Obtained by Judicial Watch, Inc. via FQ •t d St a t D es ...€¦ · Obtained by Judicial Watch, Inc. via FQu IA ru •t e d St a t D es epa rt men t o a e f St t Kate Bailey Judicial

Obtained by Judicial Watch, Inc. via FQIA •t d St t D rt t f St t u ru e a es epa men o a e

Kate Bailey Judicial Watch 425 Third Street, SW, Suite 800 Washington, DC 20024

Dear Ms. Bailey:

Washington, D. C. 20520

February 5, 2016

Case No. F-2015-05028 Segment: DS-0001 Part 5

I refer to our letter dated December 24, 2015, regarding the release of certain Department of State records under the Freedom of Information Act (the "FOIA"), 5 U.S.C. § 552. As we informed you, the review of the records retrieved from the Bureau of Diplomatic Security is ongoing.

For this production, we have identified six additional documents that are responsive to your request. After reviewing these documents we have determined al l six may be released in part. All released material is enclosed. An enclosure explains the FOIA exemptions and other grounds for withholding material.

If you have any questions, your attorney may contact Marsha Edney, Trial Attorney, at (202) 514-4520 or [email protected]. Please refer to the case number, F-2015-05028, and the civil action number, 15-cv-00646, in all correspondence about this case.

Sincerely,

John F. Hackett, Director Office of Information Programs and Services

Enclosures: As stated

CO 5 8 3 8 7 l 3:1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838713 Date: 02/05/2016

Obtained by Judicial Watch. Inc. via FOIA

- ----DS013 RELEASE IN PART B(7)C, 8(3)50

Reieii Donald R USC 3605, Public Law 86-36, Sec. 6(a) National Security Act o_f ~~J __

From: Sent: To: Cc: Subject:

Amazing ...

Reid, Donald R Friday, February 13, 2 09 3:56 PM Starr Gr~ Donovan atr.ick D L~-- ~- - -- -_.l FW: URGENT: Meeti with Cheryl Mills Tuesday

87(C) I

From~-- ___ _J Sent: Friday, February 13, 2009 3:29 PM - ·-- -_ To: Boswe!lt..Erl.£.1; Reid, Donald R;r--

· 83 NATL SEC AGENCY 87(C)

ec:I___ _J L._ SUbject: URGENT: Meeting with Cheryl Miils 1' ay

Classification: ggn

Good afternoon -

B7(C)

83 NATL SEC AGENCY 87(C)

!REVIEW AUTHORITY: Barbara Nielsen, I Senior Reviewer -------- -

BLUF: NSA/IAD seniors will be meeting with Ms. ills Tuesday on Blackberry vulnerabilities and the range of mitigation options based on a request she made of me this orning. I want to ensure that you have the opportunity to attend, or to send your experts, to join the discussion and h r firsthand what the options are.

Date: Tuesday, 27 February 2009 Time: 1400 Place: The Secretary's Conference Room POCs: Lori Mclean (for Chief of Staff);[·----"_ -_-. - [for NCR State/NSA)

83 NATL SEC AGENCY B7(C)

Background: I believe IAD was to have coordinate with you, but things have been developing quickly (as they always do on the Friday before a long weekend!) and I did N T want to assume that you had been informed of the meeting and that you had been invited to participate, as is bot desired and appropriate. If this IS first heard for you, please be assured that it was NOT intentional, but more alo g the line of "fog of battle" or "too many cooks ... "

I apologize up front for inadvertently forcing the i ue. 1 met with Ms. Mills this morning to introduce myself and was immediately questioned about the "art of the pos Ible" re: the Blackberries. NSA is fully prepared to brief on the vulnerabilities; to make sure they understand full the requirement (which was stated to me as needing to use the Blackberries in the Secretary's Suite at the undass fled level for scheduling/emailing etc. and possibly also for voice); and to discuss/offer mitigations that would enable re lution of the requirement. I

L____ ___ ~nd I -!h ve been charged by Debbie Plunkett (D/IAD) to lead the briefing I team. Pfease do not hesitatJ-wmntatrtned e, to help shape the agenda, ask questions, etc. Their phone numbers are[_-__ J 83 NATL SEC AGENCY

I would greatly appreciate your letting'-____ ______ _)cc'ed on this note) know who will attend from the CIO and OS offices so that she can advise Lori Mclean prio to the session.

Thank you for working with me on this. L_J ·····-·····--·~-

l _I Senior NSA Liaison Representative; U.S. State De rtment



UNCLASSIFIED U.S. Department of State Case No. F-2015-05028 Doc No. C05838713 Date: 02/05/2016

CO 5 8 3 8 7 l 3:1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838713 Date: 02/05/2016 Obtaine by Judicial Watch, Inc. via FOIA

j commercial j _ _ J sTE

2

83 NATL SEC AGENCY


CO 5 8 3 8 714 :1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838714 Date: 02/05/2016

Reid Donald R

From: Sent: To: Subject:

Obtained by Judicial Watch, Inc. via FOIA

!UNCLASSIFIED!

DS014

Reid, Donald R ~Eebruarv 13] 2 09 5:52 PM

c;: URGENT: Meetin With Cheryl Mills Tuesday

RELEASE IN PART B(7)C, I 8(3)50 USC 3605, Public Law I 86-36, Sec. 6(a) National Security Act of 195~ I

B?(C)

I Jat Eric's request, we began examining options for S with respect to secure "Blackberry-like• communications ... the

current state of the art is not too user friendly, has o infrastructure at State, and is very expensive .. . each time we asked 87(C)

the question "What was the solution for POTUS?" wererlitely told to shut up and oolor .. . NSA opened the door for us to establish requirements and they would try to hel ... then . [the NSA customer rep assigned to INR} !REVIEW happened to have a meeting with Cheryl Mills whe S's displeasure with tfle current •no BB In the SCIF" issue "just cam~ UTHORITY: up: Now NSA Is offering a briefing Tues and clea y are ready to make things happen. Barbara

Whtie our noses are out of joint for how this was h meet S demands {basically wireless comm in Mah supporting request (or an existing MOA) ... so that i

From: Sent: Friday, Februa~ 2009 5:17 PM To: Boswell, Eric J; r I Reid, Cc: Donovan, Patrick D SUbject: RE: URGENT: Meeting with Cheryl Mills

Eric,

died, the issue will be what kind of support wilJ NSA be offering to any Row) ... and whatever solution they provide will have to have a the only reason I was giving you a heads up ... Don

83 NATL SEC AGENCY

Nielsen, Senior Reviewer

B?(C) 83 NATL SEC AGENCY R7f r \ 83 NATL SEC AGENCY B?(C)

The meeting on 17 February at 2 p.m. rn the Secre ary's conference room.

Apologies for the typo.

l -o-m-ce~M~a-n-ag_e_r _ __. NCR State

1 ·~-J

From: Boswell, Eric J Sent: Friday, February 13, 2009 4:45 PM To: J ~Id, Donald R; _ Cc: __]Donovan, Patrld D subject: RE: URGENT: Meeting with Cheryl Miiis

I presume this meeting is Tuesday 17 Feb rather t an 27 Feb?

Ftom: . Sent: To: Cc Subject:

Classification:~

1

83 NATL SEC AGENCY B?(C)

B?(C)

83 NATL SEC AGENC B?(C)

83 NATL SEC AGENCY B?(C) 63 NATL SEC AGENCY 87(C)


C 0 5 8 3 8 714 =1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838714 Date: 02/05/2016

Obtaine by Judicial Watch, Inc. via FOIA

Good afternoon -

BLUF: NSA/IAD seniors will be meeting with Ms. lls Tuesday on Blackberry vulnerabilities and the range of mitigation options based on a request she made of me this rnlng. I want to ensure that you have the opportunity to attend, or to send your experts, to join the discussion and he r firsthand what the options are.

