jw v state hillary bb nsa iad 00646

8/19/2019 Jw v State Hillary Bb Nsa Iad 00646

1/31

Obtained by Judicial Watch Inc. via F Q IA •t d St t D rt t f St tu ru e a es epa men o a e

Kate BaileyJudicial Watch425 Th ird Stree t SW, Suite 800Washington, DC 20024

Dear Ms. Bailey:

Washington D C 20520

February 5, 2016

Case No. F-2015-05028Segment: DS-0001 Part 5

I refer to our letter dated December 24, 2015 , regarding the release of certainDepartment of State records under the Freedom of Information Act (the FOIA ),5 U.S .C. § 552. As we informed you, the review of the records retrieved from theBureau of Diplomatic Security is ongoing .

For this production, we have identified six additional documents that areresponsive to your request. After reviewing these documents we have determinedal l six may be released in part . All released material is enclosed. An enclosureexplains the FOIA exemptions and other grounds for withholding material.

f you have any questions, your attorney may contact Marsha Edney , TrialAttorney, at (202) 514-4520 or [email protected] . Please refer to the casenumber, F-2015-05028 , and the civil action number, 15 -cv -00646, in allcorrespondence about this case.

Sincerely,

John F. Hackett, DirectorOffice of Information Programs and Services

Enclosu res: As stated


2/31

CO 5 8 3 8 7 l 3:1ED U.S. Department of State Case No. F-2015 -05028 Doc No. C05838713 Date: 02/05/2016Obtained by Judicial Watch. Inc. via FOIA

S013 RELEASE IN PART B(7)C, 8(3)50

Reieii Donald RUSC 3605, Public Law 86-36, Sec.6(a) National Security Act o_f ~

From:Sent:To:Cc:Subject:

Amazing ..

Reid, Donald RFriday, February 13, 2 09 3:56 PMStarr r ~ Donovan atr.ick D~ lFW: URGENT: Meeti with CherylMillsTuesday

8

F r o m ~ ___ _JSent: Friday, February 13, 2009 3:29 PM · _To: Boswe lt..Erl.£.1; Reid, Donald R;

· 83 NATL SEC AGENCY87(C)

ec I___ _J L _SUbject: URGENT: Meeting with Cheryl Miils1' ay

Classification:g g n

Good afternoon -

B7(C)

83 NATL SEC AGENCY87(C)

REVIEW AUTHORITY: Barbara NielSenior Reviewer

-

BLUF:NSA/IADseniors will be meeting with Ms . illsTuesday on Blackberryvulnerabilities and the range of mitigationoptions based on a request she made of me this orning. I want to ensure that you have the opportunity to attend, orto send your experts, to join the discussion and h r firsthand what the options are.

Date: Tuesday, 27 February 2009Time: 1400Place: The Secretary s Conference RoomPOCs: LoriMclean (for Chief of Staff) ; [ · - - - - _ _-. [for NCR State/NSA)

83 NATL SEC AGENCYB7(C)

Background: I believe IADwas to have coordinate with you, but things have been developing quickly (as they always doon the Friday before a long weekend ) and I did N T want to assume that you had been informed of he meeting and

that you had been invited to participate, as is bot desired and appropriate . If his IS first heard for you, please beassured that it was NOTintentional, but more alo g the line of "fog of battle" or "too many cooks . . .

Iapologize up front for inadvertently forcing the i ue. 1met with Ms. Mills this morning to introdu ce myself and wasimmediately questioned about the "art of the pos Ible" re: the Blackberries. NSA is fully prepared to brief on thevulnerabilities; to make sure they understand full the requirement (which was stated to me as needing to use theBlackberries in the Secretary's Suite at the undass fled level for scheduling/emailing etc. and possibly also for voice); andto discuss/offer mitigations that would enable re lut ion of the requirement.

L_ _ __ n dI h v been charged by Debbie Plunkett (D/IAD)to lead the briefingteam. Pfease do not hesitatJ wmntatrtned e, to help shape the agenda, ask questions, etc. Their phone numbersare [_ - _ _ J 83 NATL SEC AGEN

I would greatly appreciate your letting ____ ____ ___ ) cc ed on this note) know who willatte nd from the CIOandOS offices so that she can advise LoriMclean prio to the session.

Thank you for working with me on this. L_J· · · · · · · · · · ~

l _Senior NSALiaison Representative; U.S. State De rtment

83 NATL SEC AGENB7(C)

83 NATL SEC AGEB7(C)

UNCLASSIFIED U.S. Department of State Case No . F-2015-05028 Doc No. C05838713 Date: 02/05/2016


3/31

O 8 3 8 7 l 3:1ED U.S . Department of State Case No . F-2015-05028 Doc No. C05838713 Date : 02/05/2016Obtaine by Judicial Watch Inc. via FOIA

j ommercial j _ _ J sT

2

8 NATL SEC AGE

UNCLASSIFIED U .S . Department of State Case No . F 015-05028 Doc No . C05838713 Date: 02/05/2016


4/31

CO 5 8 3 8 7 4 1ED U.S . Department of State Case No. F-2015-05028 Doc No. C05838 7 14 Date : 02/05/2016

Reid Donald R

From:Sent:To:Subject:

Obtained by Judicial Watch, Inc. via FOIA

UNCLASSIFIED

DS014

Reid, Donald R~ e b r u a r v13] 2 09 5 :52 PM

: URGENT: Meetin With Cheryl Mills Tuesday

RELEASE IN PART B(7)C,8(3)50 USC 3605, Public La86-36, Sec. 6(a) NationalSecurity Act of 9 5 ~

B?

Jat Eric 's request, we began examining options for S with respect to secure Blackberry-like• communications .. hecurrent state of he art is not too user friendly, has o infrastructure at State, and is very expensive . .each time we asked

87

the question What was the solution for POTUS? wererlitely told to shut up and oolor . .NSA opened the door for usto establish requirements and they would try to hel . .. hen . [the NSA customer rep assigned to INR} REVIEWhappened to have a meeting with Cheryl Mills whe S's displeasure with tfle current •no BB In the SCIF issue just a m ~UTHORIup: Now NSA Is offering a briefing Tues and clea are ready to make things happen . Barbara

Whtie our noses are out of oint for how this was hmeet S demands {basically wireless comm in Mahsupporting request (or an existing MOA) .. so that i

From:Sent: Friday, F e b r u a ~2009 5:17 PMTo: Boswell EricJ; r I eidCc: Donovan Patrick DSUbject: RE: URGENT: Meeting with Cheryl Mills

Eric

died, the issue will be what kind of support wilJNSA be offering toany Row) .. and whatever solution they provide will have to have a

the only reason I was giving you a heads up ..Don83 NATL SEC AGENCY

Nielsen,SeniorReviewer

B?(C ) 83 NATL SEC AGENCf r

83 NATL SEC AGENCB?(C)

The meeting on 17 February at 2 p.m . rn the Secre ary's conference room.

Apologies for the typo.

lo m c e~ M ~ a n a g e r _ __NCR State

· ~

From: Boswell Eric JSent: Friday February 13 2009 4:45 PMTo: J ~ I d Donald R; _Cc: Donovan, Patrld Dsubject: RE: URGENT: Meeting with Cheryl Miiis

I presume this meeting is Tuesday 17 Feb rather t an 27 Feb?

Ftom: .Sent

To:C c

Subject:

C l a s s i f i c a t i o n : ~

1


B?


83 NATL SEC AGENCB? (C )63 NATL SEC AGENC87(C )

UNCLASSIFIED U .S . Department of State Case No . F-2015-05028 Doc No . C05838714 Date : 02 /05 /2016


5/31

C0 5 8 3 8 714 =1ED U.S . Department of State Case No . F-2015-05028 Doc No . C05838714 Date : 02/05/2016Obtaine by Judicial Watch, Inc. via FOIA

Good afte rnoon -

BLUF:NSA/IADseniors will be meeting with Ms. lls Tuesday on Blackberryvulnerabilities and the range of mitigationoptions based on a request she made of me this rnlng. I want to ensu re that you have the opportunity to attend, orto send your experts to join the discussion and he r firsthand what the options are.

