INTL613Wk5
T Introduction
he discipline of intelligence has been a central element of the homeland security enterprise over the
past two decades since the terrorist attacks of September 11, 2001. The 2002 National Strategy for
Homeland Security emphasized “intelligence and warning” as one of the six “critical mission areas” of
homeland security, and later that year, when Congress passed the Homeland Security Act, it created a new
intelligence-focused directorate as one of two startup offices amid the broader reorganization of border
security and emergency response agencies. That office—named since 2004 as the Office of Intelligence and
Analysis—originally was envisioned to be the nexus of intelligence activities related to threats to the
homeland, in partnership with the FBI and foreign intelligence agencies.
But since the creation of the Department of Homeland Security (DHS) in 2003, the Office of Intelligence
and Analysis (I&A) has often struggled to live up to this vision. It remains a junior member of the intelligence
community. It has found it challenging to influence and integrate intelligence-related activities across the
components of DHS. And it faces difficulties in explaining its role to Congress and to the general public,
leading at times to mistrust and confusion.
The underlying causes of these struggles are manifold. Some of them relate to forces beyond I&A’s
control, including decisions made in 2003 to strip away responsibilities originally envisioned for DHS in the
2002 National Strategy, and give them instead to the FBI and what later became the National
Counterterrorism Center (NCTC). Some of them have to do with decisions made by DHS leaders and
Congress over the past 18 years to add new layers of authority at I&A and increase its complexity. Other
underlying causes have to do with organizational and workforce-related issues within I&A.
But the primary cause of these struggles is the mismatch between the public expectations of I&A’s role
and the underlying weakness of its statutory authorities. When I&A has found itself in the news cycle, it often
has been framed pejoratively as a domestic spy agency and an unbounded civil liberties risk. But the reality of
I&A’s statutory authorities and responsibilities is much meeker: It has no clandestine intelligence collection
authority, and its primary role is as an integrator and disseminator of information among the DHS
components; state, local, and tribal agencies; private sector entities; and other related elements of the
intelligence community.
Nearly two decades after 9/11, the time has come for policymakers to decide what they want I&A to be and reduce the gap between the reality and perception of its authorities.
This mismatch between the perception and reality of DHS I&A’s authorities explains many of its
challenges over the past 18 years, which often have arisen as a result of senior leaders’ well-intentioned efforts
to overcome these impediments and take on additional responsibilities without corresponding increases to
MAY 25, 2021 Image credit: CNAS
Reassessing Homeland Security Intelligence A Review of the DHS Office of Intelligence and Analysis
By Christian Beckner
1
Introduction
The Evolution of Homeland Security Intelligence, 2001– 2021
The Future of Homeland Security Intelligence: Options for Reform
Near-Term Recommendations
Conclusion
Appendix: DHS Intelligence & Analysis Organizational Overview
Further Reading
Get the Latest from CNAS
Events Follow Support
resources and statutory authorities. DHS I&A’s weaknesses also have left it exposed to political vicissitudes—
as demonstrated most vividly by the political fallout in 2009 from its report on right-wing extremism and
some of its activities during the final year of the Trump administration.
Nearly two decades after 9/11, the time has come for policymakers to decide what they want I&A to be and
reduce the gap between the reality and perception of its authorities. One model going forward would be a
slimmer I&A, modeled after the Department of State’s Bureau of Intelligence and Research, primarily focused
on producing all-source analysis for the Secretary and other executive-level stakeholders. The second model
would be a more robust I&A with new intelligence collection authorities, the transfer of related functions
from other departments and agencies, and stronger authorities with respect to the operational components of
DHS. Both of these options have their challenges, drawbacks, and risks—but both are preferable to the status
quo.
To provide context for a consideration of these policy options, this paper first provides an overview of
I&A’s history and evolution since its creation. This history and an appendix section (outlining I&A’s
organizational structure, statutory authorities, budget, and mission priorities) provide the foundation for a
detailed set of recommendations to reform I&A.
These recommendations are split into two sections. The report first elaborates on the competing options
to “go big” or “go small” with respect to I&A’s role, weighing the benefits and drawbacks of these options, and
establishing criteria for policymakers to assess them. The report then concludes with six near-term
recommendations that can be addressed in advance of (or in lieu of ) broader organizational changes.
Nearly two decades after the attacks of September 11, 2001, the threats to the homeland have evolved, but
the need for an effective system of homeland security intelligence persists. The unfulfilled expectations for
I&A over the past 18 years demand that senior leaders at DHS and members of Congress take a renewed look
at its role and priorities and make tough decisions to ensure that I&A has authorities and resources that align
with their expectations for it.
The Evolution of Homeland Security Intelligence, 2001–2021
A review of the concept of homeland security intelligence and I&A’s development over the past two
decades is necessary context for an assessment of its current challenges. The role that intelligence would play
in better protecting the country from terrorism, in particular, was central to the policy debate surrounding the
creation of the new department. But shortly after the stand-up of DHS, the division of responsibility for
intelligence analysis was spread among different components of the intelligence community. Over time, I&A
has periodically struggled to demonstrate its value among its intelligence community peers.
9/11 and the Concept of Homeland Security Intelligence
The concept of “homeland security” was a nascent idea on September 11, 2001, and was first widely
articulated in the Hart-Rudman Commission’s Phase III report, released in January 2001. But in the wake of
the attack, this new homeland security concept quickly became the focal point of policy actions. On October
9, 2001, President George W. Bush appointed Pennsylvania Governor Tom Ridge to lead a new Office of
Homeland Security in the White House and two days later, bipartisan legislation was introduced to create a
Department of Homeland Security.
Over the course of the next year, as the White House and Congress weighed options for creating a
Department of Homeland Security, the role of intelligence was central to this debate. The National Strategy
for Homeland Security, released in July 2002, noted that “intelligence and information analysis is not a
separate, stand-alone activity but rather an integral component of our Nation’s overall effort to protect
against and reduce our vulnerability to terrorism” and it defined a high-level vision for homeland security
intelligence that placed a future DHS at the core of this process, as illustrated in the following chart.
2
3
4
Source: Office of Homeland Security, National Strategy for Homeland Security (July 2002),
, 16.
Congressional leaders supported this vision for DHS intelligence during the fall of 2002. In remarks on
the Senate floor, lead sponsor Senator Joseph Lieberman noted that the legislation “would create a new
intelligence division focused on the threats to our homeland, equipped to truly connect the intelligence and
law enforcement dots from Federal, State, and local agencies, from human and signal intelligence, from closed
and open sources, from law enforcement and foreign sources, including particularly the Counterterrorism
Center at the CIA.” The House and Senate bills both included provisions to create a new Office of
Intelligence Analysis and Infrastructure Protection (IAIP), bringing together the intelligence function with
infrastructure protection and vulnerability assessment. While the infrastructure protection side of the office
was an awkward merger of five existing offices, the intelligence side of IAIP was a new creation, led by an
assistant secretary for intelligence analysis.
Developing an Intelligence Function at DHS
IAIP came into existence in March 2003 with the formal creation of the Department of Homeland
Security and was initially led by CIA veteran Paul Redmond. Redmond stayed in the role for less than three
months, resigning for health reasons shortly after a tumultuous House oversight hearing. This hearing
highlighted the founding flaw of DHS intelligence: the decisions in late 2002, after the passage of the
Homeland Security Act but shortly before DHS was created, to locate key homeland security intelligence
responsibilities within a new CIA-led Terrorist Threat Integration Center. As a Washington Post story
recounted in late 2005:
The Terrorist Threat Integration Center (to become the National Counterterrorism Center in 2004) was
given the primary threat-focused responsibilities from the National Strategy, leaving DHS IAIP with
responsibilities related to vulnerability assessment, protective action, and warning. IAIP’s role was further
diminished in September 2003 with the establishment of the FBI-led (but interagency) Terrorist Screening
Center, responsible for coordinating operational activities related to the terrorist watch list.
On Jan. 24, 2003, Ridge was sworn in as the first secretary of homeland security; Bush hailed him as a
“superb leader who has my confidence.” Four days later, Ridge learned from the president's State of
the Union address that a new intelligence center for tracking terrorists—which he had expected to be
the hub of DHS's dot-connecting efforts—would not be controlled by DHS.
Ridge and his aides thought the center was one of the key reasons the department had been created,
to prevent the coordination failures that helped produce Sept. 11. Not only had the White House
undercut Ridge, it also let him find out about his defeat on television.
https://www.dhs.gov/sites/default/files/publications/nat-strat-hls-2002.pdf
5
6
7
8
9
With these diminished responsibilities and no distinct collection authority, and early challenges with
office space and staffing, DHS struggled in 2003 and 2004 to