activity report 2011.pdf

ROMANIA The Romanian Intelligence Service REPORT on the Activity of the Romanian Intelligence Service in 2011 1  TABLE OF CONTENTS CHAPTER I GUIDELINES OF THE ORGANIZATIONAL PROCESS CHAPTER II PARAMETERS OF THE SPECIFIC ACTIVITY II.1. The intelligence activity II.2. Making use of intelligence II.2.1. Informing the decision makers II.2.2 Specific prevention measures II.2.3. Notifying the law enforcement authorities II.3. Protection against terrorist risks and threats II.4. Protection of classified information CHAPTER III LOCAL AND INTERNATIONAL COOPERATION III.1. Inter-institutional cooperation III.2. Foreign Cooperation III.2.1. Bilateral Cooperation III.2.2. Multilateral Cooperation CHAPTER IV COORDINATION AND OVERSIGHT OF SRI’S ACTIVITY IV.1. Strategic Coordination of SRI’s Activity by the Supreme Council for National Defense IV.2. Democratic Oversight IV.2.1. Parliamentary Oversight IV.2.2. Legal Control IV.2.3. Financial Control 2 CHAPTER V COOPERATION WITH THE CIVIL SOCIETY V.1. Public Relations and Security Education V.2. Public and Media Relations V.3. Transfer of the Securitate files CHAPTER VI RESOURCE MANAGEMENT VI.1. Human Resources Management VI.1.1 SRI’s Human Resources Parameters VI.1.2 Training VI.2. The management of financial and logistic resources CHAPTER VII PRIORITIES FOR 2012 VII.1. General landmarks VII.2. Objectives and guidelines for 2012 3 CHAPTER I GUIDELINES OF THE ORGANIZATIONAL DEVELOPMENT PROCESS 2011 was the year that brought the initiation of a new strategic effort meant to prepare the Romanian Intelligence Service for the contemporary challenges of the information era, by adopting the 2011-2015 Strategy “The SRI in the information era.” The guidelines for the organizational adaptability process are: consolidation of the operational and analytical performance by using new cyber instruments, training and development of human resources and enhancing relations with beneficiaries and LEAs. The implementation of the 2011-2015 strategy will ensure the configuring of powerful and flexible operational and intelligence capabilities, which will allow the efficient completion of the fundamental missions within the Service. General guidelines The 2011-2015 strategy states the following objectives:  developing the intelligence capabilities – by using all technological resources available – in order to ensure pre-emptive knowledge of the evolutions relevant for national security;  ensuring the necessary technological instruments in order to enhance activity performance throughout all the components of the intelligence cycle;  upgrading specialized support for the protection of classified information and the computer systems used on this purpose;  adapting the human resource management system to the challenges and opportunities of the information era, by applying efficient professional performance criteria and supporting personnel motivation and career within the Service;  - expanding knowledge and anticipation of the evolutions in the security environment and jointly managing risks and threats to national and Euro- Atlantic security;  updating the development-research activity, by applying the latest technologies in order to obtain a continuous innovating process, to enhance performances and comprise them within technical systems necessary for the intelligence activity;  promoting an accurate image regarding the role of the Service in managing the security issues specific to the information era. Significant developments in 2011:  From a strategic point of view: - unfolding the informative-operational activity of the SRI based on the Intelligence Strategy, adopted through a decision of the Supreme National Defense Council, allowed for a unitary approach of the organizational and security requirements and a better orientation of the endeavors of the SRI in order to acknowledge, prevent and counteract the risks and threats to national security, and in order to protect and promote national interests and values, as well as the ones of our allies; - progress was made with regard to implementing the Integrated Planning System adopted in 2008, in accordance with the adjacent regulatory and 4  process developments, especially with regard to prognosis, and to underlying and evaluating the main planning elements – Sectorial Programs, as well as optimizing the process of elaborating, approving, allocating and using the SRI budget, in accordance with the major objectives of organizational development; - The Risk Management Standard in the SRI was adopted, a modern concept of managing risk at all management levels, in order to enhance the quality of decisions made by the entire management personnel. Also, a pilot-project was initiated for the application of the respective standard and instruments (The Risk Ledger and The Management Risk Map). - the methodology was consolidated for security prognosis, through the Informative Estimate of risks and threats to national security, an analysis which shapes the current state of risks and threats, and their evolution perspectives.  