Date: Tuesday, 7 February 2009nme: 1400Place: The Secretary s Conference RoomPOCs: LoriMclean (for Chief of Staff); I_-- - for NCR State/NSA)


Background: I believe IAO was to have coordinate with you, but things have been developing quickly (as they always doon the Friday before a long weekend ) and I did N Twant to assume that you had been inform ed of the meeting ahdtha t you had been Invited to participate, as is bot desired and appropriate. If this IS first hea rd for you, please beassured th at it was NOT intentional, but more alo g the tine of "fog of battle" or too many cooks .

I apologize up front for inadvertently forcing the i ue. I met with Ms. Mills this morning to Introduce myself and wasimmediately questioned about the "art of th po ible" re: the Blackberries. NSA is fully prepared to brief on thevulnerabllltles; to make sure they understa nd full the requirement (which was stated to me as needing to use theBlackberries In the Secretary's S uite at the undass fied level for scheduling/emailing etc. and possibly also for voice); andto discuss/offer mitigations that would enable re · ution of he requirem en t.

I J h ve been charged by Debbie Plunkett (D/IAD)to lead the briefingteam . P ease do not hesitate to contact them, or e, to help shape the agenda, ask questions, etc. The ir phone numbersare j 63 NATL SEC AGE

_

I would greatly appr eciate you r lettlng l b: ed on this note) know who will attend from the CIO andOS offices so that she can advise Lori Mclean prio to the session. 83 NATL SEC AGENCY

Thank you for working with me on this. I =J

l··- ·Senio r NSA Liaison R e p r e s e n t ~ i v eV ~ eDep rtment

I __ _ t ~ ~ i a ll_ m .

2

87(C)83 NATL SEC AGENCY87(C)

83 NATL SEC AGENCY

87(C)83 NATL SEC AGENCY

UNCLASSIFIED U .S. Department of State Case No . F-2015 -05028 Doc No . C05838714 Date : 02/05/2016


6/31

C058387 l S :IED U.S . Department of State Case No . F-2015-05028 Doc No . C05838715 Date: 02/05/2016Obtained by Judicial Watch, Inc. via FOIA RELEASE IN PART B(7)C,

8(3)50 USC 3605 , Pub licLaw 86-36, Sec. 6(a)National Security Act of1959

_R_e_1d_._o_o_na_1_d_R_______________ -- --------------------------------------REvlEWU N C L A S S I F l ~ Dj

DS015

From: Reid , Donald R AUTHOSent: Tuesday , February 17, 2009 8 :20 AM BarbarTo: Boswell , Eric J; Starr , reg; Donovan , Patrick DCc:Subject

,--,W:ORGENT:Meeti with Cheryl Miils Tuesday

NielsenS e n ~Reviewe

- · · 1...

8 5B?([ -

rom: ISent: Friday, February 13, 2009 6:05 PM_To:I _J___ •Cc: _ . J :ld, DonaldR;[_ JSubject: RE: URGENT: ting wtth Cl1elylMillsJ '

B

83 NATL SEC AGENB?(C)

I think I probably need to attend this meeting n Tuesday. SOIC interests seem clearly to be involved .

From: Refd, Donald RSent: Friday, February 13, 2009 3:58 PMTo: - ]Subject: FW: URGENT: Meeting with Cheryl Mills uesday

This is continu ing to come at us as a surprise . . n't think Erie has seen ye t... I've given it to Greg, Pat D ,inST

landB

FnMml.______ -Sent: Friday, foebruary 13, 2009 3:29 Pt1_ _ _ .____ _ _

83 NATL SEC AGENB7(C)

To: Boswell. Eric J; Reid, Donald R;lec:C _ ._ - - -subject: URGENT: Meeting with Cheryl MillsT ay

Classification:.K'8fI

Good afternoon -

83 NAT L SEC AGEN87(C)

BLUF:NSA/IAOseniors will be meeting with Ms. ills Tuesday on Blackberryvulnerabilities and the range of mitigationoptions based on a request she made of me this rning. I want to ensure that you have the opportunity to attend, orto send your experts, to join the discussion and h ar firsthand what the options are .

Date: Tuesday , 27 February 2009

Time: 1400Place: The Sec retary's Conference RoomPOCs: LoriMclean (for Chief of Staff); [ (for NCR State/NSA) 83 NATL SEC AGEN

B? (C )Background: I believe IADwas to have coordinate with you, but th ings have been developing quickly as they always doon the Friday before a long weekend ) and I did N T want to assume that you had been informed of the meeting andthat you had been invited to participate, as is bot desired and appropriate . If this IS first heard for you, please beassured that it was NOT intentional, but more alo g the line of "fog of bclttle" or too many cooks . . .

1

II UNCLASSIF IED U .S . Depart ment of State Case No . F-2015 -05028 Doc No . C05838715 Date: 02/05/2016


7/31

CO 5 8 3 8 7 1 5 =1ED U.S. Department of State Case No . F-2015-05028 Doc No . C05838715 Date : 02/05/2016b t a i n ~ dby Judicial Watch, Inc. via FOIA

I apologize up front for inadvertently forcing the i ue. I met with Ms. Mills this morning to introduce myself and wasimmeC:iately questioned about the art of the po ibleu re : the Blackberr ies. NSA is fully prepared to brief on thevulnerabilities; to make sure they understand full the requ irement w hich wa s stated to me as needing to use theBlackberries in the Secretary's Suite a t the unclass fled level for scheduling/emailing etc. and possibly also for voice) ; andto discuss/offer mitigat ion s that would enable re lutlon of the requirement.

[_ _= _Jnd, . - h ve been charged by Debbie Plunkett (D/IAO)to lead the briefingteam. P lease do not hes itate to contact them, or e, to help shape the agenda, ask questions, etc. Their phone numbersare

_ _

_ 1 I83 NATL SEC AGEN

Iwould greatly appreciate your letting· Ccc ed on this note) know who willattend tro83 NATL SEC AG EOS offices so that she can advise Lori McLean prlo to the session . 87 (C)

Thank you for work ing with me on this. _= J

-L _ ]I enio .tlllSA uj Ison Representat ive , U.S. Sta te De rtment

commercia l STE

2

83 NATL S EC AGEB?(C)

83 NATL SEC AGEN87(C )83 NATL SEC AGEN

UNCLASSIFIED U.S . Department of State Case No . F-2015 -05028 Doc No . C0583871 5 Date : 02/05/2016


8/31

CO5 8 8 7 l 6 :1ED U.S . Department of State Case No . F-2015-05028 Doc No. C05838 7 16 Date : 02 /05 /2016Obtained by Judicial Watch, Inc. via FOIA

~E L E SE IN PART 85, 8 7)C

8(3)50 USC 3605, Public Law6-36, Sec. 6(a) National Sec

~ c tof 9 ~ 9 _ _

DS016

Ret 1 Donald R

From: 1RELEASE IN PART 8(3)-18-USC -Reid, Donald Rl e d n e s d ~ e ~18.. 2009 l Ment:To:Cc:

[7 9 ~. B(_ l _ _ _ _

Subject FW: Recap - Meeting : Blackberries U N C L A S ~ I F I ElREVIEWAUTHO

Here s the results of our meeting y e s t ~ r d a y... as I been speculating , the issue here Is one of personal comfort . Barbadoes not use a computer so our view of someone ded to their email (why doesn t she use her desktop when in the NielsenSCIF? doesn t fitthis scenario .. during the campa gn she was urged to keep in contact with thousands via a BB...once Seniorshe got the hang of It, she was hooked . .now eve day. she feels hamstrung because she has to lock her BB up ... she Reviewedoes go out several times a day to an office they ve crafted for her outside the SCIF and plays email catch-up ..Chery lMills and others who are dedicated BB addicts are strafed because they too are not near their desktop very oftenduring the workingday .. at this 2PM meeting Che I indicated she last checked her email at 8:30 .. hey are used tohaving the BB on their hip and staying closely in to ch with developments during the day

8B

From :I 83 NATL SEC AGESent: u ~ r u a r y17, 2009 4:01 PMTo: Astlbery, Wayne; Dinger, John R; Boswell, EriDonovan, Patrick O; Wlseearver, Olartes D; Stan

B7(C)

ec:C _:SUbject: Recap - Meeting re: Bladcl:>errles

J; r . ~ l d _ B ·Starr, Greg; L, Gary A

- - - - · j 83 NATL SEC AGEB7(C)

Classification: SECRET

L- -

CTION: - - -

SUMMARY:-Premeeting: at the premeetlng, attendee determined that not enough specifics were known about the

requirement to jump right in with a discussion an that Ms. Mills should be invited to describe the requirement for thegroup at the start of the meeting. In addition, i t w s agreed that this was not a decision meeting; rather, a discussionand information gathering meeting to enable eve one to a better understand the requ irement, b better understandsome of the wlnerabilities, mitigations, costs int rms of unctionality lost, time needed to develop solutions , etc.)associated with the requirement, and c determln how to move forward.

