[Senate Hearing 107-224] [From the U.S. Government Publishing Office] S. Hrg. 107-224 DOMESTIC RESPONSE CAPABILITIES FOR TERRORISM INVOLVING WEAPONS OF MASS DESTRUCTION ======================================================================= HEARING before the SUBCOMMITTEE ON TECHNOLOGY, TERRORISM, AND GOVERNMENT INFORMATION of the COMMITTEE ON THE JUDICIARY UNITED STATES SENATE ONE HUNDRED SEVENTH CONGRESS FIRST SESSION __________ MARCH 27, 2001 __________ Serial No. J-107-8 __________ Printed for the use of the Committee on the Judiciary _______ U.S. GOVERNMENT PRINTING OFFICE 76-917 WASHINGTON : 2002 ____________________________________________________________________________ For Sale by the Superintendent of Documents, U.S. Government Printing Office Internet: bookstore.gpr.gov Phone: toll free (866) 512-1800; (202) 512�091800 Fax: (202) 512�092250 Mail: Stop SSOP, Washington, DC 20402�090001 COMMITTEE ON THE JUDICIARY ORRIN G. HATCH, Utah, Chairman STROM THURMOND, South Carolina PATRICK J. LEAHY, Vermont CHARLES E. GRASSLEY, Iowa EDWARD M. KENNEDY, Massachusetts ARLEN SPECTER, Pennsylvania JOSEPH R. BIDEN, Jr., Delaware JON KYL, Arizona HERBERT KOHL, Wisconsin MIKE DeWINE, Ohio DIANNE FEINSTEIN, California JEFF SESSIONS, Alabama RUSSELL D. FEINGOLD, Wisconsin SAM BROWNBACK, Kansas CHARLES E. SCHUMER, New York MITCH McCONNELL, Kentucky RICHARD J. DURBIN, Illinois MARIA CANTWELL, Washington Sharon Prost, Chief Counsel Makan Delrahim, Staff Director Bruce Cohen, Minority Chief Counsel and Staff Director ------ Subcommittee on Technology, Terrorism, and Government Information JON KYL, Arizona, Chairman MIKE DeWINE, Ohio DIANNE FEINSTEIN, California JEFF SESSIONS, Alabama JOSEPH R. BIDEN, Jr., Delaware MITCH McCONNELL, Kentucky HERBERT KOHL, Wisconsin MARIA CANTWELL, Washington Stephen Higgins, Majority Chief Counsel David Hantman, Minority Chief Counsel C O N T E N T S ---------- STATEMENTS OF COMMITTEE MEMBERS Page Feinstein, Hon. Dianne, a U.S. Senator from the State of California..................................................... 33 Kyl, Hon. Jon, a U.S. Senator from the State of Arizona.......... 1 Sessions, Hon. Jeff, a U.S. Senator from the State of Alabama.... 3 WITNESSES Alexander, Yonah, Senior Fellow and Director, International Center for Terrorism Studies, Potomac Institute for Policy Studies, Arlington, VA......................................... 28 Clapper, James, Jr., Lieutenant General, United States Air Force (Retired), Vice Chairman, Advisory Panel to Assess Domestic Response Capabilities for Terrorism Involving Weapons of Mass Destruction, Washington, DC.................................... 5 Cordesman, Anthony H., Arleigh A. Burke Chair in Strategy, Center for Strategic and International Studies, Washington, DC........ 22 DOMESTIC RESPONSE CAPABILITIES FOR TERRORISM INVOLVING WEAPONS OF MASS DESTRUCTION ---------- TUESDAY, MARCH 27, 2001 U.S. Senate, Subcommittee on Technology, Terrorism, and Government Information, Committee on the Judiciary, Washington, DC. The Subcommittee met, pursuant to notice, at 2:10 p.m., in room SD-226, Dirksen Senate Office Building, Hon. Jon Kyl, Chairman of the Subcommittee, presiding. Present: Senators Kyl and Feinstein. STATEMENT OF HON. JON KYL, A U.S. SENATOR FROM THE STATE OF ARIZONA Chairman Kyl. The Subcommittee will come to order. I welcome everyone to this hearing of the Subcommittee of the Judiciary Committee on Technology, Terrorism, and Government Information. By way of apology, let me first say that we had three votes which delayed the party luncheons, as a result of which some of the Senators will be late. I am informed that Senator Feinstein has an additional meeting, and therefore she may be quite a little bit late. But with that information, I am going to go ahead because I don't want to keep all of you waiting. At this hearing today, we are going to examine the findings of the Congressionally mandated Advisory Panel to Assess Domestic Response Capabilities for Terrorism Involving Weapons of Mass Destruction, as presented in its latest report entitled ``Toward a National Strategy for Combating Terrorism.'' At the dawn of this new millennium, the United States faces new challenges to the security of our Nation, our people, and interests abroad. We face no peer rival, and our view of the horizon is no longer clouded by the once ominous threat of either a large-scale nuclear attack on our homeland or a massive conventional attack on our European allies. Yet, the security our citizens both at home and abroad is threatened. The threat no longer derives from a single source, but from a myriad of sources, including terrorists organizations that increasingly see Americans and their interests as their premier targets. The means available to terrorist organizations and their sponsors are potentially more deadly and catastrophic than ever. We have only to look back to October of last year and the devastation wrought by two men in a small boat heavily laden with conventional explosives that maneuvered alongside the USS Cole. Seventeen American sailors perished, with many others wounded, and an American war ship was reduced to a crippled hulk in just a matter of a few seconds. In the 1990's, 6 people were killed and 1,000 were injured in bombing of the World Trade Center in New York City. But the bombers' goal was to topple the twin towers, which would probably have killed tens of thousands of people. Imagine the destruction if those responsible for these attacks had been more technically proficient or if they had had weapons of mass destruction. The perpetrators of these attacks do not appear to be state-sponsored organizations in the classic sense. Recent reports have strengthened the links between the Cole bombing and exiled Saudi millionaire Usama Bin Ladin. Although not state-sponsored in the classic sense, Bin Ladin is dependent upon a variety of states for asylum and protection of his assets. The fact that his group is not state-sponsored does not mean it is less threatening. According to the Director of the National Security Agency, Bin Ladin can afford to outfit himself with better and more sophisticated communications equipment than most of the agencies of the U.S. Government that might be charged with countering his efforts. According to recent foreign press reports, Bin Ladin's financial empire has enabled his supporters to strengthen their hold upon the Taliban government of Afghanistan, thereby eliminating the likelihood of extradition. If Bin Ladin can afford all of this, someday he may even be able to buy a nuclear, chemical, or biological weapon and the means to employ it. The emergence of terrorist groups that are not state- sponsored does not mean that nations no longer support terrorism. For example, Iran continues to be the most active state sponsor of terrorism. Tehran already has chemical and biological weapons. In fact, nearly all of the seven nations that the U.S. identifies as state sponsors of terrorism are believed to possess weapons of mass destruction of at least some capability. Given this state of affairs, what should U.S. strategy be and how can we effect it? The Panel to Assess Domestic Response Against Terrorism was quick to realize that the presence of the word ``Domestic'' in its name did not limit it to the study of strictly domestic solutions to strictly domestic weaknesses. The members, representing a broad cross-section of local, State and Federal expertise, came to the conclusion that much of the deterrence and prevention of terrorism must begin on foreign soil, with strong partnerships among our allies and an equally strong intelligence capability. The panel made several recommendations aimed at strengthening our ability to both gather intelligence on terrorist organizations and share intelligence between agencies responsible for countering the terrorist threat. The panel also made numerous recommendations designed to improve the cooperation between Federal, State and local entities to enhance our capability to respond to a catastrophic terrorist attack. In our first of two panels today, we are pleased to be joined by Vice Chairman of the Advisory Panel, Lieutenant General James Clapper, who formerly served as Director of the Defense Intelligence Agency. The Chairman of the Advisory Panel, Governor James Gilmore of Virginia, was invited to attend, but could not be here due to a scheduling conflict. I might say that we decided to proceed with this hearing because it is our intention, both Senator Feinstein and myself, to take as much testimony as we can within a period of just a few weeks and begin to put together legislation that we can actually have an opportunity to run this year with an expectation that we could get it passed. We believe that if we take the best of the suggestions from this panel and from other panels that have addressed the same general subject matter and put them together into a package, we can perhaps begin to coordinate the efforts much better than they are and at least add the legislative perspective to it that we think may be required. The second panel today includes two of our Nation's foremost experts on terrorism and national security. Dr. Anthony Cordesman currently serves as the Distinguished Arleigh Burke Chair and Senior Fellow at the Center for Strategic and International Studies. He has overseen and participated in a series of studies on terrorism and asymmetric warfare, and has a long history as an analyst of national security issues. Dr. Yonah Alexander is a Senior Fellow at the Potomac Institute and Director of its International Center for Terrorism Studies. He is the founder and editor of ``Terrorism,'' an international journal. I will afford Senator Feinstein the opportunity, if she arrives, to fit her statement in wherever we are in the testimony, and any member of the Subcommittee will have an opportunity to submit their statements for the record. [The prepared statement of Senator Sessions follows:] Statement of Hon. Jeff Sessions, a U.S. Senator From the State of Alabama I am very glad that Senators Kyl and Feinstein called this hearing today. This country faces a real threat. I am afraid that the question about whether a chemical, biological, radiological, nuclear, or cyber- terrorist attack will happen in the United States is less a question of whether, than of when. As the anniversary of the most heinous attack in America history--the Oklahoma City bombing on April 19, 1995--draws near, we remember what terrorism can do to this country. Not only were lives lost in that attack, but fear was allowed to rule us. That bomb was very simply constructed--just a bunch of diesel fuel and fertilizer in a moving van--yet it ripped a building in half, killing 168 people and wounding many others. Now, imagine a terrorist walking into an airport or football stadium or even, God forbid, this building, with a nerve agent like VX. With an amount less than a drop of water, that terrorist has a weapon to kill even more people than in Oklahoma City. That would be harder to detect and even harder to prevent or contain once an attack occurred. Worse yet, imagine a coordinated attack from all fronts. First, a computer terrorist sabotages U.S. government and military computers, shutting down lines of communication and defense. At the same time, he strikes civil telecommunications and financial services. Topping all that with a traditional military deployment by a rogue state, America would have a tremendous and frightening challenge to overcome. Luckily, this country is already on the ball. Many agencies such as the Department of Defense, the Department of State, the Department of the Treasury, the Department of Justice, the Federal Emergency Management Agency (FEMA), the Federal Bureau of Investigation, the Public Health Service component, and the Department of Energy have all taken substantial steps, along with over 50 other organizations throughout the U.S. Government, to make sure that a domestic terrorist attack does not occur, and if it does, that we have the best ways to deal with it. Four different reports, issued by four different groups looking specially at this problem, have assessed the threat of domestic terrorism and come up with ideas on how to address that threat. Today's distinguished panel of witnesses will give us more insight into one of these reports--the second in a series of RAND reports issued by the Gilmore Commission. I agree with all four reports that there is a huge need for greater coordination between the responsible agencies and between the federal, state, and local entities responsible for detecting, stopping, and responding to an attack in their particular community. Each of these reports presents a possible but slightly different solution to the problem. However, I think we need to really look hard at whether one of the four solutions will work best or whether we need a combination of all four. I also agree with my colleagues here today, Senators Kyl and Feinstein, who last session introduced solid legislation aimed at finding counter terrorism strategies and solutions. This legislation passed the Senate. The bill takes an important first step towards solution to this problem. First, it is important that we keep Syria and Iran on the Foreign Terrorist Organization list. There are indications that both countries continue to sponsor terrorist groups with ill will towards the United States. Second, the reports and task forces required by this bill will ensure that we have answers to important questions: (1) how to improve the guidelines on recruiting terrorist informants to encourage them to spill the beans on their cohorts ; (2) where research and development may improve the technologies to combat terrorists on American soil; (3) how to get the best information disseminated to the agencies dealing with the problem; (4) what needs to be done to stop existing world-wide terrorist fund-raising efforts; and (5) how we can improve the monitoring of domestic sales and lab handling and storage of biological agents and the equipment needed to use them. Senator Kyl's and Senator Feinstein's previous bill had the making of a crucial first step in the war on terrorists. Another fundamental step in domestic preparedness is the continual need to train first responders such as fire fighters, police officers, and emergency medical crews. Since we do not know where an attack using a weapon of mass destruction (WMD) will occur (it could be the Nation's Capital, another big urban center, or even in small town America) we need to be prepared across the Nation. To accomplish that preparedness means we need to train and equip our civilian responders to the highest standard possible. Traditionally, the military has been responsible for dealing with attacks on the United States. However, the military is not and cannot be on hand in every community on a 24-hour basis. That's why first responders are so important. In my home state of Alabama, we have the nation's only Center for Domestic Preparedness that trains with the actual chemical and biological substances that might be used in an attack. Exercises run in the Chemical Training Facility-identical to the training used by our military forces at Ft. Leonardwood, Missouri--is the only way to test how firefighters, policemen, and other first responders will react under pressure, taking away the fear of the unknown that is present whenever an invisible hand strikes. Incredibly, this Center -has already trained 5,000 first responders, but the nation needs to train many, many more. Politicians of every political persuasion have recognized the importance of this Center to the overall domestic preparedness picture. Our former Attorney General, Janet Reno, called the Center a ``crown jewel'' in testimony before Congressional Committees. In conclusion, I want to again thank Senator Kyl and Senator Feinstein for holding this hearing and for developing legislation that is an important first step in dealing with the problems. Chairman Kyl. So with that, let me introduce our first witness, Lieutenant General Clapper, Vice Chairman of the Advisory Panel and former Director of the DIA. General Clapper, welcome. Thank you for taking time to be here. We will place your full statement in the record and invite you to make whatever summary remarks you would like to make at this time. STATEMENT OF LIEUTENANT GENERAL JAMES CLAPPER, JR., UNITED STATES AIR FORCE (RETIRED), VICE CHAIRMAN, ADVISORY PANEL TO ASSESS DOMESTIC RESPONSE CAPABILITIES FOR TERRORISM INVOLVING WEAPONS OF MASS DESTRUCTION, WASHINGTON, D.C. General Clapper. Thank you very much, Mr. Chairman. I am very pleased to have this opportunity to speak to you as Vice Chairman of the Advisory Panel to Assess Domestic Response Capabilities for Terrorism Involving Weapons of Mass Destruction, less awkwardly known as the Gilmore Commission. You have asked that we provide testimony today on the findings and recommendations in our second report, which is the second of three, and we go out of business at the end of this year. I will outline those recommendations and will discuss particularly two of them, one dealing with the need for a national strategy and the other the need for somebody to be in charge. You have also asked that I speak to areas of agreement and disagreement between the Gilmore Commission and the National Commission on Terrorism, chaired by former Ambassador L. Paul Bremer, who I might mention is also a member of the Gilmore Commission. So we did have fortuitously good cross-over there. With respect to strategy, it is our belief, our conviction, after looking at this for a couple of years now that there is, in fact, no overarching statement of what the United States is trying to achieve with its program to combat terrorism. Instead of a national strategy, what we really have is a loosely coupled set of plans and programs that aim individually to achieve certain particular preparedness objectives. Senior U.S. officials have stated that several official broad policy and planning documents that were published during the prior administration, such as the Presidential Decision Directives 39 and 62, the Attorney General's 1999 Five-year Interagency Plan, and the most recent Annual Report to Congress on Combating Terrorism, taken as a whole constitute a national strategy. Our view is that these documents describe plans, the compilation of various programs underway, and some objectives, but they do not either individually or collectively constitute a national strategy. As a result, we recommended that the incoming administration develop such a national strategy by laying out national goals for combating terrorism focusing on results--that is, outputs rather than process or inputs. We made three key assumptions to guide the strategy development. The first assumption was that local response entities, meaning law enforcement, fire services, emergency medical technicians, hospital emergency personnel, public health officials, and emergency managers, will always be the first, and conceivably only response. Second, in the event of a major terrorist attack, however that is defined, no single political jurisdiction is likely to be capable of responding to such an attack all by itself without some outside assistance. Third, and perhaps most important, we already have existing emergency response and management capabilities, developed over many years, for response to natural disasters, disease outbreaks, and accidents. Those capabilities should be used as a base for enhancing our domestic capability for response