The NSA is reviewing intelligence access after being embarrassed by the leak by Edward Snowden

USA to review intelligence access after Snowden leak

The USA is overhauling procedures to tighten access to top-secret intelligence to prevent another Snowden-style mega-leak.

The National Security Agency (NSA), which 29-year-old American Edward Snowden worked for as a Hawaii-based contractor, said it would lead the effort to isolate intelligence and implement a "two-man rule" for downloading – similar to procedures used to safeguard nuclear weapons.

"When are we taking countermeasures? The answer is now," Deputy Defense Secretary Ashton Carter told the Aspen Security Forum in Colorado.

NSA director general Keith Alexander told the forum the two-man rule would apply to system administrators like Snowden and anyone with access to sensitive computer server rooms.

"You limit the numbers of people who can write to removable media," Alexander said. "Instead of allowing all systems administrators [to do it], you drop it down to a few and use a two-person rule. We'll close and lock server rooms so that it takes two people to get in there."

Carter partly blamed the security breach on the emphasis placed on intelligence-sharing after the wake of the 11 September 2001 attacks, which eventually allowed someone like Snowden to access so many documents at once.

"We normally compartmentalise information for a very good reason, so one person can't compromise a lot," Carter said. "Loading everything onto one server ... it's something we can't do. Because it creates too much information in one place."

Alexander said Snowden had been trusted with moving inside networks to make sure the right information was on the computer servers of the NSA in Hawaii.

Snowden fled to Hong Kong in May, a few weeks before details he provided about secret US government surveillance of Internet and phone traffic were published in the UK's Guardian newspaper and the Washington Post.

The disclosures by Snowden, who is wanted on espionage charges, have raised Americans' concerns about domestic spying and strained relations with some US allies.

The 30-year-old American, who has had his US passport revoked, is stuck in the transit area of Moscow's Sheremetyevo airport and has applied for temporary asylum in Russia.

"[It's] a huge break in trust and confidence," Alexander said, adding that extremists, aware of the surveillance, were altering their behaviour, "and that's going to make our job tougher".

Alexander declined to say how many documents Snowden took, but when asked whether it was a lot, he said "yes".

Carter said the assessment was still being conducted, but "I can just tell you right now the damage was very substantial".

Senator Dianne Feinstein, who chairs the Senate Intelligence Committee, said last month that US officials advised her that Snowden had roughly 200 classified documents, but US officials and others familiar with Snowden's activities say they believe that, at a minimum, he acquired tens of thousands of documents.

Asked whether US officials had a good idea of what Snowden actually downloaded, as opposed to simply read, Alexander said: "We have good insights to that, yes."

Current and former US officials said on condition of anonymity that while authorities now thought they knew which documents Snowden accessed, they were not yet entirely sure of all that he downloaded.

Snowden was adept at going into areas and then covering his tracks, which posed a challenge in trying to determine exactly what materials he had accessed, officials said.

Former and current US officials said that a massive overhaul of the security measures governing such intelligence would be extremely expensive and Alexander also said it would take time to implement across the Pentagon and the broader US intelligence community.

He also noted there were "15,000 enclaves", some of which are small.

"One of the things we can do is limit what people have access to at remote sites and we're doing both. So we're taking that on," he said.

Recent articles

Info Message

Our sites use cookies to support some functionality, and to collect anonymous user data.

Learn more about IET cookies and how to control them