85B7

-Meeting: Ms. Mills described the require ent as chiefly driven by Secretary Clinton, who does not use standardcomputer equipment but relies exclusively on her Blackberry for e-mailing and remain ing In contact on her c ~ e d u l eetc. l d e ~ l yall members of her suite would be alto ed to use Blackberries for communication in the SCIF;r _ ]

I as not the primary driver, but if po sible would be a plus.1

8(1 ), 8)USC 79(8)(3)-P86-36

I UNCLASSIFIED U .S . Department of State Case No. F-2015-05028 Doc No . C05838716 Date : 02105/2016


9/31

CO 5 8 3 8 7 l 6:1ED U.S . Department of State Case No. F -2015-05028 Doc No . C05838716 Date: 02/05/2016Obtained by Judicial Watch, Inc. via FOIA

I~ e nthe vulnerabilities wece..descdbed. Ms.Mills u l c k ~ f o c u s e don the main Ob}tatle _ o_ u ~ i o ~ k b e r r l e ~in~ - J

~_ J u r t h e rdiscussion indicated that somf mitigations; ·- woul f emove the .very functionality desired I _ ___ .. ]while others might take time to develop. Ms. Mills

B(1),(8)(3)USC 7(B)(3)

86 -36- -- - - has witnessed use of Blackberries in other e n s i t ; ~(but perhaps not SCIFed spaces; she asked some excellent questionsabout what might be possible and prudent. She alfasked about precedent; former Secretary Rice had received waiversfor her staff; however, use expanded to an unma geable number of users from a security perspective, so those waiverswere phased out and Blackberryuse was not allo ed in her Suite.

Ms. Mills asked about the President's Bia berry and whether the information about that was compartmt:nted;she u n d e ~ n d sthat she cannot be given .ntorma1 ion b ~ u t~ h especifics.I . J

I left out many details - I invite any of you to sha your perspective, your key takeaways, your different take on themeeting - or to ask any questions- important thl g is that everyone agree that I captured the action and deliverableaccurately, and that everyone now know what th requirement really is - i f have failed in either of hose regards,PLEASE do NOThesitate to correct or question

in what I believe was a very productive and useful meeting of heAllthe best, and thanks again to all who participatminds. ==i 83 NATL SEC AGEN

Attendees: 83 NATL SEC AGENCYSTATE DEPARTMENT: NSA:

Cheryl Mills, Chief of Staff to S [ = = ~ hief, Vulnerability Analysis and OperationsJobnJ Jn.itec. Acting A/S for INR ChiefSystems Engineer, Systems SecurityI ]ch ie f nformation Officer Chief, Systems and Network Analysis CenterCharlie W isecarver, ChiefTechnology Officer [ SNAC/NetworkInfrastructurePat Donovan, OAS for OS/Countermeasures _ Senior NSALiaison Rep to State DeptDon Reid, Assistant Director for OS/Security Infra ructure

8

Wayne ~ b e r yDirector, Office of Security Techn logyJ Director, Office of Information Securi 8

c· --

83 NATL SEC AGEN~ n i ~ r~ Liaison Representative, U.S. State Dep rtment

[ m ~ ~ m e r c i a lI r ~ _ 83 NATL SEC AGEN

2

UNCLASSIFIED U.S. Department of State Case No. F-2015-05028 Doc No. C05838716 Date: 02/05/2016


10/31

CO 5 8 3 8 7 1 7 1ED U.S. Department of State Case No . F-2015-05028 Doc No . C05838717 Date: 02 /05 /2016

Reid, Donald R

From: Reid, Donald R


D S 0 1 7 j R E L E A S E INPART I( _{3)-18-USC 798, 8(1)

Wednesday, February 18, 2009 8:53 AM

RELEASE IN PART BS, B(7)8(3)50 USC 3605, Public La86-36, Sec. 6(a) National

e c u r ~Act o_ _ 959

UNCLASSJFIE

SentTo:Cc: 10onovan. PatnCKO- - BSubject: FW: Recap • Meeting e: Blackberries

REVIEW AUTHORITY: - Barbara Nielsen, SenReviewer

SECRET //NOFORN

I_j . he coordination and planning for yesterday'discussion with Cheryl Mills that was prompted by

j ha t ha§..§ and h.er staff be§.o..bJie.fed on w.ittves

More generally on the issue of Blad(berries in theoptions to mee t S and oth ers requirements .. ther:e

From:[=._ _ _Sent: Tuesday, February 17 , 2009 4 :01 PM

meeting did not anticipate the need for S/EX representation . . h isSA has raised a host of related issues . .mistbtfo thA catet1001 . .nL

.to. ravel r u 1 t e c t m o l o a ~vulnerabilities? ._ IOS intends to fol oW-Up on this paftfcular

ahogany Row, we will be working with NSA on a set of poss iblertalnly will be costs associated with anything that get Implemented ..


B

1= 1R ~ ~.Donald R;_5tarr, Greg; 87(

, Gary A;, - - 03 NATL SEC AGENTo: Ashbety, Wayne; Dinger, John Ri Boswell, E .Donovan, Patrlc:M>:mirver, Olarles D; StaccCSUtijed: Recap • M ng re: Bladcben1es 83 NATL SEC AGENCY

87 (C)C l a s s i f i c a t i o n ~

ACTION:

SUMMARY:-Premeetlng: at the premeeting, attendee determined that not enough specifics were known about the

requirement to ump right in with a discussion an that Ms. Mills should be Invited to describe the requirement for thegroup at the start o f he meeting. In addition, It w s agreed that this was not a decision meeting; rather, a discussion

85B7(C)

and Information gathering meeting to enable eve one to a) better underst and the requi rement , b) better understand B( 1 ),some of the vulnerabilities, miti gations, costs (in t rms of functional ity lost, time needed to develop solutions, etc.) (B )(3 )_1associated with the requirement, and c) determi how to move forward. USC 79 8

-Meeting: Ms. Mills described the require ent as chiefly driven by Secretary Ointon, who does not use standar (B)(3)·Pcomputer equipment but relies exduslvel y on her Blackberry for e-mailing and remaining in contact on her schedule, ]86-36~ c ldeiltv a ll members of her suite would be allo ed to use Blackberries for communication in the SCIF; [=1I was not the primary driver, but i f po sible would be a plus.SCIFsJ

When tbuulnecabilitles were d · Mill s.ouicklv focused an the main obstacle to us rul BlackberriesJ

_ Further discussion ind. _cated that som;mitigations . _ __J would remove thevery u nctlonality desired I jwhile others might take time to develop. Ms. Mills

has ~ n e 5 S e du . of Blackberries In other sensttl(but pe .' p' not SCIFed spans

8(1),(8)(3)

USC(8)(3)86-36

UNCLASSIF IED U .S . Department of State Case No . F-2015-05028 Doc No . C05838717 Date : 02/05 /2016


11/31

CO 5 8 3 8 7 1 7: 1ED U .S . Department of State Case No. F-2015 -05028 Doc No. C05838717 Date : 02/05/2016Obtain by Judicial Watch, Inc. via FOIA

about what might e possible and prudent. She al asked about precedent; former Secretary Rice had received waiversfor her staff; however, use expanded to an unma geable number of users from a security perspective, so those waiverswere phased out and Blackberryuse was not alto ed in her Suite.

