last effort wasn’t apparent at the outset of our invasion. But it was likely unavoidable if we hoped to satisfy our values and enable Afghan society to confront its militant population. This effort represents the best of our values, and we owe all who served in this arena our most profound respect. Afghans who have participated in their country’s efforts during the past two decades will endure tremendous suffering. But they remain Afghanistan’s best hope and they deserve our support. Last, we need to end the fiction that Afghans didn’t fight for their country. Tens of thousands of Afghans were killed and wounded in the fight against al-Qaeda. Many involved in this fight are reportedly being sought door-to-door by the Taliban. Discounting their efforts may serve a political narrative, but it does them a terrible injustice.

Read more expert-driven national security insights, perspective and analysis in The Cipher Brief

 

The post What Should the U.S. Expect from the ‘New’ Taliban Regime? appeared first on The Cipher Brief.

find more fun & mates at SoShow now !

Hard-line cleric Ebrahim Raisi won Iran’s presidential election on Saturday in a move that is expected to bolster the conservative legacy of the country’s supreme leader, Ayatollah Ali Khamenei.

The decision is not expected to derail ongoing negotiations aimed at restoring the Joint Comprehensive Plan of Action (JCPOA) nuclear deal, even though Mr. Raisi himself is under US sanctions over accusations of human rights abuses.  Many voters stayed away from the polls as the outcome had been predicted for months with many progressive candidates barred from running.

The Islamic Republic has entered a post-revolutionary dynamic in which a fading revolutionary generation seeks to ensure that the rising political leadership sustains their revolutionary ideals,” says Norman T. Roule, former National Intelligence Manager for Iran at ODNI and Cipher Brief Expert. “The regime’s decision to bar so many candidates and the low turnout make this election a historic embarrassment for the regime and its supporters.”

The Cipher Brief talked with Roule about what the election means and what it doesn’t mean when it comes to relations with the west, the progressive movement within Iran and the election’s impact on the oil markets.


“The Cipher Brief has become the most popular outlet for former intelligence officers; no media outlet is even a close second to The Cipher Brief in terms of the number of articles published by formers.” – Sept. 2018, Studies in Intelligence, Vol. 62 No.

Access all of The Cipher Brief’s national-security focused expert insight by becoming a  Cipher Brief Level I Member .  

 

 

The post What Iran’s Election Tells Us About Where It’s Headed appeared first on The Cipher Brief.

find more fun & mates at SoShow now !

Controversial agriculture laws that saw farmers across India protesting for over a year are going to be rolled back, Prime Minister Narendra Modi has unexpectedly announced.

“I want to tell the country that we have decided to repeal the three farm laws,” Modi said in a televised address on Friday, which local media described as “stunning.”

The Indian parliament will complete the constitutional process of repealing the agricultural legislation in late November, he added.

However, the PM again defended the divisive legislation, saying that the reform of the sector, which accounts for some 15% of India’s $2.7 trillion economy, was actually aimed at supporting the country’s small farmers.

Whatever I did was for farmers. What I am doing is for the country.

“Maybe something was lacking in our efforts, which is why we couldn’t convince some farmers about the laws,” Modi acknowledged.

Read more

Farmers block railway tracks as part of protests against farm laws during nationwide protests, in Sonipat, northern state of Haryana, India, September 27, 2021. © Reuters / Anushree Fadnavi
Indian farmers return to hold nationwide protests against last year’s agriculture laws

The laws, which were introduced last September, allowed farmers to sell their crops outside of the government-regulated wholesale markets, in which they were guaranteed a minimum price.

The government argued that it would see them earning more, but growers feared that that move would, on the contrary, cause a drop in prices and make them hostages to large corporations.

Thousands of farmers joined the protests against what they called “black laws,” and some rallies turned violent. A year later, many demonstrators remain camped along roads outside the capital New Delhi.

And the farmers aren’t planning on going home just yet, with one of their leaders saying on Twitter: “We will wait for parliament to repeal the laws.”

Modi’s concession to the protesters may have been unexpected, but it comes several months ahead of elections in India’s most populous state of Uttar Pradesh, as well as two other northern states with large rural populations.

