When the PRC decides to move on Taiwan, it is unlikely to move in a manner that makes a US decision on intervention clear cut.  Should China decide, initially at least, against a full-scale invasion of that island nation, it could instead opt to try to “win without fighting.” Beijing might do so by using its large, state-controlled fishing fleet to cut smaller Taipei-controlled islands off from Taiwan itself much as the PRC is now massing fishing boats to expand Chinese-controlled seas to press claims on the Japanese Senkakus and Whitsun Reef in Philippine waters. Chinese state-owned fisheries companies – part of the so-called ‘Maritime Militia’ – serve as fronts for PLA intelligence. Using their fleets to operate in a manner somewhere between peace and conflict in the gray zone of contested control around Taiwan would allow Beijing to test whether the US and its allies are willing to help defend the island’s independence without being seen to initiate open conflict.

“The Cipher Brief has become the most popular outlet for former intelligence officers; no media outlet is even a close second to The Cipher Brief in terms of the number of articles published by formers.” – Sept. 2018, Studies in Intelligence, Vol. 62 No.

Access all of The Cipher Brief’s national-security focused expert insight by becoming a  Cipher Brief Level I Member .  

 

 

The post Why the China – Russia Relationship Should Worry You – Part Two appeared first on The Cipher Brief.

find more fun & mates at SoShow now !

The EU Commission has released draft legislation aimed at tackling the destruction of woodland by introducing import restrictions on products not certified as ‘deforestation-free’.

The draft proposal, which the commission hopes will become binding rules for all member states, seeks to limit the import of beef, cocoa, coffee, palm, soy, and wood if it is not proven “deforestation-free.”

Outlining the legislation, the EU commissioner for climate action policy, Virginijus Sinkevicius, called it a “ground-breaking” proposal that will help fight “illegal deforestation” and “deforestation driven by agricultural expansion.”

The bill comes after nations at the COP26 summit agreed to work to end deforestation by 2030. It would impose two criteria on imports, requiring items to have been produced in accordance with the origin country’s laws, and not on land that has been deforested or degraded since the start of 2021.

It is not clear when the rules would come into effect; legislative proposals by the commission have to be debated and considered by both the EU Parliament and the Council of the EU before they are passed. The implementation of measures could potentially impact the EU’s trade relations with countries like Brazil, where clearing of the Amazon rainforest hit a new record in October.

During the recent COP26 climate summit, 110 world leaders – whose countries contain around 85% of the world’s woodland – committed to ending and reversing deforestation by 2030, pledging around £14 billion ($18.84 billion) of public and private funds towards the goal.

Like this story? Share it with a friend!

find more fun & mates at SoShow now !

A Roadmap for AI in the Intelligence Community

(Editor’s Note: This article was first published by our friends at Just Security and is the fourth in a series that is diving into the foundational barriers to the broad integration of AI in the IC – culture, budget, acquisition, risk, and oversight.  This article considers a new IC approach to risk management.)

OPINION — I have written previously that the Intelligence Community (IC) must rapidly advance its artificial intelligence (AI) capabilities to keep pace with our nation’s adversaries and continue to provide policymakers with accurate, timely, and exquisite insights. The good news is that there is strong bipartisan support for doing so. The not-so-good news is that the IC is not well-postured to move quickly and take the risks required to continue to outpace China and other strategic competitors over the next decade.

In addition to the practical budget and acquisition hurdles facing the IC, there is a strong cultural resistance to taking risks when not absolutely necessary. This is understandable given the life-and-death nature of intelligence work and the U.S. government’s imperative to wisely execute national security funds and activities. However, some risks related to innovative and cutting-edge technologies like AI are in fact necessary, and the risk of inaction – the costs of not pursuing AI capabilities – is greater than the risk of action.

The Need for a Risk Framework

For each incredible new invention, there are hundreds of brilliant ideas that have failed. To entrepreneurs and innovators, “failure” is not a bad word. Rather, failed ideas are often critical steps in the learning process that ultimately lead to a successful product; without those prior failed attempts, that final product might never be created. As former President of India A.P.J. Abdul Kalam once said, “FAIL” should really stand for “First Attempt In Learning.”

The U.S. government, however, is not Silicon Valley; it does not consider failure a useful part of any process, especially when it comes to national security activities and taxpayer dollars. Indeed, no one in the U.S. government wants to incur additional costs or delay or lose taxpayer dollars. But there is rarely a distinction made within the government between big failures, which may have a lasting, devastating, and even life-threatening impact, and small failures, which may be mere stumbling blocks with acceptable levels of impact that result in helpful course corrections.