Ms. Mills asked about the President's Bia berry and whether the n ~ f l l a t l o nabout that was compartmented;she understands that she cannot be given inform ion about the speclficsr - - ·

I left out many details - I invite any of you to shar your perspective, your key takeaways, your different take on themeeting-or to ask any questions - important thi g is that everyone agree that I captured the action and deliverableaccurately, and that everyone now know what th requirement really is - if have failed In either of hose regards,PLE SE do NOThesitate to correct or question I ·

Allthe best and thanks again to all who partlclpaminds. I I

d In what I believe was a very productive and useful meeting of the

Attendees:

STATE DEPARTMENT: N .Cheryl Mills, Chief of Staff to SJohn DingerJcting A/S for INRC hlef Information OfficerCharlie Wisecarver, ChiefTechnology OfficerPat Donovan, DASfor OS/Countermeasures

83 NATL SEC AGEB7(C)

hief, Vulnerability Analysis and Op83 NATL SEC AGENr - - - - - Chief Systems Engineer, Systems Security

Chief, Systems and Network AnalysisCenter 8sNAC/Network Infrastructure

Don Reid, Assistant Director for OS/Security lnfras ruWayne Ashbery, Director, Office of Security Tech logy

I l Director, Office of Information Securre

~

,-Senior NS.I\Liaison Representative, U.S. State Oep rtmentI l commercial 1 · IT .--------------------------------

Senior NSALiaison Rep to State Dept

8

83 NATL SEC AGENB7(C)83 NATL SEC AGEN

UNCLASSIFIED U.S . Department of State Case No . F-2015-05028 Doc No . C05838717 Date: 02/05/2016


12/31

CO 5 8 3 8 7 2 4 ED U.S. Department of State Case No . F-2015-05028 Doc No . C05838724 Date : 02/05/2016Obt'; 'I by J o d~ i ' ' ; FOL \

REVIEW AUTHORITY: Barbara Nielsen, SeniorReviewerJOnald R

Frorn: Reid, Donald RSent:

1

..we_ctnesdaLMarch t1. 200.9 4 : 4 MTo:Cc:subject : R t : ~•ltOUQnts _ _

r __Scheduling a meeting is fine, I guess .L ___FrOm: ISent: Wednesday, March 11, 2009 3:22 PMTo: e i d ~Donald_B__ec: I - ]s u ~ e aFW: nougnts - Importance: High

IRELEASE IN PART 85, B(7)C8 3)50 USC 3605, Pu b lic l a w

1

86-36, Sec . 6(a) National SecAct of 1959

[UNCLASSIFIED I-

B?(C)

83 NATL SEC AGENCYB?(C)

B

[ - Fontacted me to say that she had call from CherylMills after receiving the BB memo yesterday and thatshe liad a telecon with her this morning. She said : .

I shared with her the Secretary s comment after re ing the memo that she gets ir.

From:Sent: Wednesday, aTo: _ _ 1

9 2:21 PM

Subject: FW: Thoughts

Oassiflcation: SECRET NOFORN

Hi Cheryl:

Here is the note I forwarded to Cheryl Mills this m ming after I dropped off the info.

All the best, [ ]

r -----senior NSA Liaison Representative, U.S. State Dep ment

l

83 NATL SEC AGENBSB?(C)

83 NATL SEC AGE87(C)

83 NATL SEC AGEN87(C)

83 NATL SEC AGEB?(C)

UNCLASSIFIED U.S. Department of State Case No . F-2015-05028 Doc No. C05838724 Date : 02/05/2016


13/31

CO 5 8 3 8 7 2 4 1EO U.S . Department of State Case No. F-2015-05028 Doc No. C05838724 Date: 02/05/2016I

I

commercial L _ J by Judicial Watch, Inc. via FOIA83 NATL SEC AGEN

· · ....... _____ . _____ - -

S : n e s a a y a r c n~ i 9:10 M83 NATL SEC AGEN87(C)

To Mills,Cheryl DCc: Dinger, John R

Subject Thoughts

Classification: SECRET NOFORN

Hi,Cheryl :

I hope the information in the memo and the slig tly expanded background paper help with your decision re: whether topursue us e of BlackBerries in the suite.

Sometimes the distinction between what can be one and what is, or s not, recommended to be done differ; this is oneof hose instances . OS s re sponse illustrates thei level of concern based on the ir extensive professional expertise.

Options (as I see the _m _:_ _ _ _ __

I hope this additional info is useful and I apologiz i f offering it s presumptuous - please let me know what else NSA cando to help, either in the decision-making process or in the decision-implementation process. I can identify with yourstatement that we as a community of technical a d security experts should have done a better job of anticipating theneed for expanded use of personal electronic d tees- if hat s an area where the Administration and the Sec retaryneed us t focus and drive harder, I ll do my utm st to turn that message into reality.

Very respectfully, L I 83 NATL SEC AGEN87(C)c _J ___ _ _Senior NSA. liaison R e p r e s e n t r u s _ _ s ~ eDe

[ _ I ommercial ISTErtment

2

83 NATL SEC AGEN87(C)83 NATL SEC AGEN

UNCLASSIFIED U.S. Departmen t of State Case No. F-2015-05028 Doc No. C05838724 Date: 02/05/2016


14/31

CO 5 8 3 8 7 2 4 1ED U.S . Department o Sta te Case No F-2015-05028 Doc No . C05838724 Date: 02/05/2016I Obtain by Judicial Watch Inc via FOIAI

UNCLASSIFIED U.S . Department o Sta te Case No . F-2015-05028 Doc No . C05838724 Date : 02/05/2016


15/31

Obtained by Judicial Watch Inc . via FOIA

Kate BaileyJudicial Watch425 Third Street, SW, Suite 800Washington, DC 20024

Dear Ms. Bailey:

United States Department of State

Washington D C 20520

February 5, 2016

Case No. F-2015-05028Segment: DS-0001 Part 5

I refer to our letter dated December 24, 2015, regarding the release o certainDepartment o State records under the Freedom o Information Act (the FOIA ),5 U.S.C. § 552. As we informed you, the review o the records retrieved from theBureau o Diplomatic Security had is ongoing.

For this production, we have identified six additional documents that areresponsive to your request. After reviewing these documents we have determinedall six may be released in part. All released material is enclosed. An enclosure

explains the FOIA exemptions and other grounds for withholding material.

f you have any questions, your attorney may contact Marsha Edney, TrialAttorney, at (202) 514-4520 or [email protected]. Please refer to the casenumber, F-2015-05028, and the civil action number, 15-cv-00646, in allcorrespondence about this case.

Sincerely,

JlLJG {_ O PorJohn F. Hackett, DirectorOffice o Information Programs and Services

Enclosures: As stated


16/31

Obtained by Judicial Watch , Inc . v i FOIA

T h F r cC dom ofln fo r m ntio n A ·l (5 U SC 552)

FOI F,xcmptions

(b)( I) Information specifically authorized by an executive order to be kept secret in the interest ofnational defense or foreign policy. Executive Order 13526 includes the followingclassification categories

I .4(a) Military plans. systems, or op¢rations1.4(b) Foreign government information1.4(c) lntelli g cn cc activities , sou rces or methods, or crypto logyI 4(d) Foreign r e la tions or fore ign activities of the VS, including confid n ia l sourcesl .4(e) S ciemifi c, rcchnolo gical , or economic matters re atin • o national sec urity,

inclu di11g ucfo ns e against transnationa l tt rrori sml .4(f) U . Gov er u n nt pr gram s for safeguardi ng nuc lear mate r ials or faciliti ·sl .4(g) Vulncm ilirics or cupa h lit ies of syst ms in. tallations , infr nstructures, projects,

plans, or p ro tec t nn serv ices rcluting to US nation a l securit y, includin g defen seaga inst tr ans1 a t' < l rn rism

l .4(h) W1::apons of mass destruction

(b)(2) Related solely to the internal personnel rules and practices of an agency

(b)(3) Specifically exempted from disclosure by statute (other than 5 USC 552), for example:

ARMS EXPCIA PERS/OROEXPORT CONTROLFS CTJNARAN

Arms Export Control Act, SOa USC 241 l(c)Central Intelligence Agency Act of 1949, 50 USC 403(g)Export Administration Act of 1979, 50 lJSC App. Sec . 241 l(c)Foreign Service Act of 1980, 22 USC 4004Immigration and Natfonality Act, 8 USC 1202{1), Sec. 222(t)Iran Claims Settlement Act, Public Law 99-99, Sec . 505

(b)(4) Trade secrets and confidential commercial or financial information

(b)(5) lnteragcncy or intra-agency communications forming part of the deliberative process,

attorney-client privilege, or attorney work product

(b)(6) Personul privacy information

(b)(7) Law enforcement information whose disclosure would:(A) interfere \Vith enforcement proceedings(B) deprive a person of a fair trial(C) constitute an unwarranted invasion ofpeminal privacyD) disclose confidential sourcesE) disclose investigation techniques

(F) endanger life or physical safety of an individual

(b)(8) Prepared by or for a govermnent agency regulating or supervising financial institutions

(b)(9) Geological and geophysical information and data, including maps, conccming wells

Other Grnunds for Withholding

NR Material not responsive t a FOJA request excised with the agreement of the requester


17/31


UNCLASSIFIED U .S . Department of State Case No . F-2015-05069 Doc No . C05833787 Date: 11/13/2015

RELEASE IIN PART

u 87 C ,BSiotSllluSEP R TION ST TEMENT

Title 40, U.S. Code

Section 783 b) • Commllllladlon of Clla.it at lnfcnnlrllonGo\iarni• 8 Officerar EmplQJlle~ d • f 9nallllfll fol VIDldon

Tltla 42, U.S. Code

REVIEW AUTHORITY: Sharon Ahmad, Senior )Reviewer

Datl Slsmd mm dd nw

MILLS, Cheryl D.