Think your friends would be interested? Share this story!

find more fun & mates at SoShow now !

UK Home Secretary Priti Patel has acted to proscribe the Palestinian group Hamas “in its entirety,” stating that it has significant capacity to carry out terrorist acts and has facilities to train attackers.

In a tweet on Friday, Patel stated that she had banned the Palestinian group Hamas and designated it a terrorist organization, as she reiterated the British government’s commitment to “tackling extremism and terrorism wherever it occurs.”

Read more

The Imperial War Museum (FILE PHOTO) © REUTERS/Suzanne Plunkett
Woke rap after moment of silence lands museum in trouble

“Hamas has significant terrorist capability, including access to extensive and sophisticated weaponry, as well as terrorist training facilities,” she wrote.  

The home secretary’s tweet came during her visit to Washington and followed speculation on Friday morning that she was soon to outlaw the group.

Pre-empting Patel’s announcement, Israeli Prime Minister Naftali Bennett welcomed Britain’s intention” on Twitter.

“Hamas is a radical Islamic group that targets innocent Israelis & seeks Israel’s destruction. I welcome the UK’s intention to declare Hamas a terrorist organization in its entirety – because that’s exactly what it is,” Bennett wrote, thanking the leadership of Prime Minister Boris Johnson.  

Yair Lapid, Israel’s foreign minister, also hailed the expected move against Hamas, saying it was part of strengthening ties with Britain.” 

Until now, only Hamas’ military wing, the Izz al-Din al-Qassam Brigades, had been outlawed by the British government. The EU and the US have already proscribed all of Hamas.

Hamas political official Sami Abu Zuhri rejected Britain’s move, claiming it showed absolute bias toward the Israeli occupation and is a submission to Israeli blackmail and dictations.” 

In a separate statement, the group claimed it had a right to resist occupation by all available means, “including armed resistance.”

Hamas seized total control of Gaza in 2007, on the back of an election victory in 2006.

If you like this story, share it with a friend!

find more fun & mates at SoShow now !

A pack of wild boars were rounded up and euthanized after one of the animals attacked a police officer in the streets of Hong Kong – the opening shot in a pitched battle between the feral hogs and the city’s law enforcement.

A group of veterinarians took seven wild boars into custody, euthanizing the beasts after knocking them out with dart guns in an area near the financial center of the city, according to a statement from Hong Kong’s Agriculture, Fisheries, and Conservation Department on Thursday.

The pigs were captured after one attacked a police officer last week, an act which reflects the city’s new policy toward the animals: stop them before they attack again.

The aggressive boar knocked down a police officer by biting his leg last week as the two faced off in a residential car park, the pig only losing the battle after falling off the building to its death. The wild boars are apparently “accustomed” to wandering back and forth along the roadway, begging for food from pedestrians and vehicles alike. Previously, the city had handled the population by capturing and sedating the animals, then relocating them to “remote areas,” according to the the department.

Hong Kong CEO Carrie Lam vowed to increase penalties for those citizens found feeding the boars, which have reportedly been responsible for some 30 attacks in recent years. While residents are warned not to feed the boars so as not to encourage population growth or disease outbreaks, the animals are a favorite among some visitors. Still, Lam insisted “we can’t simply sit on our hands while things deteriorate.”

Animal rights groups have responded with a protest letter against a policy of euthanasia, pointing out that most visitors do not feed the boars and arguing resources should be directed toward stopping the human activity rather than blaming all the boars. Allowing the boars to be captured and killed “ignores their right to live and considers their existence in urban areas as a capital offense,” the letter read.

Like this story? Share it with a friend!

find more fun & mates at SoShow now !

Chris Inglis’ new White House office has a startup feel to it. There are desks, a few chairs, a coffee maker and a poster hanging on the wall.  But as the head of the newly established Office of the National Cyber Director, Inglis has to make due with what he has while still advising President Joe Biden on the smartest ways for the US to prevent and respond to cyberattacks.

Inglis has already had numerous conversations with the president, who has made clear that the government has a role to play in the defense of the private sector and in assisting the private sector in defending critical infrastructure.  And the president knows, says Inglis, that means the government needs to get its own cyber house in order. 