From an operational point of view: - special attention was paid to prioritizing the operational activity and to specific resource allocation, in strict accordance with the existing operational activity; - more efforts were made by the central units in the area of support, guidance and control of the activities of the corresponding territorial structures; - a better connection between the activity of the territorial structures and the objectives/priorities established by the central units was ensured, which allowed for the integrated management of certain risks present at regional/national level; - the process of enhancing human secret sources activities was continued; - cooperation on the horizontal was consolidated, by expanding the pattern of working within cross-sector teams or collaboration teams; - special attention was paid to the quality of the activity, especially with regard to the security issues coverage, increase of information quality and superior use of the information;  As regards the analytical area: - the capacities of operational analysis were consolidated, both within the central and the territorial units; - the processes of information analysis standardization and report documents adaptation to the needs of beneficiaries, by resorting to their competences; - special attention was paid to enhancing the analysts’ professional expertise, both by formal trainings (specialized professional training, research sessions, video-conferences, courses/exchange programs with partner services and the academia), and informally (experience exchanges, team work and cooperation); 5  - the process of developing information analyses within the territorial structures was continued, also by diversifying the types of documents used in cooperation with the local beneficiaries; - cooperation between the analysis departments and the information and operative areas was consolidated, focusing on task-force cooperation formulas, meant to swiftly and efficiently manage certain security issues;  As regards the technical area: - software instruments were implemented, necessary for optimizing and making information flows more flexible within the Service – the centralized management of the information and operative activities, the electronic management of documents, as well as network or collaborative platform computer applications necessary for managing and analyzing information in cross-sector work groups; - the IT&C infrastructure was developed, by integrating new specialized communication systems, while continuing the processes of licensing certain communication systems for the transmission of classified information; - the capabilities of the Service in the cyber area were developed, especially the collection and analysis of events and incidents taking place in the virtual environment; - special attention was paid to the enhancement of technical support for national partner institutions, by ensuring new infrastructure elements, designing applications and online or offline working platforms, as well as developing technical expertise capabilities in the areas of cryptographic analysis, explosives, DNA and TEMPEST;  As regards cooperation: a) at national level: - cooperation with the other structures/organizations from the national security system was intensified, by organizing cross-organizational working groups on items of strategic interest; - cooperation with the prosecution bodies was enhanced, both with regard to the reports/notifications sent to them, and to applying the necessary measures in order to collect information regarding certain penal actions which could generate risks/threats to national security; - cooperation with the other LEAs was enhanced, with regard to convening on national positions/authority in European affairs or in NATO format; b) at international level, the following is relevant: - consolidation of cooperation with strategic partners, and with services from neighboring countries; - a significant increase of correspondence with partner services; - the continuity of participation in multilateral activities; 6  - the correlation of bilateral and multilateral cooperation activities;  As regards the human resource management, special attention was paid to the implementation of measures aiming at redesigning activity in this area, as follows: - the process of adapting internal regulations in this field in accordance with the evolution of the national legislation framework was continued; - the human resource training format was redefined, in a unique system, focused on the concept of “intelligence” and skill enhancement, based on the SRI Career Guide and the requirements of the 2011-2015 Strategy – “The SRI in the information era”; - specialized training sessions for managers and mentors were designed, as well as new university and master’s programs, different for the information and operative area and for the information analysis; - at “Mihai Viteazul” National Intelligence Agency (ANIMV) a program was launched, specializing in OSINT;  As regards scientific research, the process of reorganizing the research component in the area of security was finalized, by adopting the development strategy of the National Intelligence Studies Institute within “Mihai Viteazul” National Intelligence Agency. 