8

87 C)

UNCLASSIFIED U .S. Department of State Case No . F-2015-05069 Doc No . C05833787 Date : 11/13/2015

8


18/31

b t a i ~ dby Judicial Watch , Inc . via FOIAUNCLASSIFIED U.S . Department of State Gase No . F-2015-05069 Doc No . C05833787 Date : 11/13/2015

• 11 . 'These l1lllric lansant oonalsl8nt with and do llClt1111peised8. ocm1llctwllh, or olhBIWllellllel' the employee ob lgsllons, rlgrds. orllablllllesc:r9llltad by ElC8Q.llfye onserNo. t3528 (75 Fad. Reg. 701), or enyeoa:iesaor ttl8letD aactlon 1211 of title S. United S1a lllGCede (gowmlng dlllclolures to ~ ; Mdlon 1034 ot lltla 10, Unltscl Stlltal Coda, • amended by tha MllltBly Whl8lleblcMerProl8c:tioflNA. (9CMln llnodladolL.118 ID Ccr1gl'U8 by mam :1er1 of lhe mllltlry): aedlon 2302(b) (8) of lille IS, Unltad S1alBe Code, Bii1111endsd by the Wtls:lfeblowerProtadlun Ad or 11189 (gOY9ITl ng dlsdD8UTBIaf lllega ll)r, wat8, fraud , abuse or publtc he8ltn oraafety tru'Gll i)ith& lntelllgence lclantillol Ptol8ClfonAd ol 1982 {SOu.s.c. 421 et aeq.) (gowmlng dladC6ln8 tnat oould exposec:ionftd8nlfalGcMlmmetltagents); aec:tiuJll 7(c) and 8H Of the lnlpec:tor Gell8t8lAd of 1978 (5 U.S.C. App.) (miming to dllclolurea to811 lntpedDI genera , t h e ~genaral of he lntal lgenc:e Community. and Congraaa); &eetion 103H(g)(3) of the Nll lonal Seculfty/Ad of 1847' (50 U.S.C. ~ 9 ) 3 )(n1lallng ID dllc:blwaa ID thll lnspadl:r geninl rl ttw lnmlD;ance Community); ll8Cllona17(d)(S)n 17(e)(3) al the central nlBlllQence/lol1t¢ I At:I. of 1949,(50 U.S.C. o403g(d)(5) and 403q(eX3)) (rolal ng to dladceurea ID thelnapectzr Genar111of the cartral ~ Aflrn:t and Co.veu); and the 8latuml whld protact egalnat d19c:kllure 1hat maycampranlsj, the l'\donal aecurlty, lndudlng aectiol'l8841, 793, 71M,798, "952 and 1924 oftllle 18, Unlllld S'8tel Code, a n d ~4(b) Ol lhe SutM.\nW&Ac:tMtlas corrtrol /lid. of 1950 (50 U.S.C. IOCtlon 783(1>)). Tho detlnltlona. 111qUlremen1I, obllgllllon1, rlghm,ll8nl'JliDnl,and labll lfala:aated by eald exaartNe on:er and llllad ltllulBll &18 lnOOIJ)Ol1ltsdInto tl ll a;reementand are c::crrtrolllng..

12. I h read IHI AQreement carefUlly Ind my qulltlana, f any, haw b8en answcnd. I eda\owladgo that the briefing ofllcer h alllldt aYalloble tD me 119 Ell8CuliYeOrder and ltlltl.rlas i'8tllrunc:8d bl tllllagr&IWn8ntnd Its lmplementttlg regUlaticn (32 C7R Part2001 , l8Cllall 2001 .8Dfd)(2)> o t11a11marnm 11amat thll 11m8.If' '°c11oa1e.

• NOT APPUCA8LE TONOf+.GCMRHMENTPEIUlONHE1..8IQNING lHl8 AGiRe:Mal'r.

ii'OAAME IATE 11 ECURITYN\AIBElt(Sl91itda9,....,OflCWtlZAil& (F comtACTOll. UCEHSEE.GIWIT'lll OR NJEKT, PAOllUlE: MAME ADDAUS,AHi), IF APPUCAA.&.F DEAAL l\.f'll.Y eooeNUldEIQ - ~

WITNESS ACCEPTANCE

THE l XECUt10NOf THIS AGIU EllENTWAS WITNES8£D TH&UNDERSIGNEDACCEPTEDTHll AGREEMENTBYTHI UNDERSIONSD. ON 8EHALPOP ntE UNITED&TATEi 00\IERNMENT.

lil


19/31

C 0 5 8 3 8 71 TIED U.S. Department of St;:ite1 Caase JNo .F-?015-05028 Doc No . C05838713 Date: 02/05/20165 a1 ne I-by ud1c1al Watch , Inc . v ia FOIA

R e l ~Donald R

From:Sent:

DS013

Reid, Donald R I

RELEASE IN PART B(7)C, 8(3)50USC 3605, Public Law 86-36, Sec.6(a) National Security Act of 1959

To:Cc:

Subject:

Friday, February 13, qo93:56 PMtarr Gr D ~ _ a t r i~ ~

FW: URGENT: Meetln with Cheryl Mills Tuesday

8

l

Amazing...

From. . . . . . . .~ ~ - - - -~ ~ = =

Sent: Friday February 13 2009 3 : ~ P ~ ~ .To: Boswell EricJ· Re id, Donald R ·[C c [ ~ 1 . ~subject: URGENT: Meeting with Cheryl Miiis Tu ay

Classification:JUNCLASSIFIED j

Good afternoon -

87(C)

· 8 NATL SEC AGENCY87(C)


[REVIEW AUTHORITY: Barbara Nielsen,~ e n i o rReviewer

BLUF: NSA/IADseniors will be meeting with Ms. ills Tuesday on Blackberryvulnerabilities and the range of mitigationoptions based on a request she made of me this orn ing. I want to ensure that you have the opportunity to attend, orto send your experts, to join the discussion and he r firsthand what the options are.

Date: Tuesday, 27 February 2009Time: 1400Place: The Secretary s Conference Room

. - - - - - - -~ - - - - - .

POCs: Lori Mclean (for Chiefof Staff); for NCR State/NSA)8 NATL SEC AGENCY87(C)

Background: I believe IADwas to have coordinate with you, but things have been developing quickly (as they always do

on the Friday before a long weekend ) and I did N Twant to assume that you had been informed of the meeting andthat y u had been invited to participate, as is bot desired and appropriate. If this IS first heard for you, please beassured that It was NOT Intentional, but more alo g the line of "fog of battle" or ,.too many cooks . . .''

I apologize up front for inadvertently forcing the i ue. I met with Ms. Mills this morning to introduce myself and wasimmediately questioned about the "art of the pos Ible" re: the Blackberries. NSA Is fully prepared to brief on thevulnerabilities; to make sure they understand full the requirement (which was stated to me as needing to use theBlackberries In the Secretary s Suite at the unclass fled level for scheduling/emailing etc. and possibly also for voice); andto discuss/offer mitigations that would enable re lution of the requirement.

h ve been charged by Debbie Plunkett (D/IAD)to lead the briefingteam.Pease e, to help shape the agenda, ask questions, etc. Their phone numbersare 8 NATL SEC AGEN

I would greatly appreciate your letting c c'ed on this note) know who will attend from the CIO andOS offices so that she can advise Lori Mclean prio to the session .