But like any real startup, Inglis’ resources are scarce.  More than three months after being confirmed by the Senate, he still doesn’t have the full staff he needs to take on his timely and critical mission.  That’s because the funding for his office – some $21 million, part of the $1 trillion infrastructure bill making its way through Congress – is still stuck in the political spin cycle.  Why does it matter?

“The threat is greater than I can ever remember,” Inglis told me during last month’s AFCEA and INSA Intelligence & National Security Summit in National Harbor, Maryland. “The audacity, the brazenness, the thresholds that have been crossed at every turn; we’re in a difficult place.”

While he’s waiting for Congress to act, he says he’s spending about fifty percent of his time defining his role, being careful not to duplicate the work already being done by other agencies and departments, while spending another fifty percent building relationships that will be important later.  Eventually, he’s expected to have a staff of some 75 people who will be expected to work hand in glove with CISA, the National Security Council’s cyber staff, the OMB and others.  The remaining fifty percent of his time, Inglis jokes, is spent figuring out how to attract the country’s best talent.   

“People are starting to flow into the organization. I’m confident that we’re coming up to a breakout moment, not for the National Cyber Director, but the contribution that we can and should make. I’m sobered by the nature of the challenge, I’m optimistic we can make a difference.”

Optimistic he is.  And he’s not even complaining about being given a critical task for US national security and then having to wait for politics to play out before being able to act on it.

“It has been a semi-silver lining in that we would not have had time to think about how we want to apply the resources coming our way.”

While Inglis has been waiting, he and his small team have had time to think about the four things they’d like to focus on right away. 

First, is streamlining the roles and responsibilities in government of who handles what when it comes to protecting the public and private sectors from cyberattacks.  He also spoke during his confirmation hearing about the importance of allocation of resources and while the Office of the National Cyber Director doesn’t have the authority to move money, it does have what Inglis calls the responsibility to account for cyber money.

“One of the most critical gaps in cyber is that the physical digital infrastructure is not built to a common standard. The executive order related to this requires that within a certain amount of time we have to install basic procedures like multifactor authentication and encryption of stored material. That is a challenge and a potential vulnerability for us. We need to make sure that we make these investments necessary to buy down the lack of investment for years.

The second gap is in talent related to number of people required to occupy these jobs. It’s not simply the folks with IT or cyber in their name, but general cyber awareness. There is some expenditure of resources of time, attention, and money to get awareness right on the part of the truly accountable parties like agency and department heads. We have to make sure they don’t see cyber as a cost center, but an enabler on the part of all the users as they understand what their roles are and what the accountability is.

He admits there is still a level of education needed within government to get there.

That is usually the case in both the government and the private sector,” he said.  “We need to think this way about cyber and invest in cyber so that we can enable the mission, not hold it back. I think that education is the most important and effective way to handle this. Then, it is to make sure that the accountability is aligned and harmonized. We tend to take risk in one place and expect someone in another place to be the mitigator of a risk they don’t understand was taken in the first place. We need to operate in a collaborative fashion and get away from divisions of effort which are an agreement not to collaborate and allow adversaries to pick us off one at a time.”

Inglis says that unity of effort must start at home.  “The executive order issued in May has begun to lay out common expectations about the hardware, software, and practices that we need to begin in those spaces,” he said.  “Externally, if we have sector risk management agencies who engage the private sector for the purposes of supporting and engaging the critical components of that infrastructure, we need to make sure you don’t need a Ph.D. in government to know who to deal with and what you’re going to get from them.”

He is arguing for the government to also put ‘valuable material’ on the table.  “That could be our convening power,” said Inglis. “We could perhaps address and reduce liability or give companies a clue as to what might be around the corner because the government has access to exquisite intelligence. If that setup is possible, we also need a venue where collaboration takes place. Information doesn’t collaborate, people do.”

Inglis likes to point to the example of CISA and the Joint Cyber Collaborative.  “They put people from the private sector and the public sector side by side to co-discover threats that hold us at common risk. That project sets up the possibility of implicit collaboration in what we then do with that common operational picture. The government could take ideas that private sector companies turn into proprietary systems and enrich and classify them to deal with it in their system.”