Date: Tuesday, 27 February 2009 nme: 1400 Place: The Secretary's Conference Room POCs: Lori Mclean (for Chief of Staff); I_-- - '.for NCR State/NSA)


Background: I believe IAO was to have coordinate with you, but things have been developing quickly (as they always do on the Friday before a long weekend!) and I did N Twant to assume that you had been informed of the meeting ahd that you had been Invited to participate, as is bot desired and appropriate. If this IS first heard for you, please be assured that it was NOT intentional, but more alo g the tine of "fog of battle" or "too many cooks .. . n

I apologize up front for inadvertently forcing the i ue. I met with Ms. Mills this morning to Introduce myself and was immediately questioned about the "art of the po ible" re: the Blackberries. NSA is fully prepared to brief on the vulnerabllltles; to make sure they understand full the requirement (which was stated to me as needing to use the Blackberries In the Secretary's Suite at the undass fied level for scheduling/emailing etc. and possibly also for voice); and to discuss/offer mitigations that would enable re · lution of the requirement.

I -- -- -a~-- :--Jh ve been charged by Debbie Plunkett (D/IAD) to lead the briefing team. Please do not hesitate to contact them, or e, to help shape the agenda, ask questions, etc. Their phone numbers are j _- -- -- 63 NATL SEC AGENCY

J_ I would greatly appreciate your lettlngl b:1ed on this note) know who will attend from the CIO and OS offices so that she can advise Lori Mclean prio to the session. 83 NATL SEC AGENCY

Thank you for working with me on this. I :=J l··-----· Senior.. NSA Liaison Represent~ive. V.~e Dep rtment

I __ __t~~ial l _ ~m .

2

87(C)



83 NATL SEC AGENCY


C058387 l S:IED U.S. Department of State Case No. F-2015-05028 Doc No. C05838715 Date: 02/05/2016 Obtained by Judicial Watch, Inc. via FOIA RELEASE IN PART B(7)C,

8(3)50 USC 3605, Public Law 86-36, Sec. 6(a) j National Security Act of 1959

_R_e_1d_._o_o_na_1_d_R ________________ --+--------------------------------------REvlEW- - 1

IUNCLASSIFl~Dj DS015

From: Reid, Donald R AUTHORITY: I Sent: Tuesday, February 17, 2009 8:20 AM Barbara I To: Boswell, Eric J; Starr, reg; Donovan, Patrick D Cc: Subject

,--, FW:ORGENT: Meeti with Cheryl Miils Tuesday !

Nielsen, Sen~or ~7(C ) Reviewer

-- - ·-- ---- -· 1

..... ... - -

85 B?(C) [----

From:! I Sent: Friday, February 13, 2009 6:05 PM_ To:I _J___ • Cc: _ . J!:ld, Donald R;[_ J Subject: RE: URGENT: ting wtth Cl1elyl Mills J'

B?(C)

83 NATL SEC AGENCvl B?(C)

I think I probably need to attend this meeting n Tuesday. SOIC interests seem clearly to be involved.

From: Refd, Donald R Sent: Friday, February 13, 2009 3:58 PM To: - ] Subject: FW: URGENT: Meeting with Cheryl Mills uesday

87(C)

I This is continuing to come at us as a surprise ... I n't think Erie has seen yet... I've given it to Greg, Pat D, -iinST

land 87(C) B?(C)

FnMml. ______ -Sent: Friday, foebruary 13, 2009 3:29 Pt1_ __ _.__ __ _ _


To: Boswell. Eric J; Reid, Donald R;l ec:C-_ _._ - - -subject: URGENT: Meeting with Cheryl Mills T ay

Classification: .K'8fI

Good afternoon -


BLUF: NSA/IAO seniors will be meeting with Ms. ills Tuesday on Blackberry vulnerabilities and the range of mitigation options based on a request she made of me this rning. I want to ensure that you have the opportunity to attend, or to send your experts, to join the discussion and h ar firsthand what the options are.

Date: Tuesday, 27 February 2009 Time: 1400 Place: The Secretary's Conference Room POCs: Lori Mclean (for Chief of Staff);[ (for NCR State/NSA) 83 NATL SEC AGENCY

-- B?(C) Background: I believe IAD was to have coordinate with you, but things have been developing quickly (as they always do on the Friday before a long weekend!) and I did N T want to assume that you had been informed of the meeting and that you had been invited to participate, as is bot desired and appropriate. If this IS first heard for you, please be assured that it was NOT intentional, but more alo g the line of "fog of bclttle" or Htoo many cooks ... "

1

I I UNCLASSIFIED U.S. Department of State Case No. F-2015-05028 Doc No. C05838715 Date: 02/05/2016

CO 5 8 3 8 715=1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838715 Date: 02/05/2016

Obtain~d by Judicial Watch, Inc. via FOIA

I apologize up front for inadvertently forcing the i ue. I met with Ms. Mills this morning to introduce myself and was immeC:iately questioned about the Hart of the po ibleu re: the Blackberries. NSA is fully prepared to brief on the vulnerabilities; to make sure they understand full the requirement (which was stated to me as needing to use the Blackberries in the Secretary's Suite at the unclass fled level for scheduling/emailing etc. and possibly also for voice); and to discuss/offer mitigations that would enable re lutlon of the requirement.

[_ ---- _=-_Jnd ,-- . - h ve been charged by Debbie Plunkett (D/IAO) to lead the briefing team. Please do not hesitate to contact them, or e, to help shape the agenda, ask questions, etc. Their phone numbers are! __ _

1

I 83 NATL SEC AGENCY

I would greatly appreciate your letting· !Ccc'ed on this note) know who will attend tro83 NATL SEC AGENCY OS offices so that she can advise Lori McLean prlo to the session. 87(C)

Thank you for working with me on this. _=.J ---------------·------------ ---L -_] I Senio.tlllSA uj· Ison Representative, U.S. State De rtment

commercial STE

2


83 NATL SEC AGENCY 87(C) 83 NATL SEC AGENCY


CO 5838 7 l 6 :1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838716 Date: 02/05/2016 Obtained by Judicial Watch, Inc. via FOIA

~ELEASE IN PART 85, 8(7)C:

8(3)50 USC 3605, Public Law 1

6-36, Sec. 6(a) National Security ~ct of 19~9 _ _ j

DS016

Ret'1 Donald R

From: 1RELEASE IN PART 8(3)-18-USC-Reid, Donald R l Wednesd~e~ 18.. 2009 li°O AM Sent: To: Cc:

[79~.! B(_!l _ _ _ _ I 87(C)

Subject FW: Recap - Meeting : Blackberries IUNCLAS~IFIEDl REVIEW 1

AUTHORITY: Here's the results of our meeting yest~rday ... as I been speculating, the issue here Is one of personal comfort .. $ Barbara does not use a computer so our view of someone ded to their email (why doesn't she use her desktop when in the Nielsen, SCIF?) doesn't fit this scenario ... during the campa gn she was urged to keep in contact with thousands via a BB ... once Senior she got the hang of It, she was hooked ... now eve day. she feels hamstrung because she has to lock her BB up ... she Reviewer does go out several times a day to an office they ve crafted for her outside the SCIF and plays email catch-up ... Cheryl Mills and others who are dedicated BB addicts are strafed because they too are not near their desktop very often during the working day ... at this 2PM meeting Che I indicated she last checked her email at 8:30 ... they are used to having the BB on their hip and staying closely in to ch with developments during the day

85 B7(C)

I From: I 83 NATL SEC AGENCY' Sent: tu~Fe&ruary 17, 2009 4:01 PM To: Astlbery, Wayne; Dinger, John R; Boswell, Eri Donovan, Patrick O; Wlseearver, Olartes D; Stan

B7(C) B7(C)

ec:C _: =- =-~ SUbject: Recap - Meeting re: Bladcl:>errles

J; r - -:-~. ~ld_B· Starr, Greg; L , Gary A;

- - - - · j 83 NATL SEC AGENCY B7(C)

Classification: SECRET

L- - ---ACTION:

- - - ---

SUMMARY: -Premeeting: at the premeetlng, attendee determined that not enough specifics were known about the

requirement to jump right in with a discussion an that Ms. Mills should be invited to describe the requirement for the group at the start of the meeting. In addition, it w s agreed that this was not a decision meeting; rather, a discussion and information gathering meeting to enable eve one to a) better understand the requirement, b) better understand some of the wlnerabilities, mitigations, costs (int rms of functionality lost, time needed to develop solutions, etc.) associated with the requirement, and c) determln how to move forward.