to terrorist attack. I want to highlight some of the attributes of the national strategy that we outlined in our report. It should be geographically and functionally comprehensive. It should address both international and domestic terrorism. That distinction, heretofore somewhat nice, neat, separate compartments between domestic and foreign, is gradually eroding, we believe. The national strategy should address the full spectrum of the Nation's efforts against terrorism, to include intelligence, deterrence, prevention, investigation, prosecution, preemption, crisis management, and consequence management. The national strategy should apply to the Nation as a whole, not just the Federal executive branch, and must involve States and communities as essential and equal partners. With respect to the issue of placing someone in charge, it has been our observation based on a lot of discussion, briefings, and travel, that many at the State and local levels perceive the structure and processes at the Federal level for combating terrorism as uncoordinated, complex, and confusing. Our first report included a graphic depiction of the numerous Federal agencies and offices within those agencies that have responsibilities for combating terrorism. I testified this morning before a House panel looking at this and they had extracted the graphics from our first report and had them displayed in the Committee room, which basically was one organizational chart after another of all the departments and agencies who in one way or another, one degree or another are involved in combating terrorism, a very effective graphic depiction. Attempts to create a Federal focal point for coordination with State and local officials such as the National Domestic Preparedness Office have been only partially successful. Moreover, many State and local officials believe that Federal programs are often created without consulting them. And confusion often exists even within the Federal bureaucracy. It is our view that the current coordination structure does not possess the requisite authority or accountability to make policy changes and to impose the discipline necessary among the numerous Federal agencies involved. So for those and other reasons, we have recommended the establishment of a senior-level coordination entity in the Executive Office of the President entitled the National Office for Combating Terrorism, with responsibility for developing domestic and international policy, and for coordinating the program and budget of the Federal Government's activities for combating terrorism. The title of the entity is not as important as its responsibilities and authorities, and I should interject here since it came up this morning that we had great aversion to the term ``czar,'' which is often applied perhaps to such a construct, and we would not choose to use that term. The responsibilities and functions of this organization tethered to the President would be forging a national strategy, and this would be, I think, its first and foremost responsibility, managing the program and budget by a process of certifying or decertifying the budgets of the other agencies and departments involved in combating terrorism. A subject near and dear to my heart is fostering intelligence collection, analysis, and most importantly dissemination particularly and especially to State and local officials; reviewing plans of State and local authorities to ensure synchronicity or coordination with the national strategy; coordinating health and medical programs; directing research development, test, and evaluation, and developing national standards; and serving as sort of the one-stop shop, if you will, for information as a clearinghouse for State and local officials. Two other attributes I want to mention are that we feel this entity or office should have political accountability and responsibility. The person designed as the focal point to be in charge for developing a national strategy and for coordinating Federal programs must have this political accountability and responsibility. Ergo, our recommendation was that this person should be appointed by the President and confirmed by the Senate, and would enjoy Cabinet-level rank. At the same time, we also would emphasize that this organization would not have operational control over Federal agency activities. In other words, the execution would still remain with the various Government departments and agencies. It was not our intent in any way that those departments and agencies should abrogate their responsibilities. What we are advocating is more coherence, more coordination which would be brought about by this office for coordination of counterterrorism. At the risk of perhaps going where angels fear to tread, I also wanted to mention the Congress in this. Its intention, I think, has been helpful, but in a sense the Congress has also contributed to the executive branch's problems. Over the past 5 years, there have been half a dozen Congressional attempts to reorganize the executive branch's efforts to combat terrorism, all of which failed. None enjoyed the support of the executive branch. At least 11 full committees in the Senate and 14 full committees in the House, as well as their numerous subcommittees, claim to one degree or another some oversight responsibility for various aspects of programs for combating terrorism. Earmarks in appropriations bills created many of the Federal Government's specific domestic preparedness programs without authorizing legislation or oversight. The huge appearing, at least, U.S. budget for combating terrorism is now laced with such earmarks which have proliferated in the absence of an executive branch strategy. The executive branch cannot successfully coordinate its programs for combating terrorism alone. Congress, we think, must also better organize itself and exercise much greater discipline. So we have recommended creation of a joint committee, or alternatively separate committees in each House somewhat akin to the construct I am used to, the two intelligence oversight committees, to pass on executive branch requests and to oversee execution of programs that it authorizes. Obviously, for this to work, other Congressional authorizing and appropriations committees would have to defer to the joint or the single Committee in each House. We are not so naive to think this recommendation is any less difficult than the executive branch changes that we are proposing, but it is no less needed. We also made six specific functional recommendations in the following areas, and I will simply tick off the subject matter areas rather than dwelling on them, since there is a detailed discourse on that in my prepared statement. The functions we had in mind for this National office would be to foster the collection of intelligence, assessing threats and sharing information particularly at the State and local level; operational coordination, training, equipping, exercising, overseeing and facilitating health and medical coordination; research development and promulgation of national standards; and providing cyber security against terrorism. You asked, sir, for a discussion of the areas of agreement and disagreement with the report of the National Commission on Terrorism which was chaired by Ambassador Jerry Bremer, who, as I said, is on our panel as well. First, I would mention that the charters and objectives of the Bremer Commission and the Gilmore Commission are for the most part different. The Bremer Commission focused on international terrorism, while we focused on domestic preparedness. There are, nevertheless, many congruent areas between the two reports. Both agree on the nature of the threat of international terrorism, including the potential for more attacks inside the borders of the United States. Both panels specifically agree that certain measures must be taken to improve intelligence collection and dissemination on terrorists, including repealing the 1995 Director of Central Intelligence guidelines as they apply to recruiting terrorist informants, reviewing and clarifying the Attorney General's guidelines on foreign intelligence collection and the guidelines on general crime racketeering enterprise and domestic security terrorism investigations, and directing the Department of Justice Office of Intelligence Policy and Review not to require a process for initiating actions under the Foreign Intelligence Surveillance Act that are more stringent than what was actually required by the statute. Both panels agree that significant improvements must be made in the ability of intelligence and law enforcement agencies to collect, analyze, disseminate, and share information. Both panels agree that there must be a comprehensive strategy to deal with terrorism. Both panels agree that the Department of Defense and U.S. armed forces may have a major role in preventing or responding to a terrorist attack, especially a major one. We likewise strongly agree that more planning, coordination, training, and exercises need to be conducted to prepare for the possibility of major DoD and military involvement. The one area, however, on which the two panels disagreed had to do with the issue of lead agency. The Bremer Commission asserts that a response to a catastrophic attack may require the designation of DoD as lead agency. While agree that DoD may have, and probably would have a major role in such a cataclysmic event, we believe firmly that the military must always be directly under civilian control. I can speak personally that Governor Gilmore feels personally very strongly about this. This was probably the most hotly debated and discussed issue in the 2 years of the existence of our panel. So as a result, we recommended that the President always designate a Federal civilian agency other than the Department of Defense as the lead Federal agency. Many Americans will not draw the technical distinction between the Department of Defense, the civilian entity, and the U.S. armed forces, the military entity. Although the Department of Defense and every major component of the Department has civilian leaders, the perception will likely be that the military is in the lead. And in the interest of preserving our civil liberties, or even dispensing with the risk of jeopardizing civil liberties, it was our conviction after a lot of discussion and debate that the lead Federal agency in every case should be a genuine civilian element. In conclusion, Mr. Chairman, Gilmore panel members are convinced that the recommendations that I have outlined here briefly are crucial to strengthening the national effort to combat terrorism. We need a true national strategy and we need somebody in charge. This is not a partisan political issue. We have members on our panel who identify with each of the parties, virtually all the functional constituencies, and at all governmental levels. This is simply something that we unanimously agreed that the country needs. Contemplating the specter of terrorism in this country is a sobering but critically necessary responsibility of government officials at all levels and in all branches, as evidenced by your interest this afternoon. It is truly a national issue that requires synchronization of our efforts vertically among the Federal, State and local levels, and horizontally among the functional constituent stakeholders. The individual capabilities of all critical elements must be brought to bear in a much more coherent way than is now the case. That fundamental tenet underlies our work over the last 2 years. We believe that the most imposing challenge centers on policy and whether we have the collective fortitude to forge change both in organization and process. I would respectfully observe that we have studied the topic to death and what we need now is action. Mr. Chairman, this concludes my statement. I would be pleased to address your questions. [The prepared statement of General Clapper follows:] Statement of James Clapper, Jr., Lieutenant General, U.S. Air Force, Retired, Vice Chairman, Advisory Panel to Assess Domestic Response Capabilities for Terrorism Involving Weapons of Mass Destruction, Washington, D.C. Mr. Chairman, Members of the Subcommittee, I am honored to be here today. I come before you as the Vice Chairman of the Advisory Panel to Assess Domestic Response Capabilities for Terrorism Involving Weapons of Mass Destruction, also known as the ``Gilmore Commission'' (after its Chairman, Governor James S. Gilmore, III, of Virginia). Thank you for the opportunity to present the views of the Advisory Panel. The Advisory Panel was established by Section 1405 of the National Defense Authorization Act for Fiscal Year 1999, Public Law 10-261 (H.R. 3616, 105th Congress, 2nd Session) (October 17, 1998). That Act directed the Advisory Panel to accomplish several specific tasks. It said: The panel shall---- 1. assess Federal agency efforts to enhance domestic preparedness for incidents involving weapons of mass destruction; 2. assess the progress of Federal training programs for local emergency responses to incidents involving weapons of mass destruction; 3. assess deficiencies in programs for response to incidents involving weapons of mass destruction, including a review of unfunded communications, equipment, and planning requirements, and the needs of maritime regions; 4. recommend strategies for ensuring effective coordination with respect to Federal agency weapons of mass destruction response efforts, and for ensuring fully effective local response capabilities for weapons of mass destruction incidents; and 5. assess the appropriate roles of State and local government in funding effective local response capabilities. The Act requires the Advisory Panel to report its findings, conclusions, and recommendations for improving Federal, State, and local domestic emergency preparedness to respond to incidents involving weapons of mass destruction to the President and the Congress at three times during the course of the Advisory Panel's deliberations-on December 15 in 1999, 2000, and 2001. Mr. Chairman, you have asked that we provide testimony today on the findings and their related recommendations contained in the second report of the Advisory Panel, entitled ``Toward a National Strategy for Combating Terrorism,'' dated December 15, 2000. I will outline those recommendations, and will provide a more detailed description on two of them-one dealing with the need for a national strategy, the other on the structure of the Executive Branch for dealing with terrorism. You have also asked that I note the areas of agreement and disagreement that the Gilmore Commission has with the report of the National Commission on Terrorism, which was chaired by former Ambassador L. Paul Bremer. Principal Findings and Recommendations in the Second Annual Report a national strategy for combating terrorism ``The United States has no coherent, functional national strategy for combating terrorism; and the next President should develop and present to the Congress a national strategy for combating terrorism within one year of assuming office.'' Mr. Chairman and Members, the Advisory Panel believes that a truly comprehensive national strategy will contain a high-level statement of national objectives coupled logically to a statement of the means to be used to achieve these objectives. Currently, there is no overarching statement of what the United States is trying to achieve with its program to combat terrorism. Goals must be expressed in terms of results, not process. Government officials have, in the past, spoken of terrorism preparedness goals in terms of program execution. A comprehensive national strategy will answer the more fundamental and important question: To what end are these programs being implemented? Instead of a national strategy, the nation has had a loosely coupled set of plans and specific programs that aim, individually, to achieve certain particular preparedness objectives. Senior U.S. officials have previously stated that several official broad policy and planning documents that were published in the prior administration- Presidential Decision Directives 39 and 62, the Attorney General's 1999 Five-Year Interagency Counterterrorism and Technology Crime Plan, and the most recent Annual Report to Congress on Combating Terrorism \1\-- taken as a whole, constitute a national strategy. These documents describe plans, the compilation of various programs already under way, and some objectives; but they do not either individually or collectively constitute a national strategy. --------------------------------------------------------------------------- \1\ The Office of Management and Budget, Annual Report to Congress on Combating Terrorism, Including Defense against Weapons of Mass Destruction/Domestic Preparedness and Critical Infrastructure Protection, May 18, 2000. --------------------------------------------------------------------------- Although Executive Branch agencies are administering programs assigned to them in the various pieces of legislation, the Executive Branch, under the former administration, did not articulate a broad national strategy that would synchronize the existing programs or identify future program priorities needed to achieve national objectives for domestic preparedness for terrorism. Moreover, it is our view that, given the structure of our national government, only the Executive Branch can produce such a national strategy. As a result, we recommended that the incoming Administration begin the process of developing a national strategy by a thoughtful articulation of national goals for combating terrorism, focusing on results rather than process. The structure and specifics of the national program should derive logically and transparently from the goals, not the other way around. BASIC ASSUMPTIONS The Advisory Panel agreed on several basic assumptions to guide its approach to strategy development. First, ``local'' response entities- law enforcement, fire service, emergency medical technicians, hospital emergency personnel, public health officials, and emergency managers-- will always be the ``first'' and conceivably only response. Second, in the event of a major terrorist attack, however defined-- number of fatalities or total casualties, the point at which local and State capabilities are overwhelmed, or some other measure--no single jurisdiction is likely to be capable of responding to such an attack without outside assistance. That assumption is critical to understanding the need for mutual aid agreements and coordinated operations. Third--and perhaps most important--there are existing emergency response and management capabilities, developed over many years, for responses to natural disasters, disease outbreaks, and accidents. Those capabilities can and should be used as a base for enhancing our domestic capability for response to a terrorist attack. We can strengthen existing capabilities without buying duplicative, cost- prohibitive new capabilities exclusively dedicated to terrorism. MAJOR ELEMENTS OF THE NATIONAL STRATEGY The national strategy should be geographically and functionally comprehensive. It should address both international and domestic terrorism. The distinction between terrorism outside the borders of the United States and terrorist threats domestically is eroding. International terrorism crosses borders easily and may directly affect the American homeland. That was evident in the New York World Trade Center bombing in 1993, and more recently in the activities around the turn of the