Covert operations: Red Teams Test Security Vulnerabilities in U.S.

by JIM KOURI, CPP December 4, 2010
 
Using counterfeit documents and posing as employees of a company with a Nuclear Regulatory Commission license, FSI investigators successfully crossed the U.S. northern and southern borders with the type of radioactive materials that could be used to make a dirty bomb.
 
The Government Accountability Office's Forensic Audits and Special Investigations team (FSI), which was created in 2005 as an interdisciplinary team consisting of investigators, auditors, and analysts, conducts covert tests at the request of the Congress to identify vulnerabilities and internal control weaknesses at executive branch agencies.
 
These vulnerabilities and internal control weaknesses include those that could compromise homeland security, affect public safety, or have a financial impact on taxpayer's dollars.
 
FSI conducts covert tests as "red team" operations, meaning that FSI does not notify agencies in advance about the testing. Recently, concerns have arisen as to whether top management at the U.S. Transportation Security Administration (TSA) were negatively impacting the results of red team operations by leaking information to security screeners at the nation's airports in advance of covert testing operations.
 
Consequently, GAO was asked by the U.S. Congress to briefly explain FSI's processes and procedures concerning covert testing and as well as provide examples of covert activities performed
 
FSI has strict internal procedures related to the planning, execution, and reporting of covert activities. First, FSI and senior GAO management decide on a case-by-case basis whether engagements requiring covert tests are within the scope of GAO's authority.
 
Next, FSI identifies the aspects of the security system or the government program that are particularly vulnerable to terrorist threats or fraudulent activities and relies on the experience of its investigators to develop a written investigative plan. This plan typically includes the creation of fictitious identities and counterfeit documentation.
 
All counterfeit documents that FSI uses are manufactured using hardware, software, and materials that are available to the general public -- this allows FSI to demonstrate that any security vulnerabilities it finds could be exploited by a criminal or terrorist with moderate means and resources and would not require sophisticated insider knowledge.
 
FSI's investigators are the only GAO staff allowed to participate in the execution phase of testing, although audit and analyst staff are often involved in planning and operational support. Importantly, if investigators discover vulnerabilities that pose a significant and immediate threat to public safety, FSI immediately will discontinue its investigation and alert the appropriate government law enforcement agency.
 
Once the operation is complete, FSI conducts a "corrective action briefing" with officials at the tested entity to report that they have been the subject of a covert operation, share the results of the testing and, if necessary, suggest potential remedies for any identified control weaknesses or security vulnerabilities.
 
These operations provided the Congress with irrefutable evidence about the actual ability of federal agencies under "live" conditions to deal with security threats and to protect government assets from fraudsters.
 
  • Using counterfeit documents and posing as employees of a company with a Nuclear Regulatory Commission license, FSI investigators successfully crossed the U.S. northern and southern borders with the type of radioactive materials that could be used to make a dirty bomb.
 
  • Posing as private citizens, FSI investigators purchased sensitive military equipment -- including ceramic body armor inserts, guided missile radar test sets, and microcircuits used in F-14 fighter aircraft -- on the Internet from the Department of Defense's liquidation sales contractor.
 
  • Using bogus driver's licenses, FSI investigators successfully gained entry to all 24 Department of Transportation regulated urine collection sites that FSI tested, which are responsible for providing drug testing of commercial truck drivers in safety sensitive transportation positions.
 
  • Using false documents and an erroneous IRS taxpayer identification number, FSI pretended to be a charity and successfully applied to three of the Combined Financial Campaign's local 2006 campaigns.
 
FamilySecurityMatters.org Contributing Editor Jim Kouri, CPP is currently fifth vice-president of the National Association of Chiefs of Police and he's a columnist for The Examiner (examiner.com) and New Media Alliance (thenma.org).  In addition, he's a blogger for the Cheyenne, Wyoming Fox News Radio affiliate KGAB (www.kgab.com). Jim Kouri also serves as political advisor for Emmy and Golden Globe winning actor Michael Moriarty.
 

blog comments powered by Disqus

10 year FSM Anniversary

No justice, No Charmin! Looters steal toilet paper, Pringles, and Oreos to honor Freddie Gray

April 27, 2015  10:56 PM

Congratulations, Social Justice Mob. Your Baltimore rioters will go down in history as the most hygiene-conscious ever. Hands up, pants down, swipe, and wipe! We are going to need to airlift toilet paper into #Baltimore Be as generous as you can pic.twitter.com/GP9xwLGBFZ — mikemckenna (@mikemckenna19) April 28, 2015 Baltimore Police van burns as looter,s protesting death […]

'Helicopters,' 'explosion,' 'masked' men: Johns Hopkins campus on lockdown; hospital open; updated

April 27, 2015  10:36 PM

Johns Hopkins University in Baltimore is advising students to seek shelter and remain in a secure location during the violent social justice outbreak. Masked individuals in hoods and carrying guns have reportedly been spotted. #Baltimore #BaltimoreRiots #JohnsHopkins @JohnsHopkinsSPH @HopkinsMedicine @JohnsHopkins Mon, Apr 27, 2015 9:16 PM pic.twitter.com/he7MHtUxHy — hscott61 (@hscott61) April 28, 2015 Due to […]

Questlove says 'thugs' is racist code word…after black lib mayor finally calls thugs 'thugs'

April 27, 2015  10:24 PM

Welp. Here’s Jimmy Fallon bandleader Questlove wandering onto the Baltimore riot scene to inject some racial grievance-mongering. You already know that the Official Handbook of Leftist Racial Code Words includes everything from “aloof” to “breadbasket” to “chair.” Now, you can’t say “thug” because it’s racist code. Tell it to laggard Baltimore mayor Stephanie Rawlings-Blake, the […]

'Send in the moms!' Baltimore mama smacks rioting son upside the head [video]

April 27, 2015  10:10 PM

Too bad Baltimore’s mayor doesn’t have as much sense as this mom does. Forget national guard, send the moms! WATCH: Baltimore Rioter Slapped By Mom On News [VIDEO] http://t.co/1U1lQHpxPM via @coed — Ed Rezac (@Go4EVA) April 28, 2015 Baltimore Mom Goes Confronts Her Rioting Son (Video) http://t.co/qt2QoDQXuD pic.twitter.com/caIc8O5Bdb — We The People (@WTPnow) April 28, […]

Geniuses: Baltimore rioters steal from African hair salon [video, pics]

April 27, 2015  10:01 PM

The owner of an African beauty salon on Eutaw Street in Baltimore says a TV, computer, and supplies were stolen earlier today by social justice mobsters. Talking to the owner of this salon on Eutaw St. Comp stolen. Happened two hrs ago pic.twitter.com/Rjp68BXq05 — Amy Aubert (@AmyFromABC2) April 27, 2015 Hair salon on Eutaw broken […]

FSM Archives

More in PUBLICATIONS ( 1 OF 25 ARTICLES )