85 B7(C)

-Meeting: Ms. Mills described the require ent as chiefly driven by Secretary Clinton, who does not use standard computer equipment but relies exclusively on her Blackberry for e-mailing and remaining In contact on her sc~edule, etc. lde~ly all members of her suite would be alto ed to use Blackberries for communication in the SCIF;r _ ]

I was not the primary driver, but if po sible would be a plus.

1

8(1 ),(8)(3)-18 1 USC 798, (8)(3)-P .L. I 86-36

I UNCLASSIFIED U.S. Department of State Case No. F-2015-05028 Doc No. C05838716 Date: 02105/2016--

CO 5 8 3 8 7 l 6:1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838716 Date: 02/05/2016


I ~en the vulnerabilities wece..descdbed. Ms.Mills aulck~focused on the main Ob}tatle t_o_u~io~kberrle~ in

~- J L_~_JFurther discussion indicated that somf mitigations;! ·- woul(f remove the. very functionality desired I _ _____ .. ]while others might take time to develop. Ms. Mills

B(1), : I (8)(3)-18 : USC 798, (B)(3)-P .L. 86-36 - -- ----,·

has witnessed use of Blackberries in other sensit,;~ (but perhaps not SCIFed) spaces; she asked some excellent questions about what might be possible and prudent. She alf<> asked about precedent; former Secretary Rice had received waivers for her staff; however, use expanded to an unma!geable number of users from a security perspective, so those waivers were phased out and Blackberry use was not allo ed in her Suite.

Ms. Mills asked about the President's Bia berry and whether the information about that was compartmt:nted; she unde~nds that she cannot be given J.ntorma1 ion ~b~ut -~he specifics.I mm . J

I left out many details - I invite any of you to sha your perspective, your key takeaways, your different take on the meeting - or to ask any questions- important thl g is that everyone agree that I captured the action and deliverable accurately, and that everyone now know what th requirement really is - if I have failed in either of those regards, PLEASE do NOT hesitate to correct or question!

in what I believe was a very productive and useful meeting of the

85

All the best, and thanks again to all who participat minds. -==i 83 NATL SEC AGENCY

Attendees: 83 NATL SEC AGENCY STATE DEPARTMENT: NSA:

Cheryl Mills, Chief of Staff to S [~-=--=-~' hief, Vulnerability Analysis and Operations JobnJ)Jn.itec. Acting A/S for INR Chief Systems Engineer, Systems Security I ]chief Information Officer ~ Chief, Systems and Network Analysis Center Charlie Wisecarver, Chief Technology Officer [ SNAC/Network Infrastructure Pat Donovan, OAS for OS/Countermeasures _ Senior NSA Liaison Rep to State Dept Don Reid, Assistant Director for OS/Security Infra ructure

87(C)

Wayne ~bery, Director, Office of Security Techn logy J Director, Office of Information Securi 87(C)

c_ ------·------- ----83 NATL SEC AGENCY'

~ni~r ~A Liaison Representative, U.S. State Dep rtment

[_m ________ J~-~mercial I r~--- __ _ 83 NATL SEC AGENCY

2


CO 5 8 3 8 7 1 7 :1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838717 Date: 02/05/2016

Reid, Donald R

From: Reid, Donald R


DS017jRELEASE INPART I (!!_{3)-18-USC 798, 8(1)

Wednesday, February 18, 2009 8:53 AM

RELEASE IN PART BS, B(7)C, 8(3)50 USC 3605, Public Law 86-36, Sec. 6(a) National Secur~ Act o_.!_!959

UNCLASSJFIE

Sent To: Cc:

10onovan. PatnCKO- - ~ B7(C)

Subject: FW: Recap • Meeting e: Blackberries REVIEW AUTHORITY:- Barbara Nielsen, Senior I Reviewer

SECRET//NOFORN

I _j. the coordination and planning for yesterday' discussion with Cheryl Mills that was prompted by

j!hat ha§..§ and h.er staff be§.o..bJie.fed on w.ittves

More generally on the issue of Blad(berries in the options to meet S and others requirements ... ther:e

From:[=._ __ Sent: Tuesday, February 17, 2009 4:01 PM

-- -- --

meeting did not anticipate the need for S/EX representation ... this SA has raised a host of related issues .. . mistbt fo thA .catet1001..nL

.to. travel aru1.tectm.oloa~ vulnerabilities? .. __ ___ I OS intends to fol oW-Up on this paftfcular

ahogany Row, we will be working with NSA on a set of possible rtalnly will be costs associated with anything that get Implemented ...


B7(C)

I 81

1 =1R~~ .Donald R;_5tarr, Greg; --- 87(C)

, Gary A;, - - 03 NATL SEC AGENCY! To: Ashbety, Wayne; Dinger, John Ri Boswell, E . Donovan, Patrlc:M>:mirver, Olarles D; Sta cc:C-SUtijed: Recap • M ng re: Bladcben1es 83 NATL SEC AGENCY

87(C) Classification:~

ACTION:

SUMMARY: -Premeetlng: at the premeeting, attendee determined that not enough specifics were known about the

requirement to jump right in with a discussion an that Ms. Mills should be Invited to describe the requirement for the group at the start of the meeting. In addition, It w s agreed that this was not a decision meeting; rather, a discussion

85 B7(C)

and Information gathering meeting to enable eve one to a) better understand the requirement, b) better understand B(1 ), some of the vulnerabilities, mitigations, costs (in t rms of functionality lost, time needed to develop solutions, etc.) (B )( 3)_ 18 associated with the requirement, and c) determi how to move forward. USC 798,

-Meeting: Ms. Mills described the require ent as chiefly driven by Secretary Ointon, who does not use standar (B)(3)·P .l. computer equipment but relies exduslvely on her Blackberry for e-mailing and remaining in contact on her schedule, ]86-36 ~c. ldeiltv all members of her suite would be allo ed to use Blackberries for communication in the SCIF; [=1 I was not the primary driver, but if po sible would be a plus.

SCIFsJ When tbuulnecabilitles were d · Mills.ouicklv focused an the main obstacle to usirul BlackberriesJ

._JFurther discussion ind.!_cated that som; mitigations . _ __J would remove the very runctlonality desired I __ jwhile others might take time to develop. Ms. Mills

has w~ne5Sed u,. of Blackberries In other sensttl (but pe".'"p' not SCIFed) spa<es; she asked 50me excellent questk>ns

8(1), (8)(3)-18

USC 798, I (8)(3)-P .L. 86-36


CO 5 8 3 8 71 7:1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838717 Date: 02/05/2016 Obtain by Judicial Watch, Inc. via FOIA

about what might be possible and prudent. She al asked about precedent; former Secretary Rice had received waivers for her staff; however, use expanded to an unma geable number of users from a security perspective, so those waivers were phased out and Blackberry use was not alto ed in her Suite.

Ms. Mills asked about the President's Bia berry and whether the ln~!fllatlon about that was compartmented; she understands that she cannot be given inform ion about the speclficsr - - ·-

I left out many details - I invite any of you to shar your perspective, your key takeaways, your different take on the meeting- or to ask any questions- important thi g is that everyone agree that I captured the action and deliverable accurately, and that everyone now know what th requirement really is - if I have failed In either of those regards, PLEASE do NOT hesitate to correct or question I ·

BS I

All the best, and thanks again to all who partlclpa minds. I I

d In what I believe was a very productive and useful meeting of the I

Attendees: STATE DEPARTMENT: N .