Using what he calls “all the tools in the toolkit,” Inglis also notes the importance of international relationships, which fits nicely into the White House’s International Summit on Ransomware last week in Washington, which zeroed in on tighter cryptocurrency standards, among other things. “Beyond the Five Eyes, what do other like-minded nations think about what is expected behavior in this? What are governmental actions that are appropriate,” he asked.  

Inglis has been an active participant in the president’s recent actions in cyber.  He took part in a White House meeting with tech leaders in August that was hosted by President Biden, who Inglis says, spent the first hour sharing his vision about how the country should focus on collaborative integration.  “The companies represented weren’t only companies like Microsoft and Apple, but people who operate in the critical infrastructure space,” said Inglis.  “The people component, educators, were represented reflecting the president’s view that cyberspace is not just technology, it is also the people component. They are a major link in the chain, and we need to get the roles and responsibilities right.”

While he’s waiting for the funding he needs to get his office fully staffed, Inglis said he’s also putting thought into reconciling resources with aspirations.  Managing expectations is going to be important.  Frustration has been growing for years over what some see as a lack of government response to some of the largest hacks in history.  The phrase ‘time and place of our choosing’ as a definition of response has grown old and some Americans are weary of a government that isn’t responding in a more public way to the beating it sees the US taking in cyberspace.

So, I asked Inglis whether there should be red lines in cyber.

“Red lines are both good and bad,” he answered.  “They are clear and crisp, and everybody knows what they are. The downside is that because of that, an adversary knows exactly how far they can go. It means that you set up a somewhat permissive environment. Red lines also don’t have context; sometimes there is a reason that a defender would make the ransomware payment. As a matter of policy, the U.S. government does not pay ransomware, but I imagine there will be a situation at some point where a hospital is against the Russian state and actual life and safety is at risk. If there is no other way to get the material back, in order to get back in the business of saving lives, they would want to rethink if a red line is a red line in that particular situation. I think the right thing to do here is not to establish hard thresholds of things with scripted responses, but outline what we are prepared to defend and what principles we will exercise in defense of those things. We commit to defending the private sector when it is held at risk by a nation state in cyberspace as much as in the kinetic space and make that clear to adversaries. I think that would be more helpful in changing decision calculus and creating a useful ambiguity about when and where we will come in.”

Inglis said he’s also thinking a lot about present and future resilience.  It’s a worthwhile focus, given that the White House estimates that nearly half a million public and private sector cybersecurity jobs are currently unfilled. 

“That is a massive problem,” said Inglis. “However, the more insidious problem is that the 320 million people in the United States who use the internet who have no idea how to properly take their place on the front lines of this issue. There is an awareness issue that requires us not to make Python programmers out of them but to make sure they understand the nature of this space.”

Everyone has heard the old saying that time is money, but in Inglis’ case, time is security so I asked him point blank whether he thought government was moving has quickly as it should on the cyber problem.

“Government is moving at speed; the question is if it is at the necessary speed. I don’t think anyone is moving at the necessary speed. Some are moving at light speed, but at the end of the day, we need an integrated, collaborative approach. While we won’t have unity of command, I think there needs to be a universally felt sense of urgency so that we will all get our heads in the game.”

Congress, are you listening?  Oh, and by the way, that poster in Inglis’ office? It reads, ‘Hours Since the Last Surprise.”

As a startup with maybe too few resources at the start and who often didn’t understand how all the wickets are run, we have our occasional surprise,” said Inglis.  “When we encounter those surprises and go to someone with the deep and sharp expertise to help us navigate that, we get what we need. However, we are not a full functioning, full featured, fully capable organization yet. We’re trying to build somebody else’s airplane while we’re free falling from our own. We have a parachute, and we can land safely, but it is a bit of a challenge at times.”

Find out more about why experts like former NSA Director General Keith Alexander (Ret.), Mandiant CEO Kevin Mandia and others have joined The Cyber Initiatives Group, powered by The Cipher Brief

Read more expert national security insights, perspective and analysis in The Cipher Brief

The post Chris Inglis and the Gathering Cyber Storm appeared first on The Cipher Brief.

find more fun & mates at SoShow now !