century. The terrorist bombings of the U.S. garrison at Khobar Towers, Saudi Arabia, the two U.S. embassies in East Africa, and the recent USS Cole incident, also illustrate the reach of terrorists against U.S. interests and the profound domestic implications they pose. To be functionally comprehensive, the national strategy should address the full spectrum of the nation's efforts against terrorism: intelligence, deterrence, prevention, investigation, prosecution, preemption, crisis management, and consequence management. Our nation's highest goal must be the deterrence and prevention of terrorism. The United States cannot, however, prevent all terrorist attacks. When deterrence and prevention fail, the nation must respond effectively to terrorism, whether to resolve an ongoing incident, mitigate its consequences, identify the perpetrators, and prosecute or retaliate as appropriate. The national strategy should deal with all aspects of combating terrorism and must carefully weigh their relative importance for the purpose of allocating resources among them. The national strategy should apply to the nation as a whole, not just the Federal Executive Branch. The Federal government should lead a strategic planning process that involves States and communities as essential and equal partners. The national strategy must be appropriately resourced, by all levels of government, to provide a reasonable opportunity to achieve its successful implementation. At the Federal level, that will require a closer relationship between the Executive and Legislative Branches. Nationally, that will require better coordination with State and local governments. ARTICULATING THE END STATE: NATIONAL GOALS The first step in developing a coherent national strategy is for the Executive Branch to define some meaningful, measurable expression of what it is trying to achieve in combating terrorism. The Federal government's goals have previously been expressed primarily in terms of program execution. Administrative measurements alone do not foster effective management of a national program. The national strategy must express preparedness goals in terms of an ``end state'' toward which the program strives. Since there exists no ready-made measurement of a country's preparedness for terrorism, especially domestically, the Executive Branch must develop objective measurements for its program to combat terrorism, to track its progress, to determine priorities and appropriate funding levels, and to know when the desired ``end state'' has been achieved. The nation's strategy for combating terrorism requires results- based goals for three reasons. First, the programs need an end-state goal. Elected and appointed officials from Federal, State, and local governments must be able to allocate resources to specific geographic regions according to requirements of that region. Resources should be allocated to achieve that broadest application for all emergency and disaster needs, consistent with preparedness goals. That approach is fundamental to the principles of building on existing systems and to achieving the maximum possible multipurpose capability. Second, programs for combating terrorism need accountability. Legislators and public officials, especially elected ones, must have some reliable, systematic way of assessing the extent to which their efforts and taxpayers' money are producing effective results. The performance and results of programs for combating terrorism are currently assessed almost solely according to anecdote. The only concrete measure available at the moment is the dispersal of Federal funds-a process measurement that does not achieve effective strategic management. Third, programs for combating terrorism need clear priorities. It is impossible to set priorities without first defining results-based objectives. The essence of any coherent strategy is a clear statement of priorities that can be translated into specific policy and programmatic initiatives. Priorities are the transmission mechanism that connects ends to means. FOSTERING THE MEANS OF STRATEGY: PROGRAM STRUCTURE AND PRIORITIES Setting priorities is essential in any strategy, but priorities require clear, resultsbased objectives. With some meaningful sense of objectives, it will be possible to develop coherent priorities and an appropriate set of policy prescriptions. For instance, should the nation seek a different level of preparedness for large urban centers than for rural areas? What should be the relative importance of preparing for conventional terrorism, radiological incidents, chemical weapons, biological weapons, or cyber attacks? Should the nation seek to improve its preparedness more against the types of attacks that are most likely to occur, such as conventional terrorist bombings or the use of industrial chemicals, or for those that are most damaging but less likely to occur, such as nuclear weapons or military-grade chemical or biological weapons? With respect to biological weapons, which pathogens deserve priority? Should the emphasis be on smallscale contamination attacks as opposed to large-scale aerosol releases of the worst pathogen types, such as anthrax, plague, and smallpox? What is the relative priority for allocating resources to protect critical infrastructure, especially from cyber attacks? The answers to these and other questions have important implications for the allocation of resources for training, equipment acquisition, exercises, research and development, pharmaceutical stockpiles, vaccination programs, and response plans. A coherent national strategy would provide clarity to the allocation of resources across the full range of possible activities to combat terrorism. To date, these critical resource allocation decisions have been made in an ad hoc manner and without reference to meaningful national goals. We cannot stress strongly enough that the strategy must be truly national in character-not just Federal. The approach to the domestic part of the national strategy should, therefore, be ``bottom up,'' developed in close coordination with local, State, and other Federal entities. Mr. Chairman, for those and other reasons, we believe that it is time to craft a national strategy for combating terrorism to guide our efforts-one that will give our citizens a level of assurance that we have a good plan for dealing with the issue; one that will provide State and local governments with some direction that will help them make decisions that will contribute to the overall national effort; one that will let our potential adversaries know, in no uncertain terms, how serious we are. THE NATIONAL OFFICE FOR COMBATING TERRORISM ``The United States has no coherent, functional national strategy for combating terrorism; and the next President should develop and present to the Congress a national strategy for combating terrorism within one year of assuming office.'' To many at the State and local levels, the structure and process at the Federal level for combating terrorism appear uncoordinated, complex, and confusing. Our first report included a graphical depiction of the numerous Federal agencies and offices within those agencies that have responsibilities for combating terrorism. I have provided additional copies of those charts to the Members of the subcommittee as one way of illustrating the level of complexity. Attempts to create a Federal focal point for coordination with State and local officials--such as the National Domestic Preparedness Office--have been only partially successful. Moreover, many State and local officials believe that Federal programs intended to assist at their levels are often created and implemented without consulting them. Confusion often exists even within the Federal bureaucracy. The current coordination structure does not possess the requisite authority or accountability to make policy changes and to impose the discipline necessary among the numerous Federal agencies involved. For those and other reasons, we recommended the establishment of a senior level coordination entity in the Executive Office of the President, entitled the ``National Office for Combating Terrorism,'' with the responsibility for developing domestic and international policy and for coordinating the program and budget of the Federal government's activities for combating terrorism. The title of the entity is not as important as its responsibilities, the functions that it will be called upon to perform, and the structure and authorities that we believe, at a minimum, such an entity must have. RESPONSIBILITIES AND FUNCTIONS 1. National Strategy. Foremost will be the responsibility to develop the comprehensive national strategy described above. That strategy must be approved by the President and updated annually. 2. Program and Budget. A concurrent responsibility of the National Office for Combating Terrorism will be to work within the Executive Branch and with the Congress to ensure that sufficient resources are allocated to support the execution of the national strategy. The U.S. strategy for deterrence, prevention, preparedness, and response for terrorists acts outside the United States, developed under the leadership of the Department of State, is comprehensive and, for the most part, appropriately resourced. It is on the domestic front that much additional effort and coordination will be required. The Executive should provide comprehensive information to the Congress to consider in the deliberative authorization and appropriations processes. In addition to a comprehensive strategy document, supporting budget information should include a complete description and justification for each program, coupled with current and proposed out-year expenditures. 3. Intelligence Coordination and Analysis. We recommended that the National Office for Combating Terrorism provide coordination and advocacy for both foreign and domestic terrorism-related intelligence activities, including the development of national net assessments of terrorist threats. A critical task will be to develop, in concert with the Intelligence Community--including its Federal law enforcement components--policies and plans for the dissemination of intelligence and other pertinent information on terrorist threats to designated entities at all levels of government--local, State, and Federal. To oversee that activity, we recommended that an Assistant Director for Intelligence in the National Office direct the intelligence function for Combating Terrorism, who should be ``dual-hatted'' as the National Intelligence Officer (NIO) for Combating Terrorism at the National Intelligence Council. That Assistant Director/NIO and staff would be responsible for compiling terrorism intelligence products from the various agencies, for providing national-level threat assessments for inclusion in the national strategy, and for producing composite or ``fused'' products for dissemination to designated Federal, State, and local entities, as appropriate. That person will serve as focal point for developing policy for combating terrorism intelligence matters, keeping the policymaking and operational aspects of intelligence collection and analysis separate. The Assistant Director will also be the logical interface with the intelligence oversight committees of the Congress. It is, in our view, important to have a senior-level position created for this purpose. To assist in this intelligence function, we also recommended the establishment of a ``Council to Coordinate Intelligence for Combating Terrorism,'' to provide strategic direction for intelligence collection and analysis, as well as a clearance mechanism for product dissemination and other related activities. It should consist of the heads of the various Intelligence Community entities and State and local representatives who have been granted appropriate security clearance. 4. Plans Review. We recommended that the National Office for Combating Terrorism be given authority to review State and geographical area strategic plans, and at the request of State entities, review local plans or programs for combating terrorism, for consistency with the national strategy. That review will allow the National Office to identify gaps and deficiencies in Federal programs. 5. Proposals for Change. We recommended that the National Office for Combating Terrorism have authority to propose new Federal programs or changes to existing programs, including Federal statutory or regulatory authority. 6. Domestic Preparedness Programs. The National Office should direct the coordination of Federal programs designed to assist response entities at the local and State levels, especially in the areas of ``crisis'' and ``consequence'' planning, training, exercises, and equipment programs for combating terrorism. The national strategy that the National Office should develop-in coordination with State and local stakeholders-must provide strategic direction and priorities for programs and activities in each of these areas. 7. Health and Medical Programs. Much remains to be done in the coordination and enhancement of Federal health and medical programs for combating terrorism and for coordination among public health officials, public and private hospitals, pre-hospital emergency medical service (EMS) entities, and the emergency management communities. The National Office should provide direction for the establishment of national education programs for the health and medical disciplines, for the development of national standards for health and medical response to terrorism, and for clarifying various legal and regulatory authority for health and medical response. 8. Research, Development, Test, and Evaluation (RDT&E), and National Standards. The National Office should have the responsibility for coordinating programs in these two areas. The national strategy should provide direction and priorities for RDT&E for combating terrorism. We believe that the Federal government has primary responsibility for combating terrorism RDT&E. Moreover, we have essentially no nationally recognized standards in such areas as personal protective equipment, detection equipment, and laboratory protocols and techniques. 9. Clearinghouse Function. We recommended that the National Office for Combating Terrorism serve as the information clearinghouse and central Federal point of contact for State and local entities. It is difficult for local jurisdictions and State agencies, even those with experience in complex Federal programs, to navigate the maze of the Federal structure. The National Office for Combating Terrorism should assume that role and serve as the ``one-stop shop'' for providing advice and assistance on Federal programs for training, planning, exercises, equipment, reporting, and other information of value to local and State entities. STRUCTURE AND AUTHORITY 1. Political Accountability and Responsibility. The person designated as the focal point for developing a national strategy and for coordinating Federal programs for combating terrorism must have political accountability and responsibility. That person should be vested with sufficient authority to accomplish the purposes for which the office is created and should be the senior point of contact of the Executive Branch with the Congress. For these reasons, we recommended that the President appoint and the Senate confirm the Director of the National Office for Combating Terrorism, who should serve in a ``cabinet-level'' position. 2. Program and Budget Authority. The National Office for Combating Terrorism should have sufficient budget authority and programmatic oversight to influence the resource allocation process and ensure program compatibility. That authority should include the responsibility to conduct a full review of Federal agency programs and budgets, to ensure compliance with the programmatic and funding priorities established in the approved national strategy, and to eliminate conflicts and unnecessary duplication among agencies. That authority should also include a structured certification/decertification process to formally ``decertify'' all or part of an agency's budget as noncompliant with the national strategy. A decertification would require the agency to revise its budget to make it compliant or, alternatively, to allow the agency head to appeal the decertification decision to the President. This limited authority would not give the Director of the National Office the power to ``veto'' all or part of any agency's budget, or the authority to redirect funds within an agency or among agencies. 3. Multidisciplinary Staffing. The National Office for Combating Terrorism should have full-time multidisciplinary expertise, with representation from each of the Federal agencies with responsibilities for combating terrorism, and with resident State and local expertise. For programs with a domestic focus, the National Office for Combating Terrorism must have sufficient resources to employ persons with State and local expertise and from each of the response disciplines. 4. No Operational Control. While the National Office for Combating Terrorism should be vested with specific program coordination and budget authority, it is not our intention that it have ``operational'' control over various Federal agency activities. We recommended that the National Office for Combating Terrorism not be ``in charge'' of response operations in the event of a terrorist attack. The National Office should provide a coordinating function and disseminate intelligence and other critical information. Mr. Chairman, I should note at this point that the word ``czar'' is inappropriate to describe this office. The Director of this office should not be empowered to order any Federal agency to undertake any specific activity. With few exceptions, we recommended that existing programs remain in the agencies in which they currently reside. One notable exception will be the functions of the National Domestic Preparedness Office (NDPO), currently housed in the Federal Bureau of Investigation. The new office should subsume all of the intended functions of the NDPO-coordination, information clearinghouse, advice and assistance to State and local entities. The National Office for Combating Terrorism should also assume many of the interagency coordination functions currently managed by the National Security Council office of the National Coordinator for Security, Counterterrorism, and Infrastructure Protection. For example, the responsibility for coordination of certain functions related to combating terrorism-Assistance to State and Local Authorities, Research and Development, Contingency Planning and Exercises, and Legislative and Legal Issues, among others-will devolve to the National Office for Combating Terrorism. We also recommended that the National Office for Combating Terrorism absorb certain entities as adjuncts to its office, such as the Interagency Board for Equipment Standardization and InterOperability. 