Cheryl Mills, Chief of Staff to S John DingerJcting A/S for INR C- hlef Information Officer Charlie Wisecarver, Chief Technology Officer Pat Donovan, DAS for OS/Countermeasures

83 NATL SEC AGENcl' B7(C)

hief, Vulnerability Analysis and Op83 NATL SEC AGENCY 'r-----' !Chief Systems Engineer, Systems Security

!Chief, Systems and Network Analysis Center 87 ( C) 1-----sNAC/Network Infrastructure

Don Reid, Assistant Director for OS/Security lnfras ru Wayne Ashbery, Director, Office of Security Tech logy I l Director, Office of Information Secur'

re

----~ ,-Senior NS.I\ Liaison Representative, U.S. State Oep rtment I l commercial 1 ·--ISTE . --------------------------------

i

Senior NSA Liaison Rep to State Dept

87(C)

83 NATL SEC AGENCY B7(C) 83 NATL SEC AGENCY


CO 5 8 3 8 7 2 4 :1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838724 Date: 02/05/2016

Obt';"'I by Jod~;;;i.'"' ,;, FOL'\

REVIEW AUTHORITY: Barbara Nielsen, Senior ReviewerJOnald R

Frorn: Reid, Donald R Sent:

1

..we_ctnesdaLMarch t1. 200.9 4:4,M To: Cc:

subject: "Rt:~ •ltOUQnts __ r __ Scheduling a meeting is fine, I guess .. L __ _ FrOm: -- I Sent: Wednesday, March 11, 2009 3:22 PM To: Reid~ Donald_B__ ec: I - -] su~ea: FW: 1nougnts ---Importance: High

IRELEASE IN PART 85, B(7)C, 8(3)50 USC 3605, Public law

1

86-36, Sec. 6(a) National Security Act of 1959

[UNCLASSIFIEDI - --

B?(C)


B?(C)

85 I

87(C)

[ -- - Fontacted me to say that she had call from Cheryl Mills after receiving the BB memo yesterday and that she liad a telecon with her this morning. She said: .

I shared with her the Secretary's comment after re ing the memo that "she gets ir.

From: Sent: Wednesday, a To:[__ 1

9 2:21 PM

Subject: FW: Thoughts

Oassiflcation: SECRET NOFORN

Hi, Cheryl:

Here is the note I forwarded to Cheryl Mills this m ming after I dropped off the info.

All the best,[]

r -----senior NSA Liaison Representative, U.S. State Dep ment

l

83 NATL SEC AGENCY BS B?(C)

' i '

83 NATL SEC AGENCY,. 87(C)

B?(C)




CO 5 8 3 8 7 2 4 :1EO U.S. Department of State Case No. F-2015-05028 Doc No. C05838724 Date: 02/05/2016

I

I

_Jcommercial L_J; d by Judicial Watch, Inc. via FOIA 83 NATL SEC AGENCY

----------------------·--·--....... _____ .. _____ --

S:nesaay, Marcn11~2i 9:10 AM 83 NATL SEC AGENCY 87(C)

To: Mills, Cheryl D Cc: Dinger, John R Subject: Thoughts

Classification: SECRET NOFORN

Hi, Cheryl:

I hope the information in the memo and the slig tly expanded background paper help with your decision re: whether to pursue use of BlackBerries in the suite.

Sometimes the distinction between what can be one and what is, or is not, recommended to be done differ; this is one of those instances. OS's response illustrates thei level of concern based on their extensive professional expertise.

Options (as I see the_m_,_): _ _ _ _____ .__

I hope this additional info is useful and I apologiz if offering it is presumptuous - please let me know what else NSA can do to help, either in the decision-making process or in the decision-implementation process. I can identify with your statement that we as a community of technical a d security experts should have done a better job of anticipating the need for expanded use of personal electronic d tees- if that's an area where the Administration and the Secretary need us to focus and drive harder, I'll do my utm st to turn that message into reality.

I

I 85

I

Very respectfully, L I 83 NATL SEC AGENCY 87(C) c -__ _ _,_J,___ ______________ _

Senior NSA. liaison Representru..s_._s~e De [ _ I commercial ISTE

rtment

2

83 NATL SEC AGENCY I 87(C) 83 NATL SEC AGENCY


CO 5 8 3 8 7 2 4 :1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838724 Date: 02/05/2016 I Obtain by Judicial Watch, Inc. via FOIA

I

3


Obtained by Judicial Watch , Inc. via FOIA

Kate Bailey Judicial Watch 425 Third Street, SW, Suite 800 Washington, DC 20024

Dear Ms. Bailey:

United States Department of State

Washington, D. C. 20520

February 5, 2016

Case No. F-2015-05028 Segment: DS-0001 Part 5

I refer to our letter dated December 24, 2015, regarding the release of certain Department of State records under the Freedom of Information Act (the "FOIA"), 5 U.S.C. § 552. As we informed you, the review of the records retrieved from the Bureau of Diplomatic Security had is ongoing.

For this production, we have identified six additional documents that are responsive to your request. After reviewing these documents we have determined all six may be released in part. All released material is enclosed. An enclosure explains the FOIA exemptions and other grounds for withholding material.

If you have any questions, your attorney may contact Marsha Edney, Trial Attorney, at (202) 514-4520 or [email protected]. Please refer to the case number, F-2015-05028, and the civil action number, 15-cv-00646, in all correspondence about this case.

Sincerely,

JlLJG..{_ O ~ Por John F. Hackett, Director Office of Information Programs and Services

Enclosures: As stated

Obtained by Judicial Watch , Inc. via FOIA

T h FrcC'dom oflnfor mntion A ·l (5 USC 552)

FOIA F,xcmptions

(b)( I) Information specifically authorized by an executive order to be kept secret in the interest of national defense or foreign policy. Executive Order 13526 includes the following classification categories:

I .4(a) Military plans. systems, or op¢rations 1.4(b) Foreign government information 1.4(c) lntelligcncc activities, sources or methods, or crypto logy I .4(d) Foreign relations or fore ign activities of the VS, including confid n ia l sources l .4(e) Sciemific, rcchnological, or economic matters re ati n • o national security,

includi11g ucfonse against transnational tt! rrorism l .4(f) U . . Gover un nt pr grams for safeguarding nuclear mater ials or faciliti ·s l .4(g) Vulncm ili rics or cupah!lities of syst ms in . tallations, infrnstructures, projects,

plans, or protect inn serv ices rcluting to US national security, including defense against trans1 at' < l rn rism

l .4(h) W1::apons of mass destruction

(b)(2) Related solely to the internal personnel rules and practices of an agency

(b)(3) Specifically exempted from disclosure by statute (other than 5 USC 552), for example:

ARMS EXP CIA PERS/ORO EXPORT CONTROL FSACT JNA !RAN

Arms Export Control Act, SOa USC 241 l(c) Central Intelligence Agency Act of 1949, 50 USC 403(g) Export Administration Act of 1979, 50 lJSC App. Sec. 241 l(c) Foreign Service Act of 1980, 22 USC 4 004 Immigration and Natfonality Act, 8 USC 1202{1), Sec. 222(t) Iran Claims Settlement Act, Public Law 99-99, Sec. 505

(b)(4) Trade secrets and confidential commercial or financial information

(b)(5) lnteragcncy or intra-agency communications forming part of the deliberative process, attorney-client privilege, or attorney work product

(b)(6) Personul privacy information

(b)(7) Law enforcement information whose disclosure would: (A) interfere \Vith enforcement proceedings (B) deprive a person of a fair trial (C) constitute an unwarranted invasion ofpeminal privacy (D) disclose confidential sources (E) disclose investigation techniques (F) endanger life or physical safety of an individual

(b)(8) Prepared by or for a govermnent agency regulating or supervising financial institutions

(b)(9) Geological and geophysical information and data, including maps, conccming wells

Other Grnunds for Withholding

NR Material not responsive to a FOJA request excised with the agreement of the requester



RELEASE I IN PART

u. 87 C ,BSiotSlllu

SEPARATION STATEMENT

Title 40, U.S. Code

Section 783(b) • Commllllladlon of Clla.it'at lnfcnnlrllon ~ Go\iarni• 18111 Officer a r EmplQJlle

~d) • f"9nallllfll fol' VIDldon

Tltla 42, U.S. Code

REVIEW AUTHORITY: Sharon Ahmad, Senior ) Reviewer

Datl Slsmd (mm dd nwJ

MILLS, Cheryl D.

