Decision Memorandum for the DNI on ICREACH

SECRETHN 0F MEMORANDW FDR THE DIRECTDR GE NATIDNAL INTELLIGENCE SUBJECT: (UHFDUCI) Sharing Cemmunicatiens leetadata Acress the Intelligence Cemmunity MEMBRANDUM PURPOSE: (UHFDUD) Te request the Directer Natienal Intelligence establish a U.S. Intelligence Cemmunity-wide cemmunicatiens metadata sharing structure; te recemmend that the Natienal Security Agency establish this structure aleng with apprepriate query teels, training and eversight; and, that Directer, NSA be designated the It: Esecutive Agent fer IC-wide cemmunicatiens metadata. BACKGROUND: (SHNF) Pest 91 l, the It: has increased its needs fer cemmunicatiens metadatal. Currently, NSA cellects, precesses and steres vast ameunts ef cemmunicatiens metadata related te werldwide intelligence targets. This SIGINT infermatien eften includes the eriginater and recipient(s) identifiers, as well as the date, time and duratien ef the transactien and, in seme cases, lecatiens ef targets. (SIM) CIA, FBI, DIA and DEA alse have access te cemmunicatiens transactien data frem their unique seurces. These erganiaatiens, te include NSA, have benefited frem sharing this data threugh the pregram since 1.999. Presently, NSA pushes reughly 6t] millien recerds per day (limited te telepheny enly) te resulting in ever 3tl?i'e ef the tetal data set. (SHNF) While the PROTON pregram has had many netable successes ever the years, teday?s environment requires that the IC implement mere helistie infermatien sharing and cellaberatien. In erder te ensure the efficient and effective sharing ef many milliens ef new minimised cemmunicatiens metadata recerds daily, the IC must have a new sharingt'cellaberatien structure that is scaleable te the larger IC and is capable ef much greater velume ef data. (SIM) NSA stands alene in cenducting metadata analysis en a large scale and as a result, eur teels and methedelegies, as well as the infrastructure empleyed, are well tested and have been preven efficient and effective ever time. We already estensively Cemmunicatiens metadata refers tn structured ?data abcut data?: it includes all asseciated with, but net including centent, and includes any data used by a netwerk, service er applicatien te facilitate reuting er handling efa cemmunicatien er te render centent in the intended fermat; it includes, but is net limited te, dialing, reuting, addressing, er signaling infermatien and data in suppert ef varieus netwerk management activities billing, authenticatien er tracking ef cemmunicants}. Derived NSAICSSM 1-52 Dated: 20041123 Declassify (In: 211290.325 SECRETNN 0F

SECRETNN OF share metadata internally within the NSAICSS estended enterprise and with our second party partners. (SHNF) Under this proposal, IC partners would have access through GLOBALREACH (the IC version will be called ICREAC H) service to more than 50 esisting NSAICSS metadata fields contained in trillions of records as well as ether IC Agency metadata (predominantly resident today in PROTON). throughput to ICREACH would dwarf the volume of present contributions to PROTON, as well as the input of all other IC contributors. These fields revealing sources and methods or sensitive foreign relationships within metadata records would not he shared. Moreover, NSA is preparing to include DNI (digital network intelligence) data in a change that would also esponentially increase contributions to the It: ?s cotmnunications metadata structure. DISCUSSION: (SIINF) NSA proposes that the DN1 establish a new IC-wide communications metadata structure with requisite tools, training and intelligence oversight. This structure will consist of data repositories at various IC Agencies all interlinked through a web based analytic query structure via TWICE whereby IC personnel can make one query to access all sharable communications metadata. This structure will also allow IC personnel to choose the data they wish to query and the set of tools they desire to display and analyse the data. (SHNF) This structure will allow unprecedented volumes of communications met adata to he shared and analyzed. This structure will use the Intelligence Community Shared Information Space (It: 813) carved out in Intelink and protected by community PKI access authorisation. Having such a structure will provide the H: with access to NSAICSS and other IC-element metadata, as well as the internal ?federated quety? thatNSA use to correlate these information elements and enrich the results with knowledge from our analytic reference files and other collaboration. This proposal will address esisting IC-wide stated needs for additional NSA communications metadata elements and take the IE to an unprecedented level of information sharing. (SHNF) This initiative is in keeping with the and President? WMD Commissions? recommendations on information sharing, the President?s various Executive Orders related to information sharing, and your own announced goals on information sharing and collaboration. (S) This initiative was intended to facilitate a new level of sharing information across the 1C for situational awareness, lead information, adversary analysis, and targeting and will add to the process of greater information sharing across the IC. RECOMMENDATION: (SHNP) Ibelieve the time is right to designate an IC Esecutive Agency for sharing communications metadata as an integral part of a greater IC sharing environment. SIGINT metadata is a vast, rich source of information to build community collaboration and target knowledge and the emerging intelligence based target social network analysis discipline. NSA is prepared to accept this role and build the communications metadata coalition the IC needs for both current target tracking and future threat warning. (SHNF) To this end, my staffs have been meeting with CIA, DIA, FBI and DEA metadata users and technical experts to work out the details of this proposal. Once

apprcustetl, we will he reatl}r tu implement this structure with a rail uut tc- these agencies within a few munths fullc-wetl by the greater IC within a year. DNI DECISION: (UHFOUD) Establish an IC-wicle curnrnunicatiuns rnetaclata structure: Cuncur Nc-n-cc-ncur Dther (UHFOUD) Designate as the U3. IC Esecutiste Agent fur curnrnunicatic-ns rnetatlata: Cuncur Nc-n-cuncur Dther (C) My POC far this actiun is_De ut Chief uf Staff fur Operatiuns ancl Suppurt, Signals Intelligence Directc-rate, ur -a'1?1 nsa.ic.guv. KEITH E. ALEXANDER Lieutenant General, US. Army Directcur, CSS Cf: USDH) DIRICIA SE CHE '11"fo HT