The Cipher Brief hosts private briefings with the world’s most experienced national and global security experts.  Become a member today.


As a subcommittee report of the House Permanent Select Committee on Intelligence (HPSCI) notes “[p]rogram failures are often met with harsh penalties and very public rebukes from Congress which often fails to appreciate that not all failures are the same. Especially with cutting-edge research in technologies … early failures are a near certainty …. In fact, failing fast and adapting quickly is a critical part of innovation.” There is a vital difference between an innovative project that fails and a failure to innovate. The former teaches us something we did not know before, while the latter is a national security risk.

Faced with congressional hearings, inspector general reports, performance evaluation downgrades, negative reputational effects, and even personal liability, IC officers are understandably risk-averse and prefer not to introduce any new risk. That is, of course, neither realistic nor the standard the IC meets today. The IC is constantly managing a multitude of operational risks – that its officers, sources, or methods will be exposed, that it will miss (or misinterpret) indications of an attack, or that it will otherwise fail to produce the intelligence policymakers need at the right time and place. Yet in the face of such serious risks, the IC proactively and aggressively pursues its mission. It recognizes that it must find effective ways to understand, mitigate, and make decisions around risk, and therefore it takes action to make sure potential ramifications are clear, appropriate, and accepted before any failure occurs. In short, the IC has long known that its operations cannot be paralyzed by a zero-risk tolerance that is neither desirable nor attainable. This recognition must also be applied to the ways in which the IC acquires, develops, and uses new technology.

This is particularly important in the context of AI. While AI has made amazing progress in recent years, the underlying technology, the algorithms and their application, are still evolving and the resulting capabilities, by design, will continue to learn and adapt. AI holds enormous promise to transform a variety of IC missions and tasks, but how and when these changes may occur is difficult to forecast and AI’s constant innovation will introduce uncertainty and mistakes. There will be unexpected breakthroughs, as well as failures in areas that initially seemed promising.

The IC must rethink its willingness to take risks in a field where change and failure is embraced as part of the key to future success. The IC must experiment and iterate its progress over time and shift from a culture that punishes even reasonable risk to one that embraces, mitigates, and owns it. This can only be done with a systematic, repeatable, and consistent approach to making risk-conscious decisions.

Today there is no cross-IC mechanism for thinking about risk, let alone for taking it. When considering new activities or approaches, each IC element manages risk through its own lens and mechanisms, if at all. Several individual IC elements have created internal risk assessment frameworks to help officers understand the risks of both action and inaction, and to navigate the decisions they are empowered to make depending upon the circumstances. These frameworks increase confidence that if an activity goes wrong, supervisors all the way up the chain will provide backing as long as the risk was reasonable, well-considered and understood, and the right leaders approved it. And while risk assessments are often not precise instruments of measurement – they reflect the quality of the data, the varied expertise of those conducting the assessments, and the subjective interpretation of the results – regularized and systematic risk assessments are nevertheless a key part of effective risk management and facilitate decision-making at all levels.


Go beyond the headlines with expert perspectives on today’s news with The Cipher Brief’s Daily Open-Source Podcast.  Listen here or wherever you listen to podcasts.


Creating these individual frameworks is commendable and leading-edge for government agencies, but more must be done holistically across the IC. Irregular and inconsistent risk assessments among IC elements will not provide the comfort and certainty needed to drive an IC-wide cultural shift to taking risk. At the same time, the unique nature of the IC, comprised of 18 different elements, each with similar and overlapping, but not identical, missions, roles, authorities, threats and vulnerabilities, does not lend itself to a one-size-fits-all approach.

For this reason, the IC needs a flexible but common strategic framework for considering risk that can apply across the community, with each element having the ability to tailor that framework to its own mission space. Such an approach is not unlike how the community is managed in many areas today – with overarching IC-wide policy that is locally interpreted and implemented to fit the specific needs of each IC element. When it comes to risk, creating an umbrella IC-wide framework will significantly improve the workforce’s ability to understand acceptable risks and tradeoffs, produce comprehensible and comparable risk determinations across the IC, and provide policymakers the ability to anticipate and mitigate failure and unintended escalation.