Thank you for working with me on this. I I----- ---·-·-·-··--·····


~ · _J 8 NATL SEC AGENCB?(C)enior NSA Liaison Representative, U.S. State Dep rtment

1

UNCLASSIFIED U .S. Department of State Case No. F-2015-05028 Doc No. C05838713 Date : 02/05/2016


20/31

0 5 8 3 8 7 l 3;1ED U.S. Department of State1

Case No ..F-2015-050 .28 Doc No C05838713 Date: 02/05/2016-013 a ea y Judicia l Watch Inc. via FOIA

_ commerci l [ S T E8 NATL SEC AGENC

2

UNCLASSIFIED U S Department of State Case No F-2015-05028 Doc No C05838713 Date: 02/05/2016


21/31

CO 5 8 3 8 71 S:IED U.S. Department of State Case No. F-2015-05028 Doc No. C05838715 Date: 02/05/2016Obtain e d by Judic ial Watch , Inc . v ia FOIA RELEASE IN PART B(7)C,

DS 15[UNCLASSIFIED

8(3)50 USC 3605, PublicLaw 86-36, Sec. 6(a)National Security Act of1959Reid, Donald R

. . . - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - . . . . . . R E V I E WFrom:Sent:To:Cc:Subject:

Reid, Donald RTuesday, February 17, 2009 8:20 AMBoswell, Eric J ; Starr, reg ; Donovan, Patrick D

GENT: Meetln with Cheryl MiiisTuesday

AUTHOBarbar

NielsenSen or

Rev iew

8587(

From:sent: F r i d a ~Februa 13 2009 6:05 PMTo: _Cc: Reid, Donald R ~

• RE:OR GE : eetlng with Cheryl Miiis

83 NATL SEC AG E87(C)

I think I probably need to attend this meeting n Tuesday. SOIC interests seem clearly to be Involved.

From: Reid, Donald RSent: Frida Februa 13, 2 9 3:58 PMTo:Sulj : FW: URGENT: Meeting with Cheryl Miiis uesday

This is continuing to come at us as a surprise ... I d n't think Eric has seen yet... I've given it to Greg, Pat D, - - ,and~ n S T 8

frvm: ____ _ _ _ _ _

Sent:Friday, February 13, 2009 3 : 2r 9~P - .

To: Boswell, EricJ; Reid, Donald R;

83 NATL SEC AGEN

87(C)ec:C I ~ - _ _ _ _ ,Subject: URGENT: Meeting with Cheryl Mills Tu ay

Classification:K Q [ I

Good afternoon -


8LUF: NSA/IADseniors will be meeting with Ms. illsTuesday on Blackberry vulnerabilities and the range of mitigationoptions based on a request she made of me this orning . I want to ensure that you have the opportunity to attend, orto send your experts, to join the discussion and h ar firsthand what the options are.

Date: Tuesday, 27 February 2 9Time: 1400Place: The Secretary's Conference Room

- - - - - - ~POCs: LoriMclean (for Chief of Staff); (for NCR State/NSA) 83 NATL SEC AGEN

87(C)Background: I belleve IAD was to have coordinate with you, but things have been developing quickly {as they always doon the Friday before a long weekend I) and I did N T want to assume that you had been informed of the meeting andthat you had been Invited to participate, as Is ot desired and appropriate. If this S first heard for you, please beassured that it was NOT intentional, but more a lo g the line of "fog of battle" or "too many cooks. . .

1

lUNCLASSIFIED U .S. Department of State Case No. F-2015-05028 Doc No. C05838715 Date : 02/05/2016


22/31

CO 5 8 3 8 71 S :IED U .S Department of State Case No . F-2015-05028 Doc No. C05838715 Date: 02/05/2016Obtai ed by Judicial Watch , Inc . v ia FOIA

I apologize up front for inadvertently forcing the i ue . I met with Ms. Mills this morning to introduce myself and wasimmetliately questioned about the art of the pos Ible" re: the Blackberries. NSA is fully prepared to brief on thevulnerabilities; to make sure they understand full the requirement (which was stated to me as needing to use theBlackberries In the Secretary's Suite at the unclass fled level for schedulins/emailing etc. and possibly also for voice); andto discuss/offer mitigations that would enable re lu t lon of the requirement.

nd h ve been charged by Debbie Plunkett (D/IAD) to lead the briefingteam. Please do not ~ s t ~ tto contact em or e to help shape the agenda, ask questions, etc . Their phone numbers

are I 8 3 NATL SEC AGENI would greatly appreciate your letting i cc'ed on this note) know who willattend fro83 NATL SEC AG ENOS offices so that she can advise Lori Mclean pr o to t e session. 8 7 ( C)

Thank you for working with me on this. J

-· ---Sen ior NS A U Ison Representative , U.S. State D ep rtment

commercial STE

2

83 NATL SEC AGENC87(C)

8 3 NATL SEC AGENC87(C)8 3 NATL SEC AGEN

UNCLASSIFIED U.S. Department of State Case No . F-2015-05028 Doc No C05838715 Date: 02/05/2016


23/31

c O5 8 3 8 71 TIED U.S. Department of State Case No. F-2015-05028 Doc No . C05838717 Date: 02/05/2016Obtained by Judicia l Watch , Inc . v ia FOIA

I

Reid, Donald R

From:

Sent:

DSO17 RELEASE IN PART l8(3)-18-USC 798, 8(1)

18 2009 8:53 AM

RELEASE IN PART BS, B(7)C8(3)50 USC 3605, Public Law86-36, Sec. 6(a) NationalSecurity Act of 1959

UNCLASSIFIED ]

To:Cc:

. ~ i

cronovan, PatricKD8

Subject: FW: Recap - Meeting e: BlackberriesREVIEW AUTHORITY: Barbara Nielsen, SeniorReviewer

SECRETl/NOFORN

D the coordination and planning for yesterday'discussion with CherylMillsthat was prompted bywhat has S and her staff been briete.c:lon..wltb.J:es

More generally on the issue of Blackberries In theoptions to meet S and others requirements ... there

From:= o ~ = c ~ : =- - : : - :

meeting did not anticipate the need for S/EX representation ... thisSA has raised a host of related issues ... I ~ I L i ~J n o 1 l f.o

J o J r . a v . e l a n d . l e c h n o l ~vulnerabilities? . ._ tOS intends to fol o w u p_ o_n~ ~ s p ~ c u~ a r ~

ahogany Row, we willbe working with NSAon a set of possiblertalnly will be costs associated with anything that get implemented . .


8

Sent: Tuesday, February 17, 2009 4:01 PMTo: Ashbery, Wayne; Dinger, John R; Boswell, EDonovan, Patrick D: ..w SJ (.arver, Olarles D; StantCc:[

. . . _ _ - . . - - - · - ~e=l d~ =D o=n=a l dR ; ;itarr, Greg; ~ 87(I 83 NATL SEC AGENC

S u b : : :c t= : 'R=e c ap, - - M= c r :n= - =~r e :Blackberries 83 NATL SEC AGENCY87(C)

8C l a s s i f i c a~t _o n_:_s _E c_R_E_r 87 (C)

ACTION:

SUMMARY:-Premeeting: at the premeeting, attendee determined that not enough specifics were known about the

requirement to jump right In with a discussion an that Ms. Miiis should be Invited to describe the requirement for thegroup at the start of the meeting. In addition, It w s agreed that this was not a decision meeting; rather, a discussionand Information gathering meeting to enable eve one to a) better understand the requirement, b) better understand ~ B 1 )some of the vulnerablllties, mitigations, costs int rms of functionality lost, time needed to develop solutions, etc.) (B)(:i) -18associated with the requirement, and c) determin how to move forward. usc 798

-Meeting: Ms. Mills described the require ent as chiefly driven by Secretary Clinton, who does not use standar (a)(3)-P.L.computer equipment but relies exclusively on her Blackberry for e-mailing and remaining In contact on her schedule, 86 -36etc. ldeall all members of her suite would be allo ed to use Blackberries for communication in the SCIF;C J[ was not the primary driver, but if po sib le would be a plus.SCIFsj When the vulnera .bllitles were describe s . .Mills_auicklv focused.on the.mai.n...o.bstacle to s in e._Blac:kbe. r rl e.s.Jn j

I Further discussion indicated that som mltl ations would remove the8(1),(8)(3)-USC(8)(3)86 -36

very unctionality desired while others might take time to develop. Ms. Millshas witnessed use of Blackberries in other sensit' (but perhaps not SCIFed) spaces; she asked some excellent questions

1

UNCLASSIFIED U .S. Department of State Case No . F-2015-05028 Doc No . C05838717 Date: 02/05/2016


24/31

CO 5 8 3 8 71 TIED U.S. Department of State Case No . F-2015-05028 Doc No. C05838717 Date: 02/05/2016Obta · d by Judicial Wat c h, Inc . via FOIA

about what might be possible and prudent. She al o asked about precedent; former Secretary Rice had received waiversfor her staff; however, use expanded to an unma geable number of users from a security perspective, so those waiverswere phased out and Blackberry use was not allo ed in her Suite.

