US overhauling intelligence access to try to prevent another mega-leak

ASPEN - Reuters

The NSA headquarters building in Maryland is seen in this photo. The NSA said it would lead the effort to isolate intelligence and implement a ‘two-man rule.’ REUTERS photo

The United States is overhauling procedures to tighten access to top-secret intelligence in a bid to prevent another mega-leak like the one carried out by former spy agency contractor Edward Snowden, senior U.S. officials said July 18.

The National Security Agency (NSA), which Snowden worked for as a Hawaii-based contractor, said it would lead the effort to isolate intelligence and implement a “two-man rule” for downloading, similar to procedures used to safeguard nuclear weapons. “When are we taking countermeasures? ... The answer is now,” Deputy Defense Secretary Ashton Carter told the Aspen Security Forum in Colorado. NSA Director General Keith Alexander told the forum the two-man rule would apply to system administrators like Snowden and anyone with access to sensitive computer server rooms.

“You limit the numbers of people who can write to removable media,” Alexander said. “Instead of allowing all systems administrators (to do it), you drop it down to a few and use a two-person rule. We’ll close and lock server rooms so that it takes two people to get in there.”

‘One person can’t compromise a lot’

Carter partly blamed the security breach on the emphasis placed on intelligence-sharing after the wake of the Sept. 11, 2001, attacks, which eventually allowed someone like Snowden to access so many documents at once. “We normally compartmentalize information for a very good reason, so one person can’t compromise a lot,” Carter said. “Loading everything onto one server ... it’s something we can’t do. Because it creates too much information in one place.” Alexander said Snowden had been trusted with moving inside networks to make sure the right information was on the computer servers of the NSA in Hawaii.

Snowden fled to Hong Kong in May, a few weeks before publication in Britain’s Guardian newspaper and the Washington Post of details he provided about secret U.S. government surveillance of Internet and phone traffic. The disclosures by Snowden, who is wanted on espionage charges, have raised Americans’ concerns about domestic spying and strained relations with some U.S. allies. The 30-year-old American who has had his U.S. passport revoked, is stuck in the transit area of Moscow’s Sheremetyevo airport and has applied for temporary asylum in Russia.

“A huge break in trust and confidence,” Alexander said, adding that extremists, aware of the surveillance, were altering their behavior “and that’s going to make our job tougher.” Alexander declined to say how many documents Snowden took, but when asked whether it was a lot, he said, “Yes.” Carter said the assessment was still being conducted, but “I can just tell you right now the damage was very substantial.” Sen. Dianne Feinstein, who chairs the Senate Intelligence Committee, said last month that U.S. officials advised her that Snowden had roughly 200 classified documents. But American officials and others familiar with Snowden’s activities say they believe that at a minimum, he acquired tens of thousands of documents. Asked whether U.S. officials had a good idea of what Snowden actually downloaded, as opposed to simply read, Alexander said, “We have good insights to that, yes.”

Current and former U.S. officials said on condition of anonymity that while authorities now thought they knew which documents Snowden accessed, they were not yet entirely sure of all that he downloaded. Former and current U.S. officials told Reuters that a massive overhaul of the security measures governing such intelligence would be extremely expensive.