Critical Elements of a Risk Framework

A common IC AI risk framework should inform and help prioritize decisions from acquisition or development, to deployment, to performance in a consistent way across the IC. To start, the IC should create common AI risk management principles, like its existing principles of transparency and AI ethics, that include clear and consistent definitions, thresholds, and standards. These principles should drive a repeatable risk assessment process that each IC element can tailor to its individual needs, and should promote policy, governance, and technological approaches that are aligned to risk management.

The successful implementation of this risk framework requires a multi-disciplinary approach involving leaders from across the organization, experts from all relevant functional areas, and managers who can ensure vigilance in implementation. A whole-of-activity methodology that includes technologists, collectors, analysts, innovators, security officers, acquisition officers, lawyers and more, is critical to ensuring a full 360-degree understanding of the opportunities, issues, risks, and potential consequences associated with a particular action, and to enabling the best-informed decision.

Given the many players involved, each IC element must strengthen internal processes to manage the potential disconnects that can lead to unintended risks and to create a culture that instills in every officer a responsibility to proactively consider risk at each stage of the activity. Internal governance should include an interdisciplinary Risk Management Council (RMC) made up of senior leaders from across the organization. The RMC should establish clear and consistent thresholds for when a risk assessment is required, recommended, or not needed given that resource constraints likely will not allow all of the broad and diverse AI activities within organizations to be assessed. These thresholds should be consistent with the IC risk management principles so that as IC elements work together on projects across the community, officers have similar understandings and expectations.

The risk framework itself should provide a common taxonomy and process to:

  • Understand and identify potential failures, including the source, timeline, and range of effects.
  • Analyze failures and risks by identifying internal vulnerabilities or predisposing conditions that could increase the likelihood of adverse impact.
  • Evaluate the likelihood of failure, taking into consideration risks and vulnerabilities.
  • Assess the severity of the potential impact, to include potential harm to organizational operations, assets, individuals, other organizations, or the nation.
  • Consider whether the ultimate risk may be sufficiently mitigated or whether it should be transferred, avoided, or accepted.

AI-related risks may include, among other things, technology failure, biased data, adversarial attacks, supply chain compromises, human error, cost overruns, legal compliance challenges, or oversight issues.

An initial risk level is determined by considering the likelihood of a failure against the severity of the potential impact. For example, is there is a low, moderate, or high likelihood of supply chain compromise? Would such a compromise affect only one discrete system or are there system-wide implications? These calculations will result in an initial risk level. Then potential mitigation measures, such as additional policies, training, or security measures, are applied to lower the initial risk level to an adjusted risk level. For example, physically or logically segmenting an organization’s systems so that a compromise only touches one system would significantly decrease the risk level associated with that particular technology. The higher the likelihood of supply chain compromise, the lower the severity of its impact must be to offset the risk, and vice versa. Organizations should apply the Swiss Cheese Model of more than one preventative or mitigative action for a more effective layered defense. Organizations then must consider the adjusted risk level in relation to their tolerance for risk; how much risk (and potential consequence) is acceptable in pursuit of value? This requires defining the IC’s risk tolerance levels, within which IC elements may again define their own levels based upon their unique missions.

Understanding and considering the risk of action is an important step forward for the IC, but it is not the last step. Sometimes overlooked in risk assessment practices is the consideration of the risk of inaction. To fully evaluate potential options, decision-makers must consider whether the overall risk of doing something is outweighed by the risks of not doing it. If the IC does not pursue particular AI capabilities, what is the opportunity cost of that inaction? Any final determination about whether to take action must consider whether declining to act would cause greater risk of significant harm. While the answer will not always be yes, in the case of AI and emerging technology, it is a very realistic possibility.

And, finally, a risk framework only works if people know about it. Broad communication – about the existence of the framework, how to apply it, and expectations for doing so – is vital. We cannot hold people accountable for appropriately managing risk if we do not clearly and consistently communicate and help people use the structure and mechanisms for doing so.

Buy-in To Enhance Confidence

An IC-wide AI risk framework will help IC officers understand risks and determine when and how to take advantage of innovative emerging technologies like AI, increasing comfort with uncertainty and risk-taking in the pursuit of new capabilities. Such a risk framework will have even greater impact if it is accepted – explicitly or implicitly – by the IC’s congressional overseers. The final article in this series will delve more deeply into needed changes to further improve the crucial relationship between the IC and its congressional overseers. It will also provide a link to a full report that provides more detail on each aspect of the series, including a draft IC AI Risk Framework.