86 87(C)


86

Obtai~d by Judicial Watch, Inc. via FOIA UNCLASSIFIED U.S. Department of State Gase No. F-2015-05069 Doc No. C05833787 Date: 11/13/2015

• 11. 'These l1lllric!lans ant oonalsl8nt with and do llClt 1111peised8. ocm1llct wllh, or olhBIWlle llllel' the employee ob!lgsllons, rlgrds. or llabllllles c:r9llltad by ElC8Q.llfye onser No. t3528 (75 Fad. Reg. 701), or eny eoa:iesaor ttl8letD aactlon 1211 of title S. United S1a'lllG Cede (gowmlng dlllclolures to ~); Mdlon 1034 ot lltla 10, Unltscl Stlltal Coda, • amended by tha MllltBly Whl8lleblcMer Prol8c:tiofl NA. (9CMln'llno dladolL.118 ID Ccr1gl'U8 by mam!:1er1 of lhe mllltlry): aedlon 2302(b) (8) of lille IS, Unltad S1alBe Code, Bii

1111endsd by the Wtls:lfeblower Protadlun Ad or 11189 (gOY9ITl!ng dlsdD8UTBI af lllega!ll)r, wat8, fraud , abuse or publtc he8ltn or aafety tru'Gll!i)i th& lntelllgence lclantillol Ptol8Clfon Ad ol 1982 {SO u.s.c. 421 et aeq.) (gowmlng dladC6ln8 tnat oould expose c:ionftd8nlfal GcMlmmetlt agents); aec:tiuJll 7(c) and 8H Of the lnlpec:tor Gell8t8l Ad of 1978 (5 U.S.C. App.) (miming to dllclolurea to 811 lntpedDI genera!, the~ genaral of the lntal!lgenc:e Community. and Congraaa); &eetion 103H(g)(3) of the Nll!lonal Seculfty /Ad of 1847' (50 U.S.C. ~(9)(3) (n1lallng ID dllc:blwaa ID thll lnspadl:r geninl rl ttw lnmlD;ance Community); ll8Cllona 17(d)(S) n 17(e)(3) al' the central !nlBlllQence /lol1t¢'I At:I. of 1949 ,(50 U.S.C. o403g(d)(5) and 403q(eX3)) (rolal!ng to dladceurea ID the lnapectzr Genar111 of the cartral I~ Aflrn:t and Co.veu); and the 8latuml whld! protact egalnat d19c:kllure 1hat may campranlsj, the l'\donal aecurlty, lndudlng aectiol'l8 841, 793, 71M, 798, "952 and 1924 oftllle 18, Unlllld S'8tel Code, and~ 4 (b) Ol lhe SutM.\nW& Ac:tMtlas corrtrol /lid. of 1950 (50 U.S.C. IOCtlon 783(1>)). Tho detlnltlona. 111qUlremen1I, obllgllllon1, rlghm, ll8nl'JliDnl, and !labll!lfal a:aated by eald exaartNe on:er and llllad ltllulBll &18 lnOOIJ)Ol1ltsd Into tl!ll a;reement and are c::crrtrolllng..

12. I hM read IHI AQreement carefUlly Ind my qulltlana, f any, haw b8en answcnd. I eda\owladgo that the briefing ofllcer ha lllldt aYalloble tD me 119 Ell8CuliYe Order and ltlltl.rlas i'8tllrunc:8d bl tllll agr&IWn8nt and Its lmplementttlg regUlaticn (32 C7R Part 2001 , l8Cllall 2001 .8Dfd)(2) > ao t11a1 1 mar nm t11am at thll 11m8. If' '° c11oa1e.

• NOT APPUCA8LE TO NOf+.GCMRHMENT PEIUlONHE1.. 8IQNING lHl8 AGiRe:Mal'r.

ii'OAAME I DATE 11 8ECURITYN\AIBElt (Sl91itda9,....,

OflCWtlZAil& (F comtACTOll. UCEHSEE. GIWIT'lll! OR NJEKT, PAOllUlE: MAME. ADDAUS, AHi), IF APPUCAA.&. F!DEAAL l\.f'll.Y eooe NUldEIQ "-"~

WITNESS ACCEPTANCE

THE l!XECUt10N Of THIS AGIU!EllENT WAS WITNES8£D TH& UNDERSIGNED ACCEPTED THll AGREEMENT BY THI UNDERSIONSD. ON 8EHALP OP ntE UNITED &TATEi 00\IERNMENT.

lil<llCAl\lRE IMTE SIGIU.lURE M1"E

IWIENll>AllDRESS (1)1» or llltf# MAM!! NCO NnlRE88 (J)pf•~

SECURITY CESRIEFING ACKNOWLEDGEMENT I IUfllm 1tW1 111t ~ of 11'18 .splcNge ia-. _._ fmaial crlrmd llM IRS 8dC&.dhlll lllliml appBcablo IO the ~~ of clledod !n!armll:an lllMt been midi awlllbla ID ma; !hit 1 MY9 rulumld a:a dml&ad Wurmatlon In IT&' CUllDdy; !hat I '*11 nee llll!TllnOllclt or tranlmll dasSllllld flll'lllmlOm ID ll'!y·unai!hortmd pman or lllUllldZldlan; 11111 1 iloGl ~ rapart to !he F«fnl 8lnau of lnvalllgdon 11" ~ Dy 111 ~ peq.on to IOkft dalll8d tnfarmdcn, IRS Dial I (JIM) (l\IY8 no!) (ll!llia out lnlpprcpda:e ~at wan!a) rlCllliad a~~·

SIONAJVllll OI' 80'lD'rEE


86

86 B7(C)

C 0 5 8 3 8 71 TIED U.S. Department of St;:ite1

Caase JNo .. .F-?015-05028 Doc No. C05838713 Date: 02/05/2016 -05 a1ne I-by ud1c1al Watch , Inc. v ia FOIA

Rel~ Donald R

From: Sent:

DS013

Reid, Donald R I

RELEASE IN PART B(7)C, 8(3)50 USC 3605, Public Law 86-36, Sec. 6(a) National Security Act of 1959

To: Cc: Subject:

Friday, February 13, 2qo9 3:56 PM tarr Gr ; _DM~_atriQ~D-~

FW: URGENT: Meetln with Cheryl Mills Tuesday

I 87(C)

l

Amazing ...

From '........-~~----~~=='

Sent: Friday, February 13, 2009 3:2~P~--~--------. To: Boswell Eric J· Reid, Donald R,· [ Cc:[~ - 1 ---.----~

subject: URGENT: Meeting with Cheryl Miiis Tu ay

Classification: ~ JUNCLASSIFIEDj

Good afternoon -

87(C)

· 83 NATL SEC AGENCY 87(C)


[REVIEW AUTHORITY: Barbara Nielsen, l l~enior Reviewer

BLUF: NSA/IAD seniors will be meeting with Ms. ills Tuesday on Blackberry vulnerabilities and the range of mitigation options based on a request she made of me this orning. I want to ensure that you have the opportunity to attend, or to send your experts, to join the discussion and he r firsthand what the options are.

Date: Tuesday, 27 February 2009 Time: 1400 Place: The Secretary's Conference Room

.-------~-----.

POCs: Lori Mclean (for Chief of Staff); for NCR State/NSA) 83 NATL SEC AGENCY 87(C)

Background: I believe IAD was to have coordinate with you, but things have been developing quickly (as they always do on the Friday before a long weekend!) and I did N Twant to assume that you had been informed of the meeting and that you had been invited to participate, as is bot desired and appropriate. If this IS first heard for you, please be assured that It was NOT Intentional, but more alo g the line of "fog of battle" or ,.too many cooks . . .''