Ms. Mills asked about the President s Bia berry and whether the information about that was compartmented;she understands that she cannot be lven inform Ion about the s ecifics.

I left out many details - I Invite any of you to shar your perspective, your key takeaways, your different take on themeeting - or to ask any questions - Important thi g is that everyone agree that I captured the action and deliverableaccurately, and that everyone now know what th requirement really I s if I have failed In either of those regards,PLEASE do NOThesitate to c;orrect or question I ·

Allthe best, and thanks again to all who partlclpat d In what I believe was a very productive and useful meeting of thei n d s [ ~ · 83 NATL SEC AGENC

B?(C)Attendees:STATE DEPARTMENT: SA:Cheryl Miiis, Chief ofStafftoS ~ Fh l e fVulnerabllltyAnalyslsand Op83 NATL SEC AGENCJohn Dinger ActingA/S for INR ]chief Systems Engineer, Systems SecurityC hlef Information Officer Chief, Systems and Network Analysis Center 8 C ar le Wisecarver, Chief Technology Officer NAC/Network InfrastructurePat Donovan, DAS for OS/Countermeasures Senior NSA Liaison Rep to State DeptDon Reid, Assistant Director for OS/Security lnfras M r T . . . - - ~Wayne Ashbery, Director, Office of Security Techh logy

I Director, Office of Information Securi 87

-Se: lor NSA-Llal n Representative, ~ = ~ ~ ~ ~ ~Prtmentj J commercial n :---------- ----------------- -----

2

83NATL SEC

AGENCY

87(C)83 NATL SEC AGENC

UNCLASSIFIED U.S. Department of State Case No . F-2015-05028 Doc No . C05838717 Date: 02/05/2016


25/31

CO 5 8 3 8 7 l 6:1ED U.S. Department of State Case No . F-2015-05028 Doc No. C05838716 Date: 02/05/2016Obtained by Judicial Watch , Inc. via FOIA

DS016

RetC Donald R

RE L EASE IN PART 85, B(7)C,8(3)50 USC 3605, Public Law86-36 , Sec. 6(a) National SecuriAct of 1959

From:Sent:

Reid, Donald Re J t n e s d a v .~ E e b n J~ ~ ~0 0 9 . . Z : O OAM

RELEASE IN PART 8(3)-18-USC798, 8(1)

Bo:Cc:Subject: FW: Recap - Meeting e: Blackberries [UNCLASSIFIED j R V

AUTHOHere s the results of our meeting y e s t ~ r d a y... as I been speculating, the issue here is one of personal comfort .. S Barbardoes not use a computer so our view of someone ded to their email (why doesn t she use her desktop when in the Nielsen,SCIF?) doesn t fit this scenario .. during the campa gn she was urged to keep in contact with thousands via a 88 . once Seniorshe got the hang of it, she was hooked... now eve day, she feels hamstrung because she has to lock her BB up ... she Reviewedoes go out several times a day to an office they h ve crafted for her outside the SCIF and plays email catch-up. ..CherylMills and others who are dedicated BB addicts are strated because they too are not near their desktop very oftenduring the working day . .at this 2PM meeting Che I indicated she last checked her email at 8:30 ... they are used tohaving the BB on their hip and staying closely in to ch with developments during the day

8

B?

~ f ? 20094:01 PM 83 NATL SEC AGENTo: Ashbery, Wayne; Dinger, John R; Boswell, Erl J; - ~ _ _ ~ e _ Don I R· Starr, Greg;

- - -

87(C)B

Donovan, Patrick D; Wisecarver, Orarfes o; Stant I Gary A;Cc: _ _ ~ ~ ~ ~~ -S U b j ~Recap • Meeting re: Blackben1es


Classification: SECRET

ACTION:

SUMMARY:·Premeeting: at the premeetlng, attendee determined that not enough specifics were known about the

requirement to jump right in with a discussion an that Ms. Mills should be invited to describe the requirement for thegroup .at the start of the meeting. In addition, it w s agreed that this was not a decision meeting; rather, a discussionand information gathering meeting to enable eve one to a) better understand the requirement, b better understandsome of the vulnerabilities, mitigations, costs int nns of functionality lost, time needed to develop solutions, etc.)associated with the requirement, and c) determln how to move forward.

BSB7(

-Meeting: Ms. Miiis described the require ent as chiefly driven by Secretary Clinton, who does not use standardcomputer equipment but relies exclusively on her Blackberryfor e-mailing and remaining In contact on her schedule,etc. Ideally all members of her suite would be allo ed to use Blackberries for communication In the SCIF;L

was not the primary driver, but if po sible would be a plus.1

8(1 ), (8)USC 798(8)(3)-P.L86-36

UNCLASSIFIED U.S . Department of State Case No . F-2015-05028 Doc No . C05838716 Date: 02/05/2016


26/31

C 058 3871 6 : 1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838716 Date: 02/05/2016Obtained by Judicial Watch , Inc . v ia FOIA

~l f s~ h_nt h _v_u l_n_ r_a_ _ t_ s_wer_e_d_e_c_i_b_ s. MJllsaulcklv focused on the main obs .ta.tie to using Blackberries la [_ urther discussion Indicated that som • miti ations, woul d remove thev e r y_ u n c tl on a l i t ydesired C . wnile others might take time to develop. Ms. Miiishas witnessed use of Blackberries in other sensitiv (but perhaps not SCIFed) spaces; she asked some excellent questionsabout what misht be possible and prudent. She al asked about precedent; former Secretary Rice had received waiversfor her staff; however, use expanded to an unma geable number of users from a security perspective, so those waiverswere phased out and Blackberry use was not a llo ed in her Suite.

Ms. Miiis asked about the President s Blac berry and whether the information about that was compartmented;she understands that she cannot e given lnforma ion about the specifics.

I left out many details- I invite any of you to shar your perspective, your key takeaways, your different take on themeeting - or to ask any questions - Important thl g Is that everyone agree that I captured the action and deliverableaccurately, and that everyone now know what th requirement really is - If I have failed In either of those regards,PLEASE do NOT hesitate to correct or question

Allthe best, and thanks again to all who participat d in what I believe was a very productive and useful meeting of the

8 1),(8)(3) -use 7(8)(3)-P86 -36

minds. == 83 NATL SEC AGENC

Attendees:STATE DEPARTMENT: NSA:

83 NATL SEC AGENCY

Cheryl Mills, Chiefof Staff to S hief, Vulnerability Analysis and Operations

IJoh o.D.lnu . ActingA/S for INR Chief Systems Engineer, Systems Security

. ]ch ief Information Officer Chief, Systems and Network Analysis Centerh a r l l e l s e c a r v e rChief Technology Officer [_ _ J SN iAC/Network InfrastructurePat Donovan, OAS for OS/Countermeasures I ,Senior NSA Liaison Rep to State DeptDon Reid, Assistant Director for OS/Security lnfras ructure

87

Wa_ ne Ashbery, Director, Office of Security Techn logyDirector, Officeof Information Securl 87

- - - - · · ·83 NATL SEC AGENC

Senior NSA Liaison Representative, U.S. Sta t e Dep rtment

[ ~ m ~ · · ~ ~~ i l I = t ~ . . 83 NATL SEC AGENC

2

UNCLASSIFIED U.S . Department of State Case No . F-2015-05028 Doc No. C05838716 Date: 02/05/2016


27/31

CO 5 8 3 8 7 2 4 1ED U.S. Department of St::ite. Case No. F-2015-05028 Doc No. C05838724 Date : 02/05/2016Ul'ita1necfby Judi c ial \/\latch , Inc . v ia FOIA

DS022REVIEW AUTHORITY: Barbara Nielsen, SeniorReviewer>onald R

From:Sent:To:Cc::

Subject:

I

Reid, Donald RWednesdav March

~ r rr r o u g n . . . ~

RELEASE IN PART 85 B(7)C8 3)50 USC 3605, Public Law86-36, Sec. 6(a) National Securi

Ct Of 1959

[UNCLASSIFIED

Scheduling a meeting is fine, I u e s s . - - -

From:JSent: Wednesday, Marth 11, 2009 3:22 PMTo: Reld Donald R 87(C)


/ ontacted me to say that she had call from Cheryl Millsafter receiving the BB memo yesterday and that

s had a te lecon with her this morning. She said :

I shared with her the Secretary's comment after rea ing the memo that she gets ir.

From: ISent: Wecm-esaav, Marcn 11, 2 9 2:21 PMTo: ISUbject: FW: Thoughts

Classification: SECRET NOFORN

Hi, Cheryl:

Here is the note I forwarded to Cheryl Mills this m ming after I dropped off the info .

All the best, O

~ ~ . . . . · · · · · ·· · ---·

en1or A Liaison Representative, U S State Dep ment

1





UNCLASSIFIED U .S. Department of State Case No . F-2015-05028 Doc No . C05838724 Date : 02/05/2016


28/31

O5 8 3 8 7 2 4 1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838724 Date: 02/05/2016Obtain d by Judicial Watch , Inc . via FOIA

commercial

From \Sent wecin=sa ay -- f ar t n ~ 9:10 AMTo Mills,Cheryl DCc: Dinger, John RSubject Thoughts

Classification:SECRET NOFORN

Hi, Cheryl:

TE8 NATL SEC AGENC


I hope the information In the memo and the sfig Uy expanded background paper help with your decision re: whether topursue use of BlackBerries in the suite.

Sometimes the distinction between what can be one and what Is, or Is not, recommended to be done differ; this Is oneof those instances. OS s response Illustrates thel level of concern based on their extensive professional expertise.

0 tlons as I see them :

I hope this additional info Is useful and I apologiz If offering it is presumptuous- please let me know what else NSAcando to help, either in the decision-making process or in the decision-implementation process. I can identify with yourstatement that we as a community of echnical a d security experts should have done a better job of anticipating theneed for expanded use of personal electronic de ces- if that's an area where the Administration and the Secretaryneed us to focus and drive harder, I'lldo my utm st to turn that message into reality.

Very respectfully, LJ 8 NATL SEC AGEN87(C)

· - - Senior NSA Liaison e p re s e De rtment

\ \commercial I \ST2

8 NATL SEC AGENC87(C)8 NATL SEC AGENC

UNCLASSIFIED U.S. Department of State C a se No. F-2015-05028 Doc No. C05838724 Date: 02/05/2016


29/31

O 5 8 3 8 7 2 4 1ED U.S . Department of State Case No F-2015-05028 Doc No C05838724 Date: 02/05/2016Obtai ed by Judicial Watch Inc . via FOIA

·

3

UNCLASSIFIED U.S. Department o State Case No F-2015-05028 Doc No C05838724 Date: 02/05/2016


30/31

c O5 8 3 8 7 4 1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838714 Date: 02/05/2016Obtained by Judicial Watch , Inc . via FOIA

Reid Donald R

From:Sent:To:Subject:

fUNCi.ASSIFIED j

DS014

Reid, Donald Reb~ 5

2 09 5:52 PMT: Meetin with CherylMiiis Tuesday

R E I E A S EIN PART 8(7)C,EJ(3)50 USC 3605, Public L86 -36, Sec. 6(a) NationalSecurity Act of 1959

B7

c = a t Eric's request, we began examining optlons for S with respect to secure Blackberry-like communications .. thecurrent state of the art is not too user friendly, has o infrastructure at State, and is very expensive .. each time we asked

B7

the question What was the solution ft>r POTUS? were olitel told to shut up and color .. NSA opened the door ft>rusto establish requirements and they would try to hel ... then 1the NSA customer rep assigned to INR) R_E_V-E_W_ -happened to have a meeting with Cheryl Mills whe S's disp easure Wittll fie current no BB In the SCIF issue just cam UTHORIup.• Now NSAIs offering a briefing Tues and clea y are ready to make things happen. Barbara

While our noses are out of joint for how this was h died, the issue will e what kind of support will NSA be offering tomeet S demands (basically wireless comm in Mah gany Row)... and whatever solution they provide will have to have asupporting request (or an existing MOA).. .so that i the only reason I was giving you a heads up ... Don

Nielsen,enior

Reviewer

83 NATL SEC AGENCYFrom:

87(C)

Sent: Fr ay Fe rua 13 009 5: MTo: Boswell, Ertc J; Reid,Cc: Donovan t r i c · _ ~SUbject: RE: URGENT: Meeting with Cheryl Mills

Eric,

The meeting on 17 February at 2 p .m. In the Secre ary s conference room.

Apologies for the typo.

ice anagerNCR State,- i

From: Boswell, Ertc JSent: Frida , February 13, 2009 4:45 PMTo: eld, Donald R; 1Cc: Donovan, Patrir:X

sub ect: RE: URGENT: Meeting with Cheryl Miiis

I presume this meeting is Tuesday 17 Feb rather t an 27 Feb?

From: ·Sent:To:Cc:Subject:

Classification: utBEI1

83 NATL SEC AGENCR t r \


83 NATL SEC AG EN87(C)

87


83 NATL SEC AGENC87(C)83 NATL SEC AGENC87(C)

UNCLASSIFIED U.S . Department of State Case No. F-2015-05028 Doc No. C05838714 Date: 02/05/2016


31/31

CO 5 8 3 8 714 =1ED U.S. Department of State Case No. F-2015-05028 Doc No. C05838714 Date: 02/05/2016Obtain d by Judicial Watch , Inc. via FOIA

Good afternoon -

BLUF:NSA/IADseniors will be meeting with Ms. M lls Tuesday on Blackberryvulnerabilities and the range of mitigationoptions based on a request she made of me this m ming . I want to ensure that you have the opportunity to attend, orto send your experts, to join the discussion and he r firsthand what the options are.

Date: Tuesday, 27 February 2009Time: 14

Place: The Secretary's Conference Room - - - - -~POCs: Lori Mclean (for Chief of Staff); for NCR State/NSA)


Background: I believe IADwas to have coordinate with you, but things have been developing quickly (as they always doon the Friday before a ong weekend ) and I did N Twant to assume that you had been Informed o the meeting andthat you had been Invited to participate, as is bot desired and appropriate. If this s first heard for you, please beassured that It was NOT intentional, but more ala g the line of fog of battle or too many cooks

I apologize up front for inadvertently forcing the i ue. I met with Ms. Millsthis morning to Introduce myself and wasimmediately questioned about the art of the pos Ible re: the Blackberries. NSA is fully prepared to brief on thevulnerabllltles; to make sure they understand full the requirement (which was stated to me as needing to use theBlackberries In the Secretary's Suite at the unc lass fled level for scheduling/emailing etc. and possibly also for voice); andto discuss/offer mitigations that would enable res lution of the requirement.

_ jh ve been charged by Debbie Plunkett (D/IAD)to lead the briefingteam. Please do not hesitate to contact t em or e, to help shape the agenda, ask questions, etc. Their phone numbersare l 83 NATL SEC AGENC

I would greatly p p r e c i t eyour lettlng j cc'ed on this note) know who will attend from the CIO andOS offices so that she can advise Lori Mclean prio to the session. 83 NATL SEC AGENCY

Thank you for workingwith me on this. D

Senior NS L"alson Representative . U.S S ate Dep rtmentcommercial

2

87(C)83 NATL SEC AGENCY87(C)


83 NATL SEC AGENCY

f

jw v state hillary bb nsa iad 00646

Documents