Although Congress is not formally bound by such a framework, given the significant accountability measures that often flow from these overseers, a meeting of the minds between the IC and its congressional overseers is critical. Indeed, these overseers should have awareness of and an informal ability to provide feedback into the framework as it is being developed. This level of transparency and partnership would lead to at least two important benefits: first, increased confidence in the framework by all; and second, better insight into IC decision-making for IC overseers.

Ultimately, such a mutual understanding would encourage exactly what the IC needs to truly take advantage of next-generation technology like AI: a culture of experimentation, innovation, and creativity that sees reasonable risk and failure as necessary steps to game-changing outcomes.

Read also AI and the IC: The Tangled Web of Budget and Acquisition

Read also Artificial Intelligence in the IC: Culture is Critical

Read also AI and the IC: The Challenges Ahead

Read more expert-driven national security insights, perspective and analysis in The Cipher Brief

The post A Roadmap for AI in the IC appeared first on The Cipher Brief.

find more fun & mates at SoShow now !

An official inquiry has found that Germany’s justice system was staffed with former Nazis for decades after the Second World War, At one point, three out of four top officials at the prosecutor’s office were former party members.

Released on Thursday, the 600-page report was compiled by historian Friedrich Kiessling and legal scholar Christoph Safferling, and covers the Cold War period running from the early 1950s until 1974. The work was commissioned by the federal prosecutor’s office. 

Read more

The Federal Ministry of Justice in Berlin © De-okin
Over 50% of W. Germany’s senior justice ministry officials in 1950-70s were ex-Nazis – govt report

The researchers found that, at one point during the 1950s, roughly three in four top officials in the federal prosecutor’s office had been members of the Nazi Party. It took until 1972 before former Nazis were no longer in the majority in that office, and until 1992 before the judicial system had been fully purged of ex-members of the fascist party.

“There was no break, let alone a conscious break, with the Nazi past,” the researchers said of the situation. 

Presenting the inquiry’s findings, state secretary at the justice ministry Margaretha Sudhof said the country has “long remained blind” to the presence of ex-Nazis in senior positions after the end of the Second World War.

“On the face of it they were highly competent lawyers… but that came against the backdrop of the death sentences and race laws in which they were involved,” Sudhof commented. 

In a statement about the study’s publication, Justice Minister Christine Lambrecht said she welcomed “the fact that the Federal Prosecutor’s Office is also grappling with its troubled past and is shedding more light on its own Nazi entanglements in the post-war period.”

The federal prosecutor’s office is Germany’s highest prosecutorial authority, responsible for pursuing those who violate international law and commit alleged crimes relating to state security. 

The latest study follows an earlier report published in 2016, which stated that in 1957 – more than a decade after the war had ended – 77% of senior officials in the justice ministry were former Nazis. At the time of that publication, then-Justice Minister Heiko Maas stated that the “Nazi-era lawyers went on to cover up old injustice rather than to uncover it, and thereby created new injustice.”

If you like this story, share it with a friend!

find more fun & mates at SoShow now !

Vaccination of all Hungarian citizens against Covid-19 is inevitable, PM Viktor Orban has said, stating that even the most hardline anti-vaxxers will ultimately face a choice between dying with the virus and getting a jab.

Speaking to Kossuth radio on Friday, the Hungarian leader lashed out at those reluctant to get vaccinated against coronavirus, branding them a threat “not only to themselves but to all others.”

In the end, everyone will have to be vaccinated; even the anti-vaxxers will realize that they will either get vaccinated or die. So, I urge everyone to take this opportunity.

The EU member state is currently experiencing its fourth wave of coronavirus, Orban stated, blaming the situation on those who had not got vaccinated. “If everybody were inoculated, there would be no fourth wave or it would be just a small one,” the PM claimed.

Read more

FILE PHOTO. ESSEN, GERMANY. © AFP / Ina FASSBENDER
Covid rates take Germany to ‘nationwide state of emergency’

Apart from urging the unvaccinated to go and finally get their jabs, Orban also promoted booster shots, revealing that he had already taken three doses of a coronavirus vaccine.

“The only thing that protects us from the virus is vaccination. And we are now also seeing, at least the experts are unanimous in saying, that four to six months after the second vaccination, the protective power of the vaccine weakens. Therefore, a third vaccination is justified,” he said.