5. Advisory Board for Domestic Programs. To assist in providing broad strategic guidance and to serve as part of the approval process for the domestic portion of strategy, plans, and programs of the National Office for Combating Terrorism, we recommended the establishment of a national ``Advisory Board for Domestic Programs.'' That Board should include one or more sitting State governors, mayors of several U.S. cities, the heads of several major professional organizations, and a few nationally recognized terrorism subject matter experts, as well as senior officials from relevant Federal agencies. The President and the Congress should each appoint members to this board. ALTERNATIVES CONSIDERED Mr. Chairman, the members of the Advisory Panel considered a number of alternatives to our recommendation for a National Office of the type that I have described, before coming to the unanimous conclusion that the path we chose was by far the best of the alternatives. Among others considered by the panel was a new Deputy Attorney General, an ``enhanced'' Federal Emergency Management Agency, the possibility of some other Federal agency, or simply trying to improve upon the status quo. I will be pleased to answer questions from Members about our rationale for discounting those alternatives. CONGRESSIONAL ISSUES ``The Congress shares responsibility for the inadequate coordination of programs to combat terrorism; it should consolidate its authority over programs for combating terrorism into a Special Committee for Combating Terrorism--either a joint committee between the Houses or separate committees in each House--and Congressional leadership should instruct all other committees to respect the authority of this new committee and to conform strictly to authorizing legislation.'' The Congress's strong interest in, and commitment to, U.S. efforts to combat terrorism is readily apparent. The Congress took the initiative in 1995 to improve the nation's domestic preparedness against terrorism. But the Congress has also contributed to the Executive Branch's problems. Over the past five years, there have been a halfdozen Congressional attempts to reorganize the Executive Branch's efforts to combat terrorism, all of which failed. None enjoyed the support of the Executive Branch. At least 11 full committees in the Senate and 14 full committees in the House--as well as their numerous subcommittees--claim oversight or some responsibility for various U.S. Programs for combating terrorism. Earmarks in appropriations bills created many of the Federal government's specific domestic preparedness programs without authorizing legislation or oversight. The rapidly growing U.S. budget for combating terrorism is now laced with such earmarks, which have proliferated in the absence of an Executive Branch strategy. The Executive Branch cannot successfully coordinate its programs for combating terrorism alone. Congress must better organize itself and exercise much greater discipline. The creation of a new joint committee or separate committees in each House is necessary to improve the nation's efforts to fight terrorism. The committee should have a substantial standing staff. The new National Office for Combating Terrorism must establish a close working relationship with the committee, and propose comprehensive and coherent programs and budget requests in support of the new national strategy. The new joint or separate committee should have the authority to dispose of the Executive Branch request and to oversee the execution of programs that it authorizes. For this to work, other Congressional authorizing committees with an interest in programs for combating terrorism must recognize the concurrent, consolidated authority of the joint or separate committee; and relevant appropriations committees must exercise restraint and respect the authorizing legislation of the new structure. We recognize that this task is no less daunting than the Executive Branch reorganization that we propose above, but it is no less needed. SPECIFIC FUNCTIONAL RECOMMENDATIONS The focus of the Advisory Panel continues to be on the needs of local and State response entities. ``Local'' response entities--law enforcement, fire service, emergency medical technicians, hospital emergency personnel, public health officials, and emergency managers-- will always be the ``first response,'' and conceivably the only response. When entities at various levels of government are engaged, the responsibilities of all entities and lines of authority must be clear. 1. Collecting Intelligence, Assessing Threats, and Sharing Information. The National Office for Combating Terrorism should foster the development of a consolidated all-source analysis and assessment capability that would provide various response entities as well as policymakers with continuing analysis of potential threats and broad threat assessment input into the development of the annual national strategy. That capability should be augmented by improved human intelligence collection abroad, more effective domestic activities with a thorough review of various Federal guidelines, and reasonable restrictions on acquisition of CBRN precursors or equipment. The National Office should also foster enhancements in measurement and signature intelligence, forensics, and indications and warning capabilities. To promote the broadest possible dissemination of useful, timely (and if necessary, classified) information, the National Office should also oversee the development and implementation of a protected, Internet-based single-source web page system, linking appropriate sources of information and databases on combating terrorism across all relevant functional disciplines. 2. Operational Coordination. The National Office for Combating Terrorism should encourage Governors to designate State emergency management entities as domestic preparedness focal points for coordination with the Federal government. The National Office should identify and promote the establishment of singlesource, ``all hazards'' planning documents, standardized Incident Command and Unified Command Systems, and other model programs for use in the full range of emergency contingencies, including terrorism. Adherence to these systems should become a requirement of Federal preparedness assistance. 3. Training, Equipping, and Exercising. The National Office for Combating Terrorism should develop and manage a comprehensive national plan for Federal assistance to State and local agencies for training and equipment and the conduct of exercises, including the promulgation of standards in each area. The National Office should consult closely with State and local stakeholders in the development of this national plan. Federal resources to support the plan should be allocated according to the goals and objectives specified in the national strategy, with State and local entities also providing resources to support its implementation. 4. Health and Medical Considerations. The National Office for Combating Terrorism should reevaluate the current U.S. approach to providing public health and medical care in response to acts of terrorism, especially possible mass casualty incidents and most particularly bioterrorism. The key issues are insufficient education and training in terrorism-related subjects, minimum capabilities in surge capacity and in treatment facilities, and clear standards and protocols for laboratories and other activities, and vaccine programs. A robust public health infrastructure is necessary to ensure an effective response to terrorist attacks, especially those involving biologic agents. After consultation with public health and medical care entities, the National Office should oversee the establishment of financial incentives coupled with standards and certification requirements that will, over time, encourage the health and medical sector to build and maintain required capabilities. In addition, Federal, State, and local governments should clarify legal and regulatory authorities for quarantine, vaccinations, and other prescriptive measures. 5. Research and Development, and National Standards. The National Office for Combating Terrorism should establish a clear set of priorities for research and development for combating terrorism, including long-range programs. Priorities for targeted research should be responder personnel protective equipment; medical surveillance, identification, and forensics; improved sensor and rapid readout capability; vaccines and antidotes; and communications interoperability. The National Office must also coordinate the development of nationally recognized standards for equipment, training, and laboratory protocols and techniques, with the ultimate objective being official certification. 6. Providing Cyber Security Against Terrorism. Cyber attacks inside the United States could have ``mass disruptive,'' even if not ``mass destructive'' or ``mass casualty'' consequences. During the coming year, the Advisory Panel will focus on specific aspects of critical infrastructure protection (CIP), as they relate to the potential for terrorist attacks. In our discussions thus far, we have identified several areas for further deliberation, including CIP policy oversight; standards; alert, warning, and response; liability and other legal issues, and CIP research. We will make specific policy recommendations in our next report. Areas of Agreement and Disagreement with the Report of The National Commission on Terrorism Mr. Chairman, the charters and objectives of the Bremer Commission and the Gilmore Commission are, for the most part, very different. The Bremer Commission focused on international terrorism. The Gilmore Commission's clear mandate is on domestic preparedness-deterring, preventing, and responding to terrorist incidents inside the borders of the United States. There are, nevertheless, several overlapping areas of interest between the two reports and the attendant findings and recommendations. Both panels agree on the increasing nature of the threat of international terrorism, including the potential for more attacks from international groups inside the borders of the United States. Both panels specifically agree that certain measures must be taken to improve intelligence collection and dissemination on terrorists, including:Repealing the 1995 Director of Central Intelligence Guidelines as they apply to recruiting terrorist informants Reviewing and clarifying, as may be indicated, the Attorney General's Guidelines on Foreign Intelligence Collection and the Guidelines on General Crime, Racketeering Enterprise, and Domestic Security/Terrorism Investigations Directing the Department of Justice Office of Intelligence Policy and Review not to require a process for initiating actions under the Foreign Intelligence Surveillance Act that are more stringent than those required by the statute Both panels agree that significant improvements must be made in the ability of intelligence and law enforcement agencies to collect, analyze, disseminate and share intelligence and other information more effectively. Both panels agree that there must be a comprehensive strategy or plan for dealing with terrorism, including the ways in which both the Executive Branch and the Congress develop and coordinate program and budget processes. Both panels agree in principal that the Department of Defense (DoD) and U.S. Armed Forces may have a major role in preventing or responding to a terrorist attack, especially one involving a chemical, biological, radiological or nuclear device. We likewise strongly agree that insufficient planning, coordination, training, and exercises have been developed and implemented for the possibility of major DoD and military involvement. The one area in which we disagree has to do with ``lead agency.'' The Bremer Commission suggests that a response to a catastrophic attack may indicate the designation of DoD as Lead Agency. While we agree that DoD may have a major role, we firmly believe that the military must always be directly under civilian control. As a result, we recommend that the President always designate a Federal civilian agency other than the Department of Defense (DoD) as the Lead Federal Agency. Many Americans will not draw the technical distinction between the Department of Defense-the civilian entity-and the U.S. Armed Forces-the military entity. Although the Department of Defense and every major component of that department have civilian leaders, the perception will likely be that ``the military'' is in the lead. This recommendation does not ignore the fact that the DoD, through all of its various agencies-not just the Armed Forces-has enormous resources and significant capabilities for command, control, communications, intelligence, logistics, engineer, and medical support and may play a major role in response to a terrorist attack, especially one with potentially catastrophic consequences. Those resources can still be brought to bear but should, in our view, always be subordinated to another civilian agency. Summary Mr. Chairman and Members of the subcommittee, the members of the Advisory Panel to Assess Domestic Response Capabilities for Terrorism Involving Weapons of Mass Destruction are convinced that the essence of its recommendations are essential to the national effort to combat terrorism: the promulgation of a truly national strategy; the appointment of a senior person at the Federal level who has the responsibilityimportantly, who can be seen as having the responsibility-for coordinating our national efforts; improvements in the way Congress addresses this issues; and the implementation of the functional recommendations dealing with: improving intelligence, threats assessments, and information sharing; better planning, coordination and operations; enhanced training, equipping, and exercising; improving health and medical capabilities; promoting better research and development and developing national standards; enhancing efforts to counter agroterrorism; and improving cyber security against terrorism. With the exception of the one dissent on the issue of a lead role for the military, our recommendations are as firmly unanimous as we believe that they are reasonable and specific. This is not a partisan political issue. It is one that goes to the very heart of public safety and the American way of life. We have members on our panel who identify with each of the major national political parties, and represent views across the entire political spectrum. We urge Members on both sides of the aisle, in both Houses of the Congress, to work with the Executive Branch to bring some order to this process and to provide some national leadership and direction to address this critical issue. Thank you again for this opportunity. Chairman Kyl. Thank you very much, General. There is so much that we will get into as we pull pieces out of your report that we think might help us to legislate in the area. Let me first of all address something that you said because I think it is recognized by all of us here in Congress. We have talked about it, that our failure to organize Congress in a coherent and focused way on the problem is somewhat a mirror image of our view that the administration hasn't focused very well either. It might be the fact that we have the same kind of operational issues; that is to say, our appropriations people are the operational group for funding. The Judiciary Committee, of which this is a subset, is the operational group with respect to changing the law and evidentiary gathering or sharing, and so on. The Intelligence Committee, of which I am a member, has certain other operational functions. However, that isn't to suggest that we couldn't create a select Committee along the lines of the Intelligence Committee which would pluck people from each of those operational committees to provide the same kind of oversight that you are suggesting would be appropriate at the executive level, and I think that is something that we are going to try to pursue. Let me just ask you this general question to begin. When people think of trying to prepare for terrorism, we divide the issue into two parts; No. 1, preventing it, the intelligence- gathering, the other kinds of things that we will talk a little bit more about, and then the aftermath, the response. As to that second aspect of it, there seems to be a sense, at least in the people that I have talked to, that while it is inevitable that there will be terrorist actions here in the United States, and while we can generally try to prepare at least the first responders in our largest communities on how basically to respond to these kinds of emergencies and perhaps even given them some equipment that would be unique to the kinds of challenges they might fact, the reality is that the country is so big, the opportunities so great in so many different places that it would be impossible to adequately prepare in every potential community for every potential threat. Therefore, there seems to be just sort of a general throwing up of the arms of what can we really do. How do you respond to that sense of almost a sense that we really can't do much about it if, in fact, the terrorist event occurs, except to have some general agency in Washington that would direct the response of the local entities to the extent they needed help? General Clapper. Well, sir, I think there are capabilities already resident in the Government which can be embellished, coordinated better, where we can be certainly in a better posture to respond. I think more can be done from an intelligence perspective in the context of prevention. A lot of great work is going on as we speak. I think the CIA and the FBI--I discussed this earlier today--have made giant strides in their recognition of the fact that the jurisdictional boundaries are not always respected by terrorists. If, in fact, our ability to detect and preempt an attack fail, then I think there is more that can be done to respond. What we have in mind here are exercises, training, equipment, standards, medical coordination. There is a lot of just sort of grunt work that if the commitment is made to do it could be done which would put us in a better posture to respond. To say that if we spend ``x'' billions of dollars or take some sort of administrative action, that that will provide an iron-clad guarantee to the citizenry that we will never be confronted with a terrorist attack is obviously unrealistic. But we can certainly do more to posture ourselves to detect the potential for terrorism, acknowledging the fact that in the context of terrorism we are always going to be dealing with ambiguous intelligence, but also be prepared to respond. Now, the reason this is important, in my view, is because if we do that, that in itself serves as a form of deterrence. If we have a capability after the fact, for example, the forensic capability to determine a return address, to use the phrase, of a terrorist and the terrorist knows that and that we will, if we determine who did it, reach out and touch, that has a very compelling message and, as I say, serves as a deterrent. So I think there are things we can do to put ourselves in a better posture, but to say that that will ensure that we are never attacked, no, sir, we can't do that. Chairman Kyl. Well, I think there is--I don't want to use the word a sense of fatalism, which is what I started to say before, but a sense that while you can train to a certain level to respond, once it has gotten to that point our abilities are significantly limited. That is why I tend to focus, plus the fact that this committee's jurisdiction is more focused on the prevention side, the intelligence-gathering, the intelligence- sharing, and so on. I would like to get to some of your recommendations with respect to sharing of intelligence which you just alluded to between the FBI and the CIA. In this country, of course, the FBI is much more limited in what it can do than the CIA would be in gathering intelligence abroad, for example, and that puts some limits on what the FBI feels it can share, particularly if it has got an ongoing investigation in terms of what it