7 CHAPTER II PARAMETERS OF THE SPECIFIC ACTIVITY II.1. The intelligence activity In 2011, positive evolutions were registered in all areas of activity, as a result of the efforts to:  continuously adapt operational capabilities to the evolutions of the operative situation;  prioritize the operative activity and allocate resources in accordance;  focus on quality;  develop the operational analysis capability, which has resulted in a more efficient use of the collected information;  optimize teamwork formats within the institution, while focusing on the integrated approach of the operational dimension of the activity;  stabilize and improve managerial roles on each decisional level;  consolidate inter-organizational cooperation, especially with the investigation and prosecution authorities;  intensify external, bilateral or multilateral cooperation. As a sequel to the trend launched in 2010 – the year of operational performance, 2011 was the year of performance through cooperation and partnership. The operational achievements were maintained at high levels, especially due to the special care to increase efficiency and consolidate cooperation with other organizations having responsibilities in managing threats and risks to national security. From this perspective, the following achievements stand out:  the support granted for finalizing criminal records in the energy sector;  dismantling powerful networks dealing with illegal migration, drug and cigarettes trafficking;  the support granted for documenting important corruption cases in public administration and justice, or for investigating cases of fraud having significant impact on the state budget (including in the inter-institutional work formats established based on the decisions of the Supreme National Defense Council regarding the prevention and countering of fraud, and prevention and countering the criminal phenomenon in maritime ports;)  beginning the first cooperation action with the FBI, handling activities of cybercrime unfolded by a Romanian group operating abroad;  preventing terrorist threats by removing from the country certain citizens coming from areas with terrorist background;  sending to the main state decision makers certain analytical products concerting areas of utmost importance (such as the impact of the persisting economic crisis, the evolution in areas of strategic importance for Romania, etc.), meant to support measures for managing associated challenges. 8 The rising trend in the dynamics of the informative-operational activity continued, as well as the care for the most efficient use of the informational resources available, focusing on quality, and on major cases, with significant impact on national security. The quality of the information collected allowed for a better use of the aspects identified, both when informing the legal beneficiaries – by adapting the reports to their capabilities and need-to-know – and when informing the investigation and prosecution authorities. The informative-operational activity – as well as all the other efforts incurred by this activity – was focused on the following operational priorities:  In the area of economic security: - risks to the social and economic stability and regional development, also as a consequence of the issues regarding the absorption of European funds, as well as the convergence with a series of objectives proposed in the EU context; - risks to energy security;  In the area of preserving order and constitutional values: - important deficiencies at administrative structures level, including corruption, which might affect national security; - risk factors in the areas of social protection, health and education;  In the area of counter-espionage: - informative activities of certain intelligence services, as well as of private entities (aiming at areas of major interest for Romania);  In the area of cross-border threats: - cross-border risks, focusing on organized crime, CBRN proliferation, high risk drugs trafficking and illegal migration;  In the area of preventing and countering terrorism: - terrorist risks associated to the presence in Romania of certain groups or individuals, followers of extremist ideologies, including the possibility of importing conflicts from the respective countries, especially from the MENA area; - effects of latent conflicts in areas near to our country. In accordance with the dynamics of risks and threats, the intelligence activity that the SRI unfolded in 2011 was focused mainly on economic security, due to the fact that the effects of the economic crisis continued to be present, including with regard to attaining security objectives. Moreover, there was an increase of the quantity of information regarding cross-border cyber risks and threats, respectively in the protection of classified information. 9 Although the quantity of information collected in the area of preserving the constitutional order and values, of counter-espionage or of preventing and countering terrorism remained constant or slightly diminished, its relevance was reflected into major operational positive results, and was followed by reports/notifications sent to the investigation and prosecution authorities. The distribution of information collected within the Service – reported to the national security issues – was as follows:  economic security – 28.68%  preserving the constitutional order and values – 24.87%  cross-border threats – 16.16%  counter-espionage and promoting security interests – 13.38%  preventing and countering terrorism – 11.03%  protection of classified information – 3.65%  IT&C risks and threats – 2.23% II.2. Best use of information II.2.1. Informing the decision makers The activity of disseminating the information