I apologize up front for inadvertently forcing the i ue. I met with Ms. Mills this morning to introduce myself and was immediately questioned about the "art of the pos Ible" re: the Blackberries. NSA Is fully prepared to brief on the vulnerabilities; to make sure they understand full the requirement (which was stated to me as needing to use the Blackberries In the Secretary's Suite at the unclass fled level for scheduling/emailing etc. and possibly also for voice); and to discuss/offer mitigations that would enable re lution of the requirement.

h ve been charged by Debbie Plunkett (D/IAD) to lead the briefing team.Pease e, to help shape the agenda, ask questions, etc. Their phone numbers are 83 NATL SEC AGENCY

I would greatly appreciate your letting cc'ed on this note) know who will attend from the CIO and OS offices so that she can advise Lori Mclean prio to the session.

Thank you for working with me on this. I I --------- -------·-·-·-··--·····--


~--· ·-_J 83 NATL SEC AGENCY B?(C) Senior NSA Liaison Representative, U.S. State Dep rtment

1


I

C 0 5 8 3 8 7 l 3;1ED U.S. Department of State1

.Case No .. F-2015-050.28 Doc No. C05838713 Date: 02/05/2016 -013 a1 ea by Judicial Watch, Inc. via FOIA

___ ____, commercial [, ___ ~!STE 83 NATL SEC AGENCY

2


CO 5 8 3 8 71 S:IED U.S. Department of State Case No. F-2015-05028 Doc No. C05838715 Date: 02/05/2016 Obtained by Judicial Watch , Inc. via FOIA RELEASE IN PART B(7)C,

DS015 [UNCLASSIFIED!

8(3)50 USC 3605, Public Law 86-36, Sec. 6(a) National Security Act of 1959

Reid, Donald R ------------------------------... --------------------------------------.,.....REVIEW From: Sent: To: Cc: Subject:

Reid, Donald R Tuesday, February 17, 2009 8:20 AM Boswell, Eric J ; Starr, reg; Donovan, Patrick D

GENT: Meetln with Cheryl Miiis Tuesday

AUTHORITY: Barbara I

Nielsen, Sen!or ~?(C) Reviewer

85 87(C)

From: sent: Frida~ Februa 13 2009 6:05 PM To: I_ Cc: Reid, Donald R;~--.-~

• RE:OR"GE : eetlng with Cheryl Miiis

87(C)

83 NATL SEC AGENCY! 87(C)

I think I probably need to attend this meeting n Tuesday. SOIC interests seem clearly to be Involved.

From: Reid, Donald R Sent: Frida Februa 13, 2009 3:58 PM To: Sulj : FW: URGENT: Meeting with Cheryl Miiis uesday

This is continuing to come at us as a surprise ... I d n't think Eric has seen yet... I've given it to Greg, Pat D, - - , and ~inST

87(C)

87(C) 87(C)

frvm:.___ _ ____ _, Sent: Friday, February 13, 2009 3:2r=9~P-'-M""---L-----. To: Boswell, Eric J; Reid, Donald R;


ec:C I '-----~--____,

Subject: URGENT: Meeting with Cheryl Mills Tu ay

Classification: KQ![I

Good afternoon -


8LUF: NSA/IAD seniors will be meeting with Ms. ills Tuesday on Blackberry vulnerabilities and the range of mitigation options based on a request she made of me this orning. I want to ensure that you have the opportunity to attend, or to send your experts, to join the discussion and h ar firsthand what the options are.


,-------'---~

POCs: Lori Mclean (for Chief of Staff); (for NCR State/NSA) 83 NATL SEC AGENCY 87(C)

Background: I belleve IAD was to have coordinate with you, but things have been developing quickly {as they always do on the Friday before a long weekend I) and I did N T want to assume that you had been informed of the meeting and that you had been Invited to participate, as Is bot desired and appropriate. If this IS first heard for you, please be assured that it was NOT intentional, but more alo g the line of "fog of battle" or "too many cooks ... "

1

l UNCLASSIFIED U.S. Department of State Case No. F-2015-05028 Doc No. C05838715 Date: 02/05/2016

CO 5 8 3 8 71 S:IED U.S. Department of State Case No. F-2015-05028 Doc No. C05838715 Date: 02/05/2016 Obtai ed by Judicial Watch , Inc. via FOIA