can share with the CIA or with other agencies. Would you speak to that and the recommendations of the panel? General Clapper. Well, sir, I don't know that I have anything new and profound and dramatic, other than to endorse what is already going on. An example is the formation and organization of the Counterterrorism Center, which is an intelligence community entity which involves all the intelligence community agencies, to include the FBI, which is a structural mechanism to ensure visibility and coordination between and among the intelligence agencies. The important thing to me is that I think we have to be mindful and sensitive to the legal boundaries between the purview of the FBI in collecting domestic intelligence and the purview of the intelligence community in collecting and using foreign intelligence, and the relationship of those two activities as it applies to protection of our civil liberties, et cetera. So I think those sensitivities have to be attended to, but at the same time we need to ensure that the information baton is not dropped as it is handed off in the case of terrorism which originates overseas from a foreign source but is reaching out and touching us domestically in the United States. I think the mechanisms and the structures and organizations and the processes that the FBI and CIA have come up with go a long way toward doing that. An issue where I think we can improve is in the area of dissemination. I think there are mechanisms that we can establish whereby certain State and local officials in certain conditions should be afforded access to any of this intelligence if it affects their jurisdiction. In my active duty days as an intelligence officer, I was involved in or presided over many, many intelligence exchanges with our friends and allies. It seems to me if we can build mechanisms to do that, we can certainly build mechanisms whereby intelligence can flow to, say, State Governors or the senior emergency planner in each State or other senior fire, rescue, et cetera, people who need to have access to that kind of information. Now, if that entails some sort of a special classification system or whatever, then that is fine. We should do that. We have it within our capability and it is strictly essentially a policy issue. Another thing I have been a proponent of is capitalizing on a system I think you may be familiar with, sir, in the intelligence community called InteLink, which is roughly analogous to the intelligence community's very own internet. I have been a proponent for exporting this same kind of thing to the so-called first responder community on a selected capability. One of the recurrent themes that we have heard in our dialogs with State and local people over the last couple of years is a hunger or thirst or requirement for threat information, and we have made some recommendations on how we think that can be effected. So I think in the areas of coordination between the two agencies, focusing more on the analytic capability, and most importantly of all, I think, is disseminating information, where appropriate, to selected State and local officials. Chairman Kyl. Let me just ask you two more questions here, both related to that. Last year, Senator Feinstein and I both cosponsored a bill that would have clarified current law regarding the ability of the FBI and the Justice Department to share certain criminal wiretap information pertaining to terrorism with the CIA and other Government agencies. Did the Commission discover any instances where law enforcement information was not shared due to legal interpretations about the FBI and Justice Department's ability to share information with other Government agencies? General Clapper. Sir, I can't off the top of my head come up with specific cases in point. I will tell you, though, that we heard in the case of the application of the FISA law where it was the feeling of some that although the requests for FISA authorizations were not turned down, the bar was set pretty high for them to even be entered into in the first place. That is the genesis of the recommendation that I mentioned earlier in my oral statement about not going beyond the provisions of what is in the statute. I might also comment on the DCI guidelines that were promulgated in about the 1995 timeframe. I was a member of the Downing Assessment Task Force that investigated the Khobar Towers bombing in 1996, which parenthetically was an epiphany experience for in terms of when I actually got religion about terrorism and what it can do. I discovered a whole host of both administrative and legislatively derived restrictions and rules on the kinds of people who can be recruited to collect information. Each one of these is well-intended and probably came out of some abuse, at least as viewed by some, of engaging some nefarious person to collect information on nefarious activities. The impact, though, on the collector force, if I could call it that, is kind of chilling because of this litany of restrictions that apply to the collection of foreign intelligence. So the set of recommendations we made about looking at all these rules and regulations as they pertain to the collection of information on terrorism--both we and other panels, particularly Ambassador's panel, have strongly urged review and in some cases relaxation of some of these strictures. Chairman Kyl. Let me just follow up with a question on that precise point. Former Director Woolsey, a member of that panel, drew the distinction between recruitment of agents against another government and recruitment of agents or sources with respect to terrorism. That commission didn't recommend a relaxation of the standards as opposed to recruitment against another government, but with respect to terrorism made the point that you are dealing with, by definition, a group of people who have nefarious backgrounds and those restrictions should be relaxed. Do you generally concur with that personally and is that the view of the panel? General Clapper. Yes, sir, I do, and it is the view of the panel. I would cartoon this a little bit, but I have said in other fora that if you want to restrict yourself to the likes of Mother Teresa and that is who you are going to recruit information from, then that will certainly shape the kind of information you get. We have to be prepared to deal with very nasty, nefarious people who by definition do bad things. And if we want to have any hope of gaining insight into what they are doing, then we are going to have to take the risk that we will, in fact, engage with some pretty nasty people. So the short answer is yes. Chairman Kyl. Did your panel acquire any information which would be useful to share with us in a closed setting, any specific examples or specific conversations with people that would be useful to us that we could talk about? General Clapper. Yes, sir, we could, and I would recommend, to take advantage of this dual membership of Ambassador Jerry Bremer, that he would be involved in those discussions. Chairman Kyl. I think we would like to call upon you to get your advice on that because when Senator Feinstein and I put together our bill at the end of last year, we originally had that recommendation in the bill and due to opposition from at least one member of this committee, that provision was dropped. So I think we need to hone in on that. There is a lot more I could get into, but I really want to hear from our second panel, as well, and I don't know when we are going to be having the next vote. So let me offer an opportunity for you to add anything else you would like to add in writing. We will leave the time of this hearing open for, say, 3 days should you want to do that or should any member of the Subcommittee wish to ask you a question and have you respond to it. I really appreciate your testimony here, and we will be looking forward to getting back with you and Governor Gilmore when we begin to put our legislation together. Thank you very much, General Clapper. General Clapper. Thank you, sir. Chairman Kyl. Let me ask our second panel if they would please come forward. As I said earlier, our second panel is made up of distinguished scholars: Dr. Anthony Cordesman, of the Center for Strategic and International Studies, and Dr. Yonah Alexander, of the Potomac Institute. Both of you gentlemen bring a wealth of expertise on the subject of terrorism and I personally thank you very much for your willingness to appear before the subcommittee. Dr. Cordesman, let's begin with you. As I indicated earlier, we will make your prepared remarks a part of our record, and if you would like to summarize those remarks without any time limitation I would be happy to receive that at this time. STATEMENT OF ANTHONY H. CORDESMAN, ARLEIGH A. BURKE CHAIR IN STRATEGY, CENTER FOR STRATEGIC AND INTERNATIONAL STUDIES, WASHINGTON, D.C. Mr. Cordesman. Thank you very much, Senator, and I thank the Subcommittee for the opportunity to testify this afternoon. I do have some prepared remarks and I appreciate having them included in the record. I know you have a lot of questions, so let me begin with a few brief introductory remarks. In the work that we did on this subject in the CSIS, we encountered a number of problems that I think you are going to have to address over the next few years. One was the decoupling of asymmetric warfare and terrorism. This was much less apparent in the Department of Defense than in the other branches of Government, but if you look at the record, you find again and again the conclusion is drawn that because today's terrorists are not supported by states, they will not use biological or nuclear weapons or use advanced technology effectively in ways which could saturate response capabilities at the Federal, State, and local level. But as you mentioned at the beginning of this hearing, we are also dealing with states like North Korea, Iraq, and Iran, and there will be more in the future. And I think by sizing so much of our response effort around terrorists without state support, we may risk creating a response and intelligence effort which deals with the wrong threat and perhaps the less important threat. This permeates a lot of what goes on in individual civil agencies. It is striking that we are spending some $11 billion trying to deal with the threat of counterterrorism on the record, but when you disaggregate that money, a good $7 billion of it goes to the physical protection of Federal facilities and of U.S. military overseas, and the actual budget going into dealing with counterterrorism is often very limited. I think one thing that is also striking is the tendency to freeze our perceptions around today's technology. We do not at this point in time face a growing threat statistically in terms of the number of attacks or casualty levels, but we do face a radical process of technological change. One aspect of this is attacks on information systems, the growing vulnerability of a more integrated infrastructure. A key area is the risk of biotechnology and biological weapons, which is an area where many countries, and indeed many well- organized terrorist movements in the future may be able to use advances in biotechnology or food processing equipment or pharmaceuticals, to use methods of attack which frankly we are not even preparing for because the biological threats we deal with are the ones fundamentally we already understand. We also face the problem over time that nuclear weapons or nuclear devices may become more available. We have not really looked at those risks. There is another problem that strikes me. It is so easy to talk about strategy and organization that often we do not look at the problem of vulnerability. Yet, vulnerability is changing along with the methods of attack. Our vulnerability in terms of information systems is one example. Our vulnerabilities in terms of specific types of biological attack and nuclear attack is another. We tend to warn in very broad, generic terms about methods of attack, but our data on weapons effects often date back to the early 1970's. In some cases like biological weapons, I can recognize them because I was then the DRPA program manager for biological weapons, and it is very disturbing to see them repeated some 30 years later when at least then we knew how uncertain and unreliable many of these data were. If we tailor our response around that kind of planning, we risk providing the wrong templates and the wrong models at the Federal, State, and local level. Last, let me make a point based, I think, on all too much experience in Washington. I think you yourself can remember previous calls for strategy and legislation that we needed to have a national strategy document, and that there should be a Department of Defense strategy document. Well, those documents are issued every year. No one knows what they mean, no one uses them, no one can figure out what their impact is on a single program or a single area of our budget. We have had a drug czar, and whether or not that has really shaped effective programs is, to put it mildly, debatable. The point I would raise in closing is this: Unless you really concern yourself about developing effective future-year programs, program budgets, clear ways to assess the effectiveness of programs in intelligence, defense, and response, both in terms of foreign intelligence and the fusion of law enforcement, we risk doing what we always do in Washington. We mandate another strategy document; we put someone in charge of something or we create at least a new office somewhere in the Federal Government. And 2 years later, none of us can figure out what we accomplished. The old routine in Washington that you have to follow the money is just as important in intelligence, counterterrorism, and dealing with weapons of mass destruction as it is in any other area. Thank you. [The prepared statement of Mr. Cordesman follows:] Statement of Anthony H. Cordesman, Arleigh A. Burke Chair in Strategy, Center for Strategic and International Studies, Washington, D.C. ``Terrorism'' is a topic that arouses so much fear and revulsion that there is a natural tendency to ``cry wolf,'' and to confuse the potential threat with one that is actually occurring. Similarly, any discussion of the new threats posed by weapons of mass destruction and information warfare involves threats that are so serious that there is an equal tendency to respond like Chicken Little and worry that the sky is falling. This scarcely means we should not be worried about terrorism. The potential threats to our society are all too real. Democratic societies are inherently vulnerable. They place few controls over their borders, their citizens, or foreigners who have actually entered their territory. This is particularly true of the US, and there are many vulnerable points in our social structure and economy that foreign governments and extremist movements, domestic extremists and the mentally ill can attack. There equally are good reasons to be increasingly concerned about new forms of asymmetric warfare and terrorism, and the use of new and more lethal forms of technology. Yet, there are equally good reasons to be careful about exaggerating the threat, and being careless about the way we define it. We can improve intelligence, defense, and response in many ways. We can anticipate future risks, even if we cannot predict the future. We do, however, have limited resources and competing priorities, and we face daunting uncertainties about the nature of the problem terrorism poses to our security. Crying Wolf Meets Chicken Little It is not easy to characterize the threat - at least in unclassified terms. There are grave weaknesses and shortcomings in the statistics that the US government makes publicly available on terrorism. We do not have an adequate picture of the number, type, and seriousness of domestic incidents, and it is often difficult to separate out criminal activity, threats, actual action by domestic terrorists, and the actions of mentally disturbed individuals. The data the US government publishes on international terrorist activity also has many defects. Much of it is highly over-aggregated, and does not provided anything approaching sophisticated pattern analysis. We stress international terrorism, but ignore largely foreign domestic violence that may generate terrorism in the future. We tend to demonize known terrorist groups, but ignore or underplay the capability of foreign states to conduct covert operations or use proxies to do so. We exaggerate the existence of foreign networks, such as Usama Bin Ladin, and understate the risk that individual terrorist elements may lash out against us in ways we do not expect. Much of our analysis is grossly ethnocentric: It assumes that we are the key target of attacks which generally grow out of theater tensions and conflicts where we become a target--if at all--because of our ties to allies and peacekeeping missions. The fact is, however, that if one looks at the recent patterns in terrorism, the US is no more subject to such attacks today--whether measured in numbers of incidents or casualties--than in the past. The net threat also remains a small one in actuarial terms. The word ``terrorism'' may trigger a great emotional reaction, but actual casualties and losses are almost actuarially insignificant. Far more people die of traffic accidents on a bad weekend than dies annually of terrorism. The idea that the end of the Cold War has somehow created a more unstable and violent world is a myth. The world is, has always been, and will remain a violent place. According to the Department of Defense, there have been some 20-30 serious regional conflicts and civil wars going on every day of every year since the end of World War II. We did indeed relate many of these conflicts to the Cold War while it was going on, but in truth, most such conflicts dragged in the superpowers and were not caused by them. With the exception of the Balkans, we do not see new major regional patterns of violence we can relate to the Cold War. In fact, the end of the Cold War has simply allowed us to focus on the broad realities of ongoing global violence rather than a single threat. We need to be equally careful about exaggerating the new trends in technological vulnerability. Some of these trends are very real, but our critical infrastructure has always been vulnerable. Nature and chance have shown that repeatedly, and studies done back in the 1950s and 1960s showed how limited attacks--then postulated to be by attackers like the Soviet Spetsnaz--could cripple our utilities, paralyze critical military installations, or destroy our continuity of government. We have always been vulnerable to a truly well-organized terrorist or covert attack. The fact that there are real wolves in the world, and that the sky can fall--at least--to the extent that far more serious damage is possible than we have ever suffered from in the past--is not a reason to cry wolf or play the role of chicken little. The Changing Face of Terrorism and Technology In saying this, I am all too well aware that no victim of terrorism, or their loved ones, are going to be consoled by the fact that they are a relatively small statistic. The political symbolism of successful terrorist attacks is also often far greater than the casualties, and even an empty threat can help to undermine the fabric of social trust upon which our democracy is based. Equally important, the fact we have not yet encountered an attack in the US as serious as the strikes on our Embassies in Kenya and