DNI Issues New Policy on Leak Damage Assessments
The Director of National Intelligence has issued new guidance on assessing damage resulting from the unauthorized disclosure of classified intelligence information to ensure that the damage assessments “are produced in an efficient, timely, consistent and collaborative manner.”
Leak damage assessments should be used iteratively and the lessons learned from them should be applied “to strengthen the protection of classified national intelligence and prevent future unauthorized disclosures or compromises.”
In addition to the facts and circumstances of the unauthorized disclosure, damage assessments should identify “any foreign involvement” in the case and “actionable recommendations to prevent future occurrences.”
Where foreign partners are affected by the leak, agency heads shall coordinate with DNI “prior to notifying a foreign government.” Also, “foreign governments normally will not be advised of any security system vulnerabilities that contributed to the compromise.”
See “Damage Assessments,” Intelligence Community Directive 732, June 27, 2014.
When a hurricane hits, it’s all hands on deck – that goes for federal data, too. Pulling back from our investments in timely, accurate, and accessible public data will only make us less prepared and put us all at greater risk.
This is bigger than a singular elimination of race and ethnicity questions. It could accelerate the second wave of widespread reductions to demographic data, leaving public health officials with even less information to deliver better health outcomes for all Americans.
Soft law was never meant to be a permanent solution. Treating it as one, and letting the sandcastle stand in for the skyscraper indefinitely, is how we end up with a decade of voluntary commitments and no enforceable accountability to show for it.
FAS has partnered with ICLEI USA to launch the CRI Local Advisory Council.