I apologize up front for inadvertently forcing the i ue. I met with Ms. Mills this morning to introduce myself and was immetliately questioned about the "art of the pos Ible" re: the Blackberries. NSA is fully prepared to brief on the vulnerabilities; to make sure they understand full the requirement (which was stated to me as needing to use the Blackberries In the Secretary's Suite at the unclass fled level for schedulins/emailing etc. and possibly also for voice); and to discuss/offer mitigations that would enable re lutlon of the requirement.

~~~~~~~~ nd h ve been charged by Debbie Plunkett (D/IAD) to lead the briefing

team. Please do not h~st~te to contact em, or e, to help shape the agenda, ask questions, etc. Their phone numbers are I 83 NATL SEC AGENCY

I would greatly appreciate your letting i cc'ed on this note) know who will attend fro83 NATL SEC AG ENC'( OS offices so that she can advise Lori Mclean pr o to t e session. 8 7 ( C)

Thank you for working with me on this. ! J

--·-··--·---------·-·--------------·-··- ---Senior NSA U Ison Representative, U.S. State Dep rtment

commercial STE

2




c O 5 8 3 8 71 TIED U.S. Department of State Case No. F-2015-05028 Doc No. C05838717 Date: 02/05/2016 Obtained by Judicial Watch, Inc. via FOIA

I

Reid, Donald R

From: Sent:

DSO 17 RELEASE IN PART l 8(3)-18-USC 798, 8(1)

18 2009 8:53 AM

RELEASE IN PART BS, B(7)C, 8(3)50 USC 3605, Public Law 86-36, Sec. 6(a) National Security Act of 1959

UNCLASSIFIED]

To: Cc:

.----~~-~~~~--==i

cronovan, PatricKD 87(C)

Subject: FW: Recap - Meeting e: Blackberries REVIEW AUTHORITY: Barbara Nielsen, Senior Reviewer

SECRETl/NOFORN

D .. the coordination and planning for yesterday' discussion with Cheryl Mills that was prompted by what has S and her staff been briete.c:lon..wltb.J:es

More generally on the issue of Blackberries In the options to meet S and others requirements ... there

From: =----o~-=-c,---~-:-=--::-:'

meeting did not anticipate the need for S/EX representation ... this SA has raised a host of related issues ... mI~ILi~J!!no1lf .o JoJr.av.eland.lechnol~ vulnerabilities? ..

_ t OS intends to fol o-w--u-p_o_n~t~,-s-p-a ~c-u~a-r~

ahogany Row, we will be working with NSA on a set of possible rtalnly will be costs associated with anything that get implemented .. .


87(C)

I 81

Sent: Tuesday, February 17, 2009 4:01 PM To: Ashbery, Wayne; Dinger, John R; Boswell, E Donovan, Patrick D:..w!SJ!(.arver, Olarles D; Stant Cc: [

...__-..---·-~Re=ld~, =Do=n=ald~R; !;itarr, Greg; I~- 87(C) I 83 NATL SEC AGENCY!

Sub'..:::ecto=::"'R=eca=p,---"M=cr:n=-=g~re: Blackberries 83 NATL SEC AGENCY 87(C)

85 Classifica~ti_on_:_s_Ec_R_E_r _________ , ______________________ 87(C)

ACTION:

SUMMARY: -Premeeting: at the premeeting, attendee determined that not enough specifics were known about the

requirement to jump right In with a discussion an that Ms. Miiis should be Invited to describe the requirement for the group at the start of the meeting. In addition, It w s agreed that this was not a decision meeting; rather, a discussion and Information gathering meeting to enable eve one to a) better understand the requirement, b) better understand ~B( 1 ) some of the vulnerablllties, mitigations, costs (int rms of functionality lost, time needed to develop solutions, etc.) (B)(:i)-18 associated with the requirement, and c) determin how to move forward. usc 798

-Meeting: Ms. Mills described the require ent as chiefly driven by Secretary Clinton, who does not use standar (a)(3)-P.L. computer equipment but relies exclusively on her Blackberry for e-mailing and remaining In contact on her schedule, 86-36 etc. ldeall all members of her suite would be allo ed to use Blackberries for communication in the SCIF; CJ ---~ [ was not the primary driver, but if po sible would be a plus. SCIFsj When the vulnera.bllitles were describe s •. ..Mills_auicklv focused.on the.mai.n...o.bstacle to 11s ine._Blac:kbe.rrl e.s.Jnj

I Further discussion indicated that som mltl ations would remove the

8(1), (8)(3)-18 USC 798, (8)(3)-P.L. 86-36 !

very unctionality desired while others might take time to develop. Ms. Mills has witnessed use of Blackberries in other sensit' (but perhaps not SCI Fed) spaces; she asked some excellent questions

1


CO 5 8 3 8 71 TIED U.S. Department of State Case No. F-2015-05028 Doc No. C05838717 Date: 02/05/2016 Obta;· ed by Judicial Watch, Inc. via FOIA

about what might be possible and prudent. She al o asked about precedent; former Secretary Rice had received waivers for her staff; however, use expanded to an unma geable number of users from a security perspective, so those waivers were phased out and Blackberry use was not allo ed in her Suite.

Ms. Mills asked about the President's Bia berry and whether the information about that was compartmented; I she understands that she cannot be lven inform Ion about the s ecifics.

I left out many details- I Invite any of you to shar your perspective, your key takeaways, your different take on the meeting - or to ask any questions - Important thi g is that everyone agree that I captured the action and deliverable accurately, and that everyone now know what th requirement really Is- if I have failed In either of those regards, PLEASE do NOT hesitate to c;orrect or question I ·

BS I

All the best, and thanks again to all who partlclpat d In what I believe was a very productive and useful meeting of the l minds.[ ·~ · 83 NATL SEC AGENC

B?(C) Attendees: STATE DEPARTMENT: ..NSA: Cheryl Miiis, Chief ofStafftoS ,-~Fhlef, VulnerabllltyAnalyslsand Op83 NATL SEC AGENC John Dinger Acting A/S for INR r- ]chief Systems Engineer, Systems Security C hlef Information Officer Chief, Systems and Network Analysis Center 8 7 ( C) C ar le Wisecarver, Chief Technology Officer NAC/Network Infrastructure Pat Donovan, DAS for OS/Countermeasures Senior NSA Liaison Rep to State Dept Don Reid, Assistant Director for OS/Security lnfras ruM"rT..,.-----~

Wayne Ashbery, Director, Office of Security Techh logy I !Director, Office of Information Securi 87 ( C)

-Se: lor NSA-Llal n Representative, ~=~~~~~::P rtment j J commercial n: ------------------------------------------+-

2

83 NATL SEC AGENCY 87(C) , 83 NATL SEC AGENCYI


CO 5 8 3 8 7 l 6:1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838716 Date: 02/05/2016 Obtained by Judicial Watch, Inc. via FOIA

DS016

RetC1 Donald R

RELEASE IN PART 85, B(7)C, 8(3)50 USC 3605, Public Law 86-36, Sec. 6(a) National Security Act of 1959

From: Sent:

Reid, Donald R eJtne.sdav.~EebnJ~~~009..Z:OO AM

RELEASE IN PART 8(3)-18-USC 798, 8(1) I

B?(C) To: Cc: Subject: FW: Recap - Meeting e: Blackberries [UNCLASSIFIEDj REVIEW ~

AUTHORITY: Here's the results of our meeting yest~rday ... as I been speculating, the issue here is one of personal comfort ... S Barbara does not use a computer so our view of someone ded to their email (why doesn't she use her desktop when in the Nielsen, SCIF?) doesn't fit this scenario ... during the campa gn she was urged to keep in contact with thousands via a 88 .. . once Senior she got the hang of it, she was hooked ... now eve day, she feels hamstrung because she has to lock her BB up ... she Reviewer does go out several times a day to an office they h ve crafted for her outside the SCIF and plays email catch-up ... Cheryl Mills and others who are dedicated BB addicts are strated because they too are not near their desktop very often during the working day .. . at this 2PM meeting Che I indicated she last checked her email at 8:30 ... they are used to having the BB on their hip and staying closely in to ch with developments during the day

85 B?(C)

~f?, 20094:01 PM 83 NATL SEC AGENCY

To: Ashbery, Wayne; Dinger, John R; Boswell, Erl J; ·---.~__,~B.e_~ Don I R· Starr, Greg; '------'

87(C) B7(C)

Donovan, Patrick D; Wisecarver, Orarfes o; Stant I Gary A; Cc:

.._...._~~-~~~-'

SUbj~: Recap • Meeting re: Blackben1es 83 NATL SEC AGENCY 87(C)

Classification: SECRET

ACTION:

SUMMARY: ·Premeeting: at the premeetlng, attendee determined that not enough specifics were known about the

requirement to jump right in with a discussion an that Ms. Mills should be invited to describe the requirement for the group.at the start of the meeting. In addition, it w s agreed that this was not a decision meeting; rather, a discussion and information gathering meeting to enable eve one to a) better understand the requirement, b) better understand some of the vulnerabilities, mitigations, costs (int nns of functionality lost, time needed to develop solutions, etc.) associated with the requirement, and c) determln how to move forward.

BS B7(C)

-Meeting: Ms. Miiis described the require ent as chiefly driven by Secretary Clinton, who does not use standard computer equipment but relies exclusively on her Blackberry for e-mailing and remaining In contact on her schedule, etc. Ideally all members of her suite would be allo ed to use Blackberries for communication In the SCIF;LJ

was not the primary driver, but if po sible would be a plus.

1

8(1 ), (8)(3)-18 USC 798, (8)(3)-P.L. 86-36


C05838716:1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838716 Date: 02/05/2016 Obtained by Judicial Watch , Inc. via FOIA

~lfs ~-he,_n._th_e_v_ul_n_er_a_b_iliti_·_es_w __ e_r_e_d_e_sc_ri_b_•l_ s. MJlls aulcklv focused on the main obs.ta.tie to using Blackberries la] [_ urther discussion Indicated that som • miti ations, would remove the ve_ry_,f-un-ct-lo~nality desired C . wnile others might take time to develop. Ms. Miiis has witnessed use of Blackberries in other sensitiv (but perhaps not SCIFed) spaces; she asked some excellent questions about what misht be possible and prudent. She al asked about precedent; former Secretary Rice had received waivers for her staff; however, use expanded to an unma geable number of users from a security perspective, so those waivers were phased out and Blackberry use was not allo ed in her Suite.

Ms. Miiis asked about the President's Blac berry and whether the information about that was compartmented; she understands that she cannot be given lnforma ion about the specifics.

I left out many details- I invite any of you to shar your perspective, your key takeaways, your different take on the meeting - or to ask any questions - Important thl g Is that everyone agree that I captured the action and deliverable accurately, and that everyone now know what th requirement really is - If I have failed In either of those regards, PLEASE do NOT hesitate to correct or question!

All the best, and thanks again to all who participat d in what I believe was a very productive and useful meeting of the

8(1), (8)(3)-18 I

use 798, (8)(3)-P.L. 86-36

85

minds. ==1 83 NATL SEC AGENCY

Attendees: STATE DEPARTMENT: NSA:

83 NATL SEC AGENCY

Cheryl Mills, Chief of Staff to S hief, Vulnerability Analysis and Operations

IJoho.D.lnur. Acting A/S for INR Chief Systems Engineer, Systems Security . ]chief Information Officer Chief, Systems and Network Analysis Center ~C-h-ar-lle_W_ls-ecarver, Chief Technology Officer [_· ___ JS=N-'-iAC/Network Infrastructure Pat Donovan, OAS for OS/Countermeasures I ,Senior NSA Liaison Rep to State Dept Don Reid, Assistant Director for OS/Security lnfras ructure

87(C)

Wa_ ne Ashbery, Director, Office of Security Techn logy Director, Office of Information Securl 87(C)

..----- -... - ------·----··-83 NATL SEC AGENCY:

Senior NSA Liaison Representative, U.S. Stat_e Dep rtment

[~m~--·--·- C~-~~~~ial I =t~.. ---- 83 NATL SEC AGENCY

2


CO 5 8 3 8 7 2 4 :1ED U.S. Department of St::ite. Case No. F-2015-05028 Doc No. C05838724 Date: 02/05/2016 Ul'ita1necfby Judicial \/\latch , Inc. via FOIA

DS022 REVIEW AUTHORITY: Barbara Nielsen, Senior Reviewer>onald R

From: Sent: To: Cc:: Subject:

I

Reid, Donald R Wednesdav March

~r::-rrrougn---...---~

RELEASE IN PART 85, B(7)C, 8(3)50 USC 3605, Public Law 86-36, Sec. 6(a) National Security

Ct Of 1959

[UNCLASSIFIED! 87(C)

I I

Scheduling a meeting is fine, I guess. ·'---~----------------------' 85 I

From:J Sent: Wednesday, Marth 11, 2009 3:22 PM To: Reld Donald R 87(C)


87(C)

/ ontacted me to say that she had call from Cheryl Mills after receiving the BB memo yesterday and that s had a telecon with her this morning. She said:

I shared with her the Secretary's comment after rea ing the memo that "she gets ir.

From: I Sent: Wecm-esaav,"Marcn 11, 2 9 2:21 PM To: ! I SUbject: FW: Thoughts


Hi, Cheryl:

Here is the note I forwarded to Cheryl Mills this m ming after I dropped off the info.

All the best,O

,-~--~....,---------· ········---· ---·

en1or A Liaison Representative, U.S. State Dep ment

1

83 NATL SEC AGENCY 85 87(C)

I

j

83 NATL SEC AGENCY' 87(C)

87(C)




c O 5 8 3 8 7 2 4 :1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838724 Date: 02/05/2016 Obtain d by Judicial Watch , Inc. via FOIA

____ j commercial

From: \ Sent: weci= n=esa= ay.,--, f91artn11~ 9:10 AM To: Mills, Cheryl D Cc: Dinger, John R Subject: Thoughts


Hi, Cheryl:

TE 83 NATL SEC AGENCY


I hope the information In the memo and the sfig Uy expanded background paper help with your decision re: whether to pursue use of BlackBerries in the suite.

Sometimes the distinction between what can be one and what Is, or Is not, recommended to be done differ; this Is one of those instances. OS's response Illustrates thel level of concern based on their extensive professional expertise.

0 tlons as I see them): 85

I hope this additional info Is useful and I apologiz If offering it is presumptuous- please let me know what else NSA can do to help, either in the decision-making process or in the decision-implementation process. I can identify with your statement that we as a community of technical a d security experts should have done a better job of anticipating the need for expanded use of personal electronic de !ces- if that's an area where the Administration and the Secretary need us to focus and drive harder, I'll do my utm st to turn that message into reality.

I

Very respectfully, LJ 83 NATL SEC AGENCY 87(C)

-------·---------------------Senior NSA Liaison Represen~~e De rtment

\ \commercial I \STE

2



CO 5 8 3 8 7 2 4 :1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838724 Date: 02/05/2016 Obtai ed by Judicial Watch, Inc. via FOIA

·----------------

3


c O 5 8 3 8 714 :1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838714 Date: 02/05/2016 Obtained by Judicial Watch , Inc. via FOIA

Reid Donald R

From: Sent: To: Subject:

fUNCi.ASSIFIEDj

DS014

Reid, Donald R ~...eb~5 2 09 5:52 PM

~ T: Meetin with Cheryl Miiis Tuesday

~REI-EASE IN PART 8(7)C, I EJ(3)50 USC 3605, Public Law 86-36, Sec. 6(a) National ' Security Act of 1959

B7(C)

I c=!at Eric's request, we began examining optlons for S with respect to secure "Blackberry-like" communications ... the

current state of the art is not too user friendly, has o infrastructure at State, and is very expensive ... each time we asked B7(C)

the question "What was the solution ft>r POTUS?" were olitel told to shut up and color ... NSA opened the door ft>r us to establish requirements and they would try to hel ... then 1 the NSA customer rep assigned to INR) ,.....R_E_V-IE_W_--r, happened to have a meeting with Cheryl Mills whe S's disp easureWittllfie current "no BB In the SCIF" issue "just cam UTHORITY: up.• Now NSA Is offering a briefing Tues and clea y are ready to make things happen. Barbara

While our noses are out of joint for how this was h died, the issue will be what kind of support will NSA be offering to meet S demands (basically wireless comm in Mah gany Row) ... and whatever solution they provide will have to have a supporting request (or an existing MOA) .. . so that i the only reason I was giving you a heads up ... Don

Nielsen, enior

Reviewer

83 NATL SEC AGENCY

From: 87(C)