Tanzania, or as potentially threatening as Aum Shinrikyo, is in no way a guarantee for the future. Rather than exaggerate current threats, we need to be very conscious of the fact that the nature and seriousness of the threat can change suddenly and with little warning. Let me give some specific examples: At present the US government focuses most of its intelligence analysis, defense planning and response, around a relatively narrow definition of terrorism. It focuses on independent terrorist groups, and not on the threat states can pose in asymmetric warfare. Yet, it is states that have the most access to weapons of mass destruction--particularly biological and nuclear weapons--and which have the most capability to launch sophistication attacks on our information systems. We face current potential threats from nations like Iran, Iraq, Libya, and North Korea. We can face new threats as a result of our regional alliances and commitments every time a major conflict, crisis, or peace-keeping activity takes place. Acts can come in the context of over asymmetric warfare, covert state-launched attacks, or the use of terrorist and extremist groups as proxies. Attacks can be made on our allies, our forces and facilities overseas, on US economic interests, or on our own territory. They can involve attackers with very different values, escalation ladders and perceptions and who lash out in a crisis. This is also one area where the world has really changed since the end of the Cold War. We have always been a natural target because of the sheer scale of our global commitments and interest. Now, however, there is no Soviet Union our potential opponents can turn to, and they have no way of offsetting our advantage in conventional warfare. We need to bridge the gap between the way in which the US government prepares for asymmetric warfare and to deal with the threat of terrorism--not only in terms of intelligence analysis, but our defense and response planning for Homeland Defense. We also must include intelligence analysis of capabilities and not just intentions. History shows us that the fact that foreign countries and leaders are deterred, or show restraint today, is no guarantee they will behave the same way under crisis conditions. We need to ensure the effective fusion of intelligence community efforts, military planning, and civil defense and response planning. We should not leave any gap where the Department of Defense seriously plans for large-scale nuclear and biological attacks and civil Departments and Agencies focus on relatively lowlevel conventional explosives and limited chemical attacks. We need to be equally careful not to compartment our analysis of information warfare so that the Department worries about true information warfare while civil departments and agencies worry about hacking and cracking at much lower levels of threat. Finally, we need to consider the full implications of our call for missile defense, and of our counterproliferation activities. The more we succeed in blocking overt threats, the more we will drive states towards finding alternative means of attack. It makes little sense to close the barn door and leave the windows open. We need to focus on key areas of technological change. We cannot yet predict what technical capabilities hostile states, extremists and movements will acquire over the next 15-25 years. We can, however, predict that there are several major areas of technological change that can radically alter the effectiveness of asymmetric and terrorist attacks and which require care attention from the intelligence community: The vulnerability of our critical infrastructure is changing: Our financial systems, communications systems, utilities, and transportation nets are far more tightly integrated than in the past, and we rely far more on national and regional systems, rather than large autonomous local ones. This reduces vulnerability in some ways, but increases vulnerability in others. Systems netting and integration involves shifts in technology that need careful examination. Information systems create new vulnerabilities: It is all too possible to grossly over-exaggerate our dependency on information systems, their vulnerability, and the difficulty in finding work-grounds, and reconstituting critical systems. Many statements are being made that have no real analytic underpinning and the importance of given systems is poorly researched. The Internet, in particular, is being glamorized to the point of absurdity. Nevertheless, information systems have become part of our critical infrastructure, and virtually invisible cyberattacks may prove to be more lethal in some cases than high explosives. New physical methods of attack, such as EMP weapons, may also be becoming more practical. Chemical weapons and toxins are changing: It is impossible to discuss fourth generation chemical weapons in an unclassified forum, but the threat has been openly raised by Department of Defense officials. The technology and equipment for older types of chemical weapons is also proliferating at a civil level and becoming steadily more available to governments, extremist movements, and individuals. Biological weapons are changing: It has been possible to make dry storable biological weapons with nuclear lethality since at least the late 1950s. Advances in biotechnology, food processing equipment, pharmaceuticals, and other dual-use facilities and technologies are also proliferating at a civil level and becoming steadily more available to governments, extremist movements, and individuals. These problems are compound by the rapid spread of expertise and equipment for genetic engineering. The end result is that the technology of attacks on humans, livestock, and crops is becoming steadily more available, and in forms which not only can be extremely lethal and/or costly, but difficult to attribute to a given attacker. The availability of nuclear weapons may change: It is far too soon to say that broad changes are taking place in the nuclear threat. Nevertheless, the break up of the FSU, and proliferation in India and Pakistan, does create a growing risk that fissile material may become more available for ``dirty'' and low yield weapons, and the knowledge of how to make crude nuclear devices, handle the high explosives, provide neutron initiators, and deal with the complex triggering problems is also spreading. The risk from radiological weapons may change: Radiological weapons have not been particularly attractive options in the past. There is, however, a steadily growing mass of nuclear waste, and some studies indicate that the long-term genetic effects of such weapons may be more serious than their short- term effects. The ability to exploit the media and psychological dimension of new technologies has grown: Far more is involved than body counts, physical damage, and economic loss. Even the most limited CBRN or information attack on the US or US targets has great political and psychological impact both within the US and overseas. The spread of mass communications, and use of tools like the Internet and Satellite TV, also increases the impact of attacks. It is all too easy to exaggerate today's threat in each of these areas, but it is equally easy to exaggerate the difficulties that individual terrorist movements and extremists now face in using such technologies. There is a clear need to examine how states can use such weapons covertly or through proxies, and forecast how widely spread each of these threats is likely to become in the future. We need to reexamine the problem of vulnerability. We cannot hope to accurate predict our attacker or their means of attack, but we can do much to improve our analysis of vulnerability and shape our intelligence and planning effort around the need to detect threats to our greatest vulnerabilities. To be specific, there are several areas of vulnerability that need special attention: We need to conduct and systematically update our analysis of the vulnerability of our critical infrastructure, including financial systems, information systems, communications systems, utilities, and transportation nets and make sure our intelligence can focus on potential threats. We need to reexamine our vulnerability to the chemical threat in the light of fourth generation weapons, and the growing ease with which states, extremists, and terrorists can obtain them. We need to rethink the risk of biological attack: We need to look beyond the risk of the limited use of crude, long-known weapons and toxins, and assess the extent to which genetic weapons are increasing our vulnerabilities. We also need to look beyond single agent non-infectious attacks on human beings, and consider multiple agent attacks, infectious attacks, and/or attacks on our agriculture. We need to reconsider the cumulative risk of covert or terrorist nuclear attack: It still seems unlikely that any state or terrorist movement could both acquire a nuclear device in the near future, and be willing to take the risk of using it. The cumulative risk over time, however, is sufficiently great to justify more analysis of our key vulnerabilities. It is important to note that the US intelligence community and Department of Defense is already addressing many of these issues, as is the National Security Council and a broader federal Homeland defense effort. At the same time, these are all areas where Congressional oversight can play a major role in assessing the quality of the intelligence effort and the broader effort within the Executive Branch. other problems in intelligence Let me close with several comments focused on the problem of intelligence coverage of terrorism and asymmetric warfare. It has been some years since I was directly involved in intelligence planning and assessment, but there are some things that never seem to change: It is far easier to call for strategic warning than to get it, or get policymakers to, act on it of they do receive it. We can always improve our analysis of warning indicators. In fact, the intelligence community does this all the time. We cannot, however, count on any method of analysis sorting through the constant ``noise level'' in these indicators and providing reliable probability analysis or warning. Furthermore, we cannot count on policymakers reacting. We should improve our analysis, but no system of warning, defense, and response can rely on strategic warning. Moreover, it is my impression that even when the intelligence community does make improvements, decision-makers choose to ignore unpopular or expensive warning or demand that the community free them from the burden of ambiguity and uncertainty. It is always easy for decision-makers to demand prophecy and attack intelligence analysis when they don't get it. This may explain why there are so many calls for improved strategic warning and so few calls for improved decision-maker response. It is far easier to call for better HUMINT than it is to get it. I have listened to three decades of calls for improved human intelligence. In practice, however, it remains as underfunded as ever, and partly because it is so difficult to make cost-effective investments and to be sure they pay off. Far too often, successes are matters of chance and not of the scale of effort. Yes, we should improve HUMINT--where we can show there is a feasible plan and a cost-effective path for success. However, calling for improved HUMINT all too often is both a confession of the severe limits of National Technical Means and a substitute for serious planning and effort. New intelligence toys are not new systems, and systems always have limitations. The other side of this coin is that we probably face growing limitations in our imagery and signals intelligence capabilities in many of the areas that affect our vulnerability to asymmetric warfare and terrorism. These are not a problem that should be addressed in open testimony, nor can I claim that my background in these issues is up-to-date. However, it is far from clear that some of the extremely expensive improvements we plan in National Technical Means will really pay off in the areas we are discussing today, or that some of the new tactical detectors and sensors being developed are integrated into effective systems. There may well be a need for independent net intelligence assessment of our probable future capabilities in these areas. We need more focus on weaponization, weapons effects, and different kinds of vulnerability. Proliferation and changes in information warfare are creating major new challenges in how the community should assess the weapons available to state and extremist actors. This is particularly true of biotechnology and information warfare, but it also involves the risk of ``dirty,'' unsafe, and unpredictable nuclear weapons. Most weapons effects analysis is badly dated, and related to use against military targets. Weaponization analysis often does not address the acute uncertainty that may occur in weapons effects, and most vulnerability analysis is now dated. The technical issues of what attackers can , really do, the problem intelligence may face in characterizing their resources, and the risk of combinations of new methods of attack--combining information systems and CBRN attacks, cocktails of biological weapons, etc. needs more attention. We need an effective bridge between foreign intelligence and law enforcement that responds to the scale of the emergency. We now have a wide range of barriers between foreign intelligence collection, surveillance of US citizens and activities within the US, military operations, and law enforcement activities. In general, these involve useful and necessary protections of American civil liberties. If, however, the threat rises to the level of a tangible risk an attack may use effective biological weapons, use nuclear weapons, or cripple our critical infrastructure, we need some way to react to a true national emergency that eliminates as many of these barriers as possible, and which does so at the state and local level and not just the federal one. We have long talked about the need for the ``fusion'' of intelligence and operations in warfighting. We may well face a similar need in Homeland defense, and the ``fusion'' of foreign intelligence and law enforcement activity will be critical. One final point. Whenever new threats emerge, there is a natural tendency to call for new organizations, czars, and interagency structures. It is far easier to say that a new organization is needed than to get into the nitty gritty of actually having to improve existing capabilities or develop new ones. A set of problems involving this many uncertainties and new skills may or may not require new federal organizations, and new organizations within the intelligence community, Ultimately, however, what improving our capability to deal with terrorism and asymmetric warfare requires most is resources and improving collection, analysis, and fusion at sophisticated technical levels. The real issue is one of how to improve depth, give the community the right perspective, and how to improve ``quality,'' and not how to change organization or leadership. This requires both serious planning and a serious program and supporting budget. Changing the name on the door is almost mindlessly easy, but changing the capability within is what counts. Chairman Kyl. Thank you very much. Dr. Alexander? STATEMENT OF YONAH ALEXANDER, SENIOR FELLOW AND DIRECTOR, INTERNATIONAL CENTER FOR TERRORISM STUDIES, POTOMAC INSTITUTE FOR POLICY STUDIES, ARLINGTON, VIRGINIA Mr. Alexander. Thank you, Mr. Chairman. I appreciate the opportunity to appear today before this subcommittee. My only regret is that I don't have a written paper because I was out of town. But with your permission, I would like to submit a formal paper at a later date. Chairman Kyl. Absolutely. Mr. Alexander. In addition to that, I would like to mention that as an academician who works at a think tank and at a university center for terrorism studies, we have a great deal of publications that we would like to report to you about and to share with your staff, such as the new publication on Bin Ladin, on cyber terrorism, on super-terrorism, American perspectives, and so on and so forth. If we may submit them to your staff, we would certainly appreciate that. My intention basically is to make some preliminary remarks related to the threat and response. I fully agree with Tony Cordesman on some of the points he made because I think, No. 1, we have to learn lessons at history and look specifically at the nature of the threat. Now, we are discussing super- terrorism, biological, chemical, nuclear, cyber, but I would like to submit that even a very primitive kind of terrorism works and it is attractive, it is effective, and achieves a number of results. We can go all the way back to the first century or to the 11th and 12th centuries, the Middle East, when they used primitive methods, but they were able to intimidate the Crusaders, for example, in the Middle East. So I think there are some lessons from history that we can take into account. If we look at the situation today, obviously when we talk about contemporary terrorism, we talk about the new scale of violence both in terms of threats and responses. We are discussing the internationalization and brutalization of modern terrorism which actually is developing a new age of terrorism and super-terrorism with very serious implications for national, regional, and global security concerns. I would like to underscore specifically about five dangers that we have to take into account. One danger is to the safety and welfare and rights of ordinary people. The second danger is to the stability of the state system the way we know it. The third is to the health of economic development. The fourth is to the expansion of democracy, and the fifth perhaps to the survival of civilization. By that I mean the worst is yet to come; it is not if, but when. Therefore, ensuring the safety of the citizens at home and abroad will continue to be every government's paramount responsibility in the coming years. If I may look at the calendar of history, I would like to remind the Chairman and members of the Subcommittee that 30 years ago there was a bombing right here in the U.S. Senate perpetrated by the Weather Underground. And then 13 years ago, in Iraq, we found that the Iraqis used chemical weapons against the Kurds. And 6 years ago, we had a glimpse of the future when the Aum Shinrikyo used sarin gas in Tokyo. Now, in 1995 I had the privilege, with my colleague Dr. Ray Klein from the Center for Strategic and International Studies, to prepare a study on state-sponsored terrorism for the Subcommittee on Security and Terrorism, chaired by Senator Jeremiah Denton. The question arises, what is new, and if you look at the situation in those days and the situation today, of course, at that time the Soviet Union perpetrated terrorism. Today, the Soviet Union is a victim of terrorism, as we have seen in the past few days. Nevertheless, I think we cannot dismiss state-sponsored terrorism in the coming months and years. Although there is a study of the CIA for the year 2015 indicating that the involvement of states is going to be reduced, nevertheless we have to take into account some states that can be labeled as failure states or states that are being exploited by the terrorists. So therefore what I am really suggesting is that we have to look at both state-sponsored terrorism and sub-state terrorism, the freelancers, those who are able to