Hungary has already announced new anti-Covid measures, though somewhat short of the strict measures proposed by the nation’s Medical Chamber on Wednesday. The medical body called for a blanket ban on mass events, and suggested making entry to restaurants, theaters and other indoor venues conditional on bearing a Covid-19 inoculation certificate. Instead, Budapest rolled out compulsory mask wearing for most indoor environments, as well as making booster shots mandatory for all medical workers, starting from Saturday.

A nation of 10 million, Hungary’s total tally of logged Covid cases is hovering just below the one million mark. On Friday, it registered a new daily record, with nearly 11,300 new Covid infections. More than 32,700 people in Hungary have succumbed to the disease over the course of the pandemic.

Think your friends would be interested? Share this story!

find more fun & mates at SoShow now !

Czechia will prohibit people who have not been vaccinated from entering public spaces such as restaurants and shops from Monday. Negative Covid-19 tests will no longer be allowed.

Speaking on Wednesday, outgoing Prime Minister Andrej Babis said the country would adopt the so-called Bavarian model from Monday next week, prohibiting those who have not received a Covid-19 vaccine from entering public places. Those who have recently recovered from the virus will be allowed entry. 

Read more

(FILE PHOTO) © REUTERS/Costas Baltas
France turns to Ancient Greece for war on woke

The country will enter a partial lockdown of the unvaccinated from Monday morning, assuming the restrictions are approved by the cabinet on Thursday.   

“We will introduce the Bavarian model from Sunday to Monday. This means that entry to restaurants, service establishments, or mass events will only be allowed for vaccinated or survivors. Those vaccinated with a single dose must have a PCR test,” Babis said on local TV.

The prime minister said that self-testing would be completely cancelled, as he lamented unvaccinated people for clogging up hospitals and preventing treatment reaching those with other illnesses.  

“The death toll is rising; the situation is serious. Vaccination is the only solution, there is no other,” he added. 

The country is seeing a spike in infections, with a record 22,479 new cases reported on Tuesday. 

The Bavarian model refers to strict anti-Covid measures introduced in the southern German state. Markus Soder, the state’s premier, claimed there was no choice but to implement “a kind of lockdown for the unvaccinated,” citing increasing pressure on hospitals and medical staff. 

Meanwhile, some two million people in Austria who are yet to receive their Covid shots have been subject to the world’s first lockdown for the unvaccinated, in an effort to bring case numbers down.  

While 68% of people are vaccinated in Germany, and 65% in Austria, just over 60% are vaccinated in the Czech Republic. 

If you like this story, share it with a friend!

find more fun & mates at SoShow now !

Controversial agriculture laws that saw farmers across India protesting for over a year are going to be rolled back, Prime Minister Narendra Modi has unexpectedly announced.

“I want to tell the country that we have decided to repeal the three farm laws,” Modi said in a televised address on Friday, which local media described as “stunning.”

The Indian parliament will complete the constitutional process of repealing the agricultural legislation in late November, he added.

However, the PM again defended the divisive legislation, saying that the reform of the sector, which accounts for some 15% of India’s $2.7 trillion economy, was actually aimed at supporting the country’s small farmers.

Whatever I did was for farmers. What I am doing is for the country.

“Maybe something was lacking in our efforts, which is why we couldn’t convince some farmers about the laws,” Modi acknowledged.

Read more

Farmers block railway tracks as part of protests against farm laws during nationwide protests, in Sonipat, northern state of Haryana, India, September 27, 2021. © Reuters / Anushree Fadnavi
Indian farmers return to hold nationwide protests against last year’s agriculture laws

The laws, which were introduced last September, allowed farmers to sell their crops outside of the government-regulated wholesale markets, in which they were guaranteed a minimum price.

The government argued that it would see them earning more, but growers feared that that move would, on the contrary, cause a drop in prices and make them hostages to large corporations.

Thousands of farmers joined the protests against what they called “black laws,” and some rallies turned violent. A year later, many demonstrators remain camped along roads outside the capital New Delhi.

And the farmers aren’t planning on going home just yet, with one of their leaders saying on Twitter: “We will wait for parliament to repeal the laws.”

Modi’s concession to the protesters may have been unexpected, but it comes several months ahead of elections in India’s most populous state of Uttar Pradesh, as well as two other northern states with large rural populations.

Think your friends would be interested? Share this story!

find more fun & mates at SoShow now !