~~~-~~~

Sent: Fr ay, Fe rua 13 009 5: M To: Boswell, Ertc J; Reid, Cc: Donovan, Patric·,,,......,_----~

SUbject: RE: URGENT: Meeting with Cheryl Mills

Eric,

The meeting on 17 February at 2 p.m. In the Secre ary's conference room.

Apologies for the typo.

ice anager NCR State ,-=i

From: Boswell, Ertc J Sent: Frida , February 13, 2009 4:45 PM To: eld, Donald R; 1 Cc: Donovan, Patrir:X sub ect: RE: URGENT: Meeting with Cheryl Miiis

I presume this meeting is Tuesday 17 Feb rather t an 27 Feb?

From: · Sent: To: Cc: Subject:

Classification: utBEI

1

83 NATL SEC AGENCY R7tr\ 83 NATL SEC AGENCY 87(C)


87(C)


83 NATL SEC AGENCY 87(C) 83 NATL SEC AGENCY 87(C)


CO 5 8 3 8 714 =1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838714 Date: 02/05/2016 Obtain d by Judicial Watch , Inc. via FOIA

Good afternoon -

BLUF: NSA/IAD seniors will be meeting with Ms. M lls Tuesday on Blackberry vulnerabilities and the range of mitigation options based on a request she made of me this m ming. I want to ensure that you have the opportunity to attend, or to send your experts, to join the discussion and he r firsthand what the options are.


~----'---~

POCs: Lori Mclean (for Chief of Staff); for NCR State/NSA)


Background: I believe IAD was to have coordinate with you, but things have been developing quickly (as they always do on the Friday before a long weekend!) and I did N Twant to assume that you had been Informed of the meeting and that you had been Invited to participate, as is bot desired and appropriate. If this rs first heard for you, please be assured that It was NOT intentional, but more ala g the line of "fog of battle" or "too many cooks .. . n

I apologize up front for inadvertently forcing the i ue. I met with Ms. Mills this morning to Introduce myself and was immediately questioned about the "art of the pos Ible" re: the Blackberries. NSA is fully prepared to brief on the vulnerabllltles; to make sure they understand full the requirement (which was stated to me as needing to use the Blackberries In the Secretary's Suite at the unclass fled level for scheduling/emailing etc. and possibly also for voice); and to discuss/offer mitigations that would enable res lution of the requirement.

a~- _ jh ve been charged by Debbie Plunkett (D/IAD) to lead the briefing team. Please do not hesitate to contact t em or e, to help shape the agenda, ask questions, etc. Their phone numbers are l 83 NATL SEC AGENCY

I would greatly ~ppreciate your lettlng j cc'ed on this note) know who will attend from the CIO and OS offices so that she can advise Lori Mclean prio to the session. 83 NATL SEC AGENCY

Thank you for working with me on this. D

Senior NS L"alson Representative. U.S. S ate Dep rtment commercial

2

87(C)



83 NATL SEC AGENCY


Documents

Obtained by Judicial Watch, Inc. via FQ •t d St a t D es ...€¦ · Obtained by Judicial Watch, Inc. via FQu IA ru •t e d St a t D es epa rt men t o a e f St t Kate Bailey Judicial