initiate terrorism at a very low cost and cause a great deal of damage to our society. Therefore, I think the international community, and particularly under the leadership of the United States, must take whatever steps are necessary in order to reduce the risks. Again, it is not a question of recommendations of committees and commissions. I know that some of us were involved over the years working with some of these groups. Nothing is wrong with specific recommendations. The problem is really implementation of the recommendations, and we have to move step by step, not dramatically or drastically change the system. Therefore, I think every segment of the community can play a role, not only the Government, not only Congress, but the community in general. And I refer to the media, I refer to religious organizations, to the educational structure, and so forth, and together I think we can defeat the terrorists and secure our value system. I will stop here and be open to questions. Chairman Kyl. Thank you very much. Both of you have commented on the need to concern ourselves with cyber attacks, and that seems to me to be a somewhat overlooked potential threat because it is not just against the Government, it is not just against our defense and national security capabilities, but also against the society at large, which then also has a spillover effect against national security. What, in your view, should the U.S. Congress be doing to enhance our ability to deal with this problem of cyber attack, especially if we are to, as you say, Dr. Cordesman, size it to the state-sponsored terrorism threat, because clearly that would be the ultimate degree of cyber attack even though it might be coming from some group far smaller than state- sponsored? What could the Congress do to help begin to prepare us to deal with this threat? I will start with you, Dr. Cordesman, and then Dr. Alexander. Mr. Cordesman. Let me give one example. In the previous administration, John Hamre issued a directive in the Department of Defense that no critical system be hooked up to the Internet. One of the problems is that we right now are spending most of our critical infrastructure protection money trying to protect the software and entry into the systems, not to create systems which close out outside attack because they are truly critical. We, in general, do not have adequate standards. It has become clear, for example, that within the Federal Government no department as yet can police itself. To the extent there have been successful audits of cyber defense, they have been done by the General Accounting Office. And the moment the General Accounting Office does not repeat the audit, the department generally goes back to failing to protect its systems. But more than that, you do not see an effort to reduce vulnerability, to ensure that you can reconstitute the system rapidly, that if there is a really major and successful attack, there is some alternative. Now, this I suspect is going to require legislation and regulation. Departments are not going to spend money that is not appropriated and they are not going to perform functions with money that is appropriated unless they are required to. But the issue, I think, is broader than that. We can't provide any kind of warning or leak-proof system in cyber defense, and that means that critical industrial systems also have to be designed so that their vulnerability is limited, rather than trying to create firewalls or infinite layers of defense. There have to be backups. There have to be real tradeoffs where people understand that there is a liability for failing to protect these systems. At present, it is just the reverse. All of the market forces say that you do the absolute minimum here because there is no reward. You are not going to get more profit. Nobody is going to congratulate you until you come under attack, if then. Even insurance companies really are not regulated to require effective cyber protection or effective standards be met. Now, I hate to say that in any area the solution may be better law and better regulation, but here it is very difficult to see what market forces lead companies to prepare themselves unless there is a requirement that this be one of the rules of business. Chairman Kyl. So I take from that three basic recommendations: greater development of separate systems which are not tied to the Internet, a regulatory environment in which insurance would drive the hardening of these sites, and an ability to reconstitute systems immediately, with perhaps some Federal legislation and appropriate to achieve that. Mr. Cordesman. Senator, I would add one more. I think it is absolutely critical that you honestly assess vulnerability. In a lot of cases today, people confuse the noise level of cyber attack with something serious, or the fact that cyber crime has replaced conventional crime is somehow seen as if this was a national threat. ell, criminals will always be with us, systems will always fail, and teenagers will always be teenagers. We have not sorted out real vulnerabilities from the noise level of technological change. A good example is what happens every time there is a new virus. Somebody costs it several hundred million dollars, and this gets into the papers and everybody repeats the figure. But virtually all the time, when you really look at it, there was almost no economic cost; people did business the next day. This gross exaggeration of low-level threats and indifference to the issue as serious information warfare is as much of the problem. Chairman Kyl. Thank you. Dr. Alexander? Mr. Alexander. I think fundamentally it is really the question of perception of the threat, because here we are talking about the blessing of the Internet to connect the entire world. On the other hand, unfortunately, it is also a curse, as we know, used by terrorists as propaganda and psychological warfare. It is used to communicate messages and to train people how to make bombs--in fact, one doesn't need to go to a training camp because he can get all the information on the Internet--and then for operational missions, as we have seen time and again. Now, the question is really now can you strike a balance between the security concerns and civil liberties. I think this is a very important issue, and therefore there is a need not only for Government--we are talking about the role of Congress or the role of the Pentagon to stop the penetrations, and so on and so forth--I would like to submit that this is really a partnership of the Government and industry and academics and the public in general, because each segment of the community has a stake in this particular issue. Again, it comes back to the question of perception because the American people today, I think, are confused about what is terrorism. Is it a criminal act? Is it low-intensity conflict? Is it an asymmetrical threat? Is it all-out war? If it is war, there are certain legal consequences, and people would be willing to forgo some civil liberties if the United States is at war. So I think the first step is to put our act together in terms of a coherent definition of what terrorism is and to communicate that definition to the American public, to our friends, allies and adversaries, so there should be no mistake about where the United States stands on terrorism, and then to deal with the different kinds of threats--the biological, the chemical, the nuclear, the super. In fact, terrorists are today discussing even space terrorism. Looking ahead, what can they do in order to exploit space. Therefore, I think we have to deal not only with the technology, but with the psychology and the mind set. Chairman Kyl. While Senator Feinstein is catching her breath here, let me just pursue this line of questioning and then we will join in together, if that is all right. Let me get a little bit more specific, Dr. Cordesman, about your recommendation regarding insurance. It has seemed to me that while the U.S. Government could require that certain systems be separate and totally apart from the Internet--and, in fact, some are, and we could encourage perhaps some in academia or the private sector to develop systems that are similarly unconnected to the Internet and therefore far less vulnerable--that there is a great deal of commercial or industrial or non-governmental activity that nevertheless affects the Government. Our transportation grid, our communications system, the energy grid, the financial systems--all of those things are interconnected for commercial reasons, and I too have been concerned about the lack of robustness to these. I had thought that perhaps losses occasioned by cyber attacks would result in liability determinations. The evolution of the law would create the rules. Insurance would provide the enforcement of those rules--insurance and, of course, legal decisions--and that would force the robustness. I am not sure, however, that it would necessarily protect against the loss to Government, the loss of capability that would impact on our National security from a governmental point of view. How do you see this evolution, and is this the area in which you see some role for governmental regulation? Mr. Cordesman. Well, Senator, let me first address the word ``Internet.'' It is very popular, it is a wonderful toy, and it actually has a great deal of substantive use. But the fact is most critical systems shouldn't be on the Internet; useful systems should be. And if useful systems are reconstituted three or 4 days later, it really doesn't matter very much. Nobody dies, the economy doesn't fail. So I think we have to make a clear distinction between those systems and systems, for example, like the functioning of the stock market or, as you mentioned, control of air traffic or major water systems or utility grids, most of which frankly should be off the Internet in any case. Now, liability is an issue, but I think waiting for liability to happen is the kind of process that says you go into court after the problem has already occurred. So I would suggest a very narrow focus. I don't think that we need to regulate the Internet. What we need to do is to identify and regulate a very narrow range of critical systems, and the answer may not be the same in each case. Sometimes it can be liability, sometimes it will have to be redundancy. In some cases, it will be systems which degrade gracefully and have backup. But we really don't have an ordered, structured approach to that problem either within the Government or within American industry, or for that matter on a global economic basis yet. And I think we have to begin by analyzing what is critical to protect and then find the measure tailored to the system rather than having one solution that fits all problems. Chairman Kyl. I appreciate that response. Mr. Alexander, anything else on that point? Mr. Alexander. Well, just a footnote. I would say that this is one area where I think international cooperation is feasible because it affects everyone, and therefore we have to start step by step. I know some countries are trying to develop all kinds of structures to deal with the protection of sensitive information, for example, and so on. So it is not just a question of the United States; it is a regional problem and a global problem. And I think this is one way that I think we can get consensus. Chairman Kyl. Thank you very much. Senator Feinstein has joined us and I will call on her now to make any kind of statement she would like to make or jump right in with the questioning of our second panel. STATEMENT OF HON. DIANNE FEINSTEIN, A U.S. SENATOR FROM THE STATE OF CALIFORNIA Senator Feinstein. Thanks, Mr. Chairman, very much for holding the hearing. I think I will just put my statement in the record, if I may, and ask these questions. It is my understanding from what I have seen that our Government has not clearly designated who would be in charge in responding to a terrorist incident. In a recent GAO report on counterterrorism policy in Canada, France, Germany, Israel, the UK, and the U.S., the United States was the only one of these countries that lacked a clear chain of command in response to a terrorist incident. Are you concerned about this, and what should that chain of command, in your view, be? Mr. Cordesman. If I may begin, Senator, I think in theory there is a chain of command. The problem is that it is too complex. We have a division-- Senator Feinstein. Did you say it is too complex? Mr. Cordesman. That is right. I mean, basically speaking, first if it is a low-level incident, to be perfectly honest, we have so many natural catastrophes and accidents that it isn't a stress on the system. But if we get a really large-scale terrorist attack that produces mass casualties, then all of a sudden the FBI and FEMA are confronted, as Dr. Alexander mentioned, with an effect close to war. What happens then? Well, the system is simply not capable of responding at some central point to the complexity of the individual case. We have all kinds of lines of responsibility, but they won't work on a clear or timely basis. The separation between FEMA, which is understaffed, underfunded and not equipped to deal with the effects of large- scale terrorism because it focuses on civil disasters--it simply is not ready. The FBI confronts the problems of foreign intelligence and State and local law enforcement, and let me note that the gaps there are as great as they are between the CIA and the FBI. It goes to the NSC, where the question of who is operational has to almost be improvised. If it is a really serious incident, the President has to be brought in. You mentioned response. One problem we have never really addressed is what happens if it is a biological incident, because the actual responders particularly to multiple incidents or more than one agent are all tailored to medical services and biological response. If it is high-explosive, it may be the National Guard that would be the proper group. If it is nuclear, biological experts are not the people who would have to deal with that case. We really have looked at this in Washington only from the top. We haven't looked at the consequences of different major acts of terrorism and how the chain of command and response would have to adapt. Let me just give you one simple example. In most places in the United States, in the winter, most hospital beds are occupied. Many hospitals are in urban areas. If you have a biological attack, not only do you immediately cause a total saturation of local and regional health care, but basically the attack often will cover the area where the care is supposed to be provided. Now, the Federal response to that is going to be to fly in emergency help to people who are, in general, supposed to meet that help at the airport. When it is FEMA or the FBI or some czar that is some czar that is in charge isn't going to help if that is the scenario. Senator Feinstein. From your study--let's say a building is blown up or a bus is blown up--who in the United States is immediately in charge of that incident, the top person? Mr. Cordesman. Well, the top person will be almost invariably, unless it is on a Federal facility, the mayor or the head of the local jurisdiction who will be responsible for coordinating local law enforcement, which will treat it as a criminal act, and for coordinating the emergency response. If it is on a Federal facility, for example, a military base, it would be the base commander. There will be all kinds of legal complications and they are going to spread out along with the response issues. If it is something like a water supply, however, which cuts across, say, State or jurisdictional boundaries, then the issue would be whoever is in charge of the individual utility or facility. But ultimately the first response always is local, and in the real world the authority level or chain of authority is local until Federal intervention or State intervention is required. Senator Feinstein. Well, let me respond. Having served as a mayor for 9 years in a form of government where the mayor was essentially in charge of the police department and the fire department and had the ability to ask for mutual aid, I am not sure as we go into more sophisticated types of terrorism that really having a mayor in charge is the best idea. It seems to me, once an attack happens whatever the scale, immediately the Federal Government has some responsibility and there should be somebody there from the Federal Government with respect to protecting the chain of evidence, and also doing whatever is necessary to aid in protection of the people. I don't think you can leave the response to sophisticated international terrorism in the hands of a mayor. We had talked before about having a response team that could go into an area. What would your recommendations be, Dr. Cordesman and Dr. Alexander? Mr. Cordesman. Everything depends on the size and nature of the incident. That ones that you mentioned initially are sort of conventional terrorism. Indeed, in the Federal Government planning tends to be for incidents where there are less than 1,000 casualties because that is assumed to be the maximum worst case for practical planning. If it is biological or nuclear, of course, the attacks will be far larger. The moment that this extends beyond a localized single event, the moment it involves a weapon of mass destruction, you must be able to bring in Federal authority and law enforcement and certainly FEMA immediately. At any level involving, I would think, frankly, a nuclear event or a major biological event, I don't believe that the Congress will ever properly fund FEMA to respond and you will be forced to bring in the Department of Defense. That means that there must be somebody coordinating a tailored Federal response, and they have to begin hopefully within minutes of the ability to characterize the attack. Now, long before then, if it is international terrorism, one would have hoped that the kinds of issues discussed earlier, the cooperation between the CIA and FBI, would have improved to reduce the risk of incident. Senator Feinstein. Well, supposing the gentleman that tried to come across the Canadian border a couple of weeks before New Year's Eve 1999 was actually able to blow up something significant in Seattle, Washington, you are saying that that should be left up to the mayor to handle? Mr. Cordesman. No, I am not saying it should be left up to the mayor. You asked what the chain of responsibility was, and in practice the FBI would come in later. Now, the FBI would not have here a jurisdictional problem because it is clearly a foreign terrorist. It might take time to establish that. Depending on how the local jurisdiction handled the issue, you might get immediate, smooth cooperation between State, local, and Federal law enforcement. That is what I think would happen in any major case. But as you know, there are sometimes communities where that relationship does not always work out as it should. I would hope that the immediate action for any foreign terrorism would be what is called for under law because the FBI does have jurisdiction over acts of terrorism if they are defined as such, an issue which Dr. Alexander raised. Similarly, FEMA would have responsibility to assist State and local authorities immediately at the Federal level, depending on the size of the incident. But the critical issue you have raised is the size of the incident and what happens when local capabilities break down. Senator Feinstein. I just think in reality, having been there during a riot, it is very difficult. I happen to believe there ought to be someone in the Federal Government, that once a mayor presses a button or makes a phone call and expresses what kind of an attack it is, can immediately bring onto the scene whatever Federal reinforcements are available or helpful. The White Night riot, when the assassin of my predecessor as mayor and another supervisor was just given a very brief sentence and there was an explosion in the city and police cars were being blown up and buildings were being attacked with rocks, was a very difficult situation. It took a long time to get everybody together, and then finally I called the Governor to exercise mutual aid. It all takes time before you know exactly what you have. We became much more sophisticated about it after that, training police, how they work, all the details of it. But it is a little bit of a lesson to me that if you have, let's say, the Federal building blown up right next to city hall, you are into something entirely different and mutual aid isn't going to help very much. You are going to need immediate reinforcement. It may be military, it may be FBI. Some of it may be FEMA, but someone has got to make that decision, and make it quickly. I am coming to believe that there ought to be someone on a Federal level that a local jurisdiction is able to consult with immediately, 24 hours day, that is helpful in making the decisions as to who is alerted, who is brought in, what the time line is. I think that would become particularly more important in a biological or a chemical reaction. Mr. Alexander, would you like to comment? Mr. Alexander. Yes. Again, it comes, Senator, to the question of perception. Because the United States fortunately was not as victimized as some of the other countries that you mentioned, usually terrorism was looked upon as an irritant, a nuisance, something that will go away, very cyclical. So the culture was not there in terms of the concern of the people. Today, the situation is changing. As Senator Kyl mentioned, the United States is really target No. 1 abroad and we have had terrible tragedies in Oklahoma and elsewhere. So I think the American people are much more sensitive to the issue of terrorism, and if the public would try to get involved and cooperate with Congress on what is needed, what kinds of tools are necessary to deal with the problem in terms of policies, in terms of organizational structure, in terms of upgrading intelligence and strengthening law enforcement, for example, perhaps, Senator Feinstein, as mayor this wouldn't be your role to deal with a bioattack. Sometimes, you have to wait a couple of days before you know you are really under attack. Therefore, I think what this Subcommittee is doing and other committees in Congress is extremely useful. As you know, there are probably 80 Federal agencies involved in different aspects of terrorism, and therefore certainly it is like an orchestra without a conductor. I think something has to be done to coordinate many of these activities. Some work, some don't, and therefore I think we have to monitor the operations very, very closely. First, we must assess the nature of the threat in order to know what kinds of responses are really suitable at home and abroad. Senator Feinstein. If you are really going to look at this as a practical application, every mayor, at least in California, has different authorities. Some city councils rotate a city council person as mayor every year. Some are strong mayors, and some are very weak mayors who just don't have the control. Some frankly don't have the ability to cope with a terrorist incident. I think in this country we are wide open to chaos without the ability to really have somebody who is able to send out an immediate assessment team, make the assessment, and set into motion a chain of events. I am truly of the view, Mr. Chairman, that we really ought to write a big bill, a real reorganization of counterterrorism policy. We have been doing this now for 3 years, and we listen to report after report after report, all of which suggest that we are really unprepared. Even when we had our classified briefing a while ago, I didn't come out with a great sense of confidence that we were ready to respond to a terrorist event. It seems to me that there is a recommendation somewhere in this, and I can't remember where it is but I thought it made sense, and that is that each President really ought to come forward with a plan as to how the administration would approach this in terms of a chain of command, an instant response, emergency provisions, investigative needs, and military precautions. It might be something that we could request the administration to do. Chairman Kyl. I might just note that just before you arrived, Dr. Cordesman made the point that while planning is certainly necessary, the tendency might be for yet one more planning document, one more reorganization, all of which reshuffles the chairs on the deck. That is my analogy, not his, but it adds very little value to the response. I was going to follow up with a question that ties in directly with what you were just saying. Basically, what you want is a 911 for any kind of help that might be out there that the local group isn't immediately able to provide. If it is clearly a law enforcement kind of an attack and a conventional explosive blows up a building, the law enforcement people are going to be on the spot and they are going to be the ones who take charge. If, all of a sudden, everybody within a 10-block area is getting really sick from something, the health care people are going to come in and figure out that there is some kind of a problem. But in either event, if there is a 911 number at the Federal level that people can call to get whatever kind of help might be available and a general plan at the Federal level, it seems to me that that is one way of providing whatever kind of help might be available in a fairly efficient way. But I too would be skeptical of focusing our attention too much on reorganization, strategy documents, and the like. I am really interested in getting beyond that to the value-added components of dealing with terrorism as well. A response from either one of you to that comment would be appreciated. Mr. Cordesman. Let me give you, I think, a tangible example. Congress legislated that there be a document provided by OMB describing the programs that are currently underway. As far as I know, I have not talked to anybody who has held hearings on what we are actually spending the money on. It is $11.7 billion in the last fiscal year; $1.5 billion of it is dedicated to deal with the effects of weapons of mass destruction. It is spread out among 17 different groups. On paper, Senator, for example, there is a Biological Response Team. The problem is it may have 17 people and 2 doctors in it, and I am not sure that is going to help any city on the West or East Coast in the event of a biological incident. I think that when you talk about organization, it is very important to have one person in charge, and there have been proposals putting it in the Office of the Vice President, having a Cabinet-level official, having someone on the order of the drug czar, putting the response elements in FEMA, and strengthening coordination within the FBI. I don't know which of these the President would prefer, but it is clear that you not only need someone to call, but somebody who can do something in response. My suggestion to you would be that the kind of examination which is already being made of where the Federal money is going needs very careful examination to see what really needs to be fixed. It is fairly obvious, looking at the numbers, that right now virtually all the money we spend is on improving Federal buildings and their resistance to high explosives. That is the one threat on which about $7 billion of the money has been going. I think as you look into this you are going to find there is no long-term planning. Agencies improvise and compete from year to year. In program after program, they don't know what they would have to spend to develop a real capability. Technologies are being funded, but nobody knows what system they would go into if they worked, whether they would really deal with the threat of future technology, or what they would cost to deploy and whether it would be a State, local, or Federal deployment that would be required. So we have one organizational study after another trying to figure out who it is that answers the telephone, but no review of Congress' traditional function, which is to look at where the money is really going and whether it is being spent to a purpose. Senator Feinstein. I have been brought up to believe that the primary role of government is to protect the people, and I really believe that. If I am mayor and something blows up, I want to maximize every resource I have as fast as I possibly can. I really agree with you, Dr. Cordesman. I think that domestic terrorism is something that is very appropriate to be part of the portfolio of either a Vice President or a Cabinet member. When a building has just blown up and the suspicions are that it is terrorism, I can pick up the phone and say we have got a major incident on our hands, we need help, we need it right now. I want a team that can come out and take a look at this situation, and also help us with A, B, C, D, and E. Californians pay more than $20 billion in taxes a year that they don't get back in services. It is not too much to ask that the Federal Government be able to provide counterterrorism assistance. Terrorism is increasing in this world, and we ought to be prepared for it. And to be prepared for it means that certain people have to be accountable to do certain things. I have been looking at this for 3 years. It is still unclear to me of who is really in charge of what, or where as a mayor I would go to get help. That is not clear; it is not clear out there anywhere in the United States. I think the time has come for us to try and make that clear to people. End of speech. Mr. Alexander. May I just make another footnote here? I fully agree with you. I wanted to call you mayor, Senator, in terms of your experience, and this is life. I mean, someone has to be on the front line and be able to save lives and minimize the threat. But I would like to submit to you that we have to see it in a broader perspective, not only in terms of what is happening in the United States but what is happening abroad. Particularly, I am talking about Americans and American citizens who are all over the world, as we know, about 10 million of them at a time, and they need protection as well; of course, the military or the diplomats, and we have seen that. My concern is that we are not putting that together in terms of also the international protection. And recalling the tragedies that American servicemen went through for so many years, and I have seen some firsthand, I believe that we have to learn the lessons of the past; that is to say, the State Department after the attacks on the embassies in Kenya and Tanzania immediately tried to figure out what could they do to protect members of the State Department. So they instituted some measures both at the State Department right here in Washington as well as at embassies abroad. Then they started training against weapons of mass destruction, and so forth. But that particular action did not prevent the terrorists from attacking the U.S. Destroyer Cole and killing Americans on the ship. And this really means that there is a need somehow, No. 1, to strengthen the intelligence capability, the quality, in terms of human and technological to deal with future threats to Americans abroad, and also to work with like-minded nations to coordinate the activities. For example, Tony mentioned emergency medical preparedness. Not only in the United States are there not enough beds, but when we talk about the situation abroad and how to save those who are injured, if it takes about 12 hours to get some assistance, then it is too late. So what I am really suggesting is, Senator, that we have to see it as a comprehensive threat to the United States. It is not a nuisance, it is not an irritant. It is a national security threat, and therefore I think we have to mobilize all the capabilities and to look at the recommendations--some of them are really excellent--in terms of responsibility, in terms of organizational structure, and so on and so forth. If we are not going to do it, especially the United States as a super-power, as the leader of the Free World, if I may use this term, I really believe that we have a special responsibility to provide the leadership. Senator Feinstein. Thank you very much. Chairman Kyl. Let me just close with this question, since you raised the issue, Dr. Alexander, and in his written testimony Dr. Cordesman makes the same point. Obviously, you would like to try to thwart the terrorist incident in the first instance. Intelligence is key to that capability, and while we have some success with signals intelligence, human intelligence is the primary source of information that enables us to thwart terrorist attacks. Incidentally, for those in the audience who might be interested, we have had testimony each year for I think 3 years from the Director of the FBI that each year our intelligence agencies are able to thwart about a dozen major terrorist attacks through the use of good intelligence. These are very rarely made public. We know of the attacks that are successful, but we rarely hear about those that have been prevented through good intelligence and there are a number of them. Dr. Cordesman, you specifically testified that human intelligence is underfunded and that it is critical to this effort. Why do you think it is so underfunded, and what can we do? Since both of us also serve on the Intelligence Committee, even though that is not directly related to the Judiciary Committee, the intelligence-sharing questions do arise. In any event, we are all interested in the subject. How can we better fund our human intelligence? Mr. Cordesman. Well, I was saying to one of your staff, Senator, that several centuries ago I was the Director of Intelligence Assessment in the Office of the Secretary of Defense, and the Congress decided it would be a good idea to recommend an increase in human intelligence resources and 1 year later we were having RIFs. In general, any time anybody in Congress seems to propose this--I am not sure there is a cause and effect relationship-- the resources end up mysteriously being cut. So I have to be very careful about what I say here. I think frankly you have, in general, a very effective intelligence community. We always underfund the human dimension and the analytic dimension, and we always tend to put lots of money into national technical means. I am not sure there are any savings to be made in national technical means, and it is not glamorous to say that you simply give people in the community more resources to plus-up the capabilities they already have. But I think that is part of the problem that everybody wants to reorganize or make it more efficient, but they don't want to spend more money in a focused way where it is really needed. I think, too, you need to be very cautious because human intelligence, as you know, is often defined as collection; it is getting more sources overseas. Dr. Alexander mentioned the need for better international cooperation. There is a need to put a lot more money into the analysis side, areas like data mining, areas which get around the unreliability of defectors and the inability to penetrate inside terrorist nets. It takes a lot of time to develop a real expert on terrorism or on any given method of attack. And with new technologies like biological weapons and other methods, we tend to put people into growing sections in the community, but if they are not out or promoted in 3 years, it is a career killer, and that problem has been going on for decades. So I think what you need to do is look in-depth at what is going on inside the intelligence community, figure out precisely what existing elements can be strengthened, and ensure that the money really goes to analysis in human intelligence and not to more managers or more coordination. In general, I believe the intelligence community is capable of greatly expanding its capabilities if somebody will be patient enough and realistic enough to give them the money they need. Chairman Kyl. I might add that as long as the intelligence funding is a percentage function of the Defense budget, there is an inherent arbitrary limitations on what can be devoted to intelligence-gathering. Mr. Alexander. If I may, Senator, I think that clearly is a very important issue. The other issue that I would like to suggest--and it was raised in some of the commission reports, the National Commission on Terrorism, Ambassador Bremer, and so forth--there are certain legal constraints on the capability of the agencies to function. If we want them to do the job, we have to give them the tools to do it within the framework of law, of course. But if there are too many regulations and constraints even to recruit someone from a terrorist group to work with us--this is not someone would like to have dinner with, but nevertheless we need information and information can save lives. So really this is the question of the perception of the threat. I would like to suggest that today, since we do have a trend of loose international networks like the Bin Ladin structure that can operate in some 55 countries around the world and mobilize people in order to strike against the United States, which is really target No. 1, the intelligence community, as we know, time and again is the first line of defense. And if they don't have the tools, it would be similar to taking away the tools from the police at the local level or the State level. So therefore I think the American people have to consider the nature of the threat and, if the threat is really imminent, to do whatever is necessary, and particularly to support the intelligence community. Chairman Kyl. I thank you very much for those views. Obviously, some of these comments would perhaps do a little more good if they were heard by some of our other colleagues who aren't here. In Senator Feinstein and I, you have two people who are obviously committed to trying to get some help. We will try to put together the three different reports that have been issued within the last 12 months or so, finding the common areas for recommendations that we can at least agree upon, and without suggesting that all of this is legislative in nature, at least pull those things together that do require some legislative action and put it into a draft bill. We would like to submit that to you for your review so you can give us your feedback on whether we are on the right track from your point of view, and then we are going to try to run that through the House and Senate this year. If you have any further recommendations for us, we would be happy to receive those, as I said at the outset of the hearing. Though we are not joined by a lot of our colleagues here today, we will share the information that we can summarize from this hearing with them in an effort to try to get their support as well. I very much appreciate your testimony today, and look forward to your continued evaluation of our product and your advice as we move forward. Thank you very much. This hearing is adjourned. [Whereupon, at 3:50 p.m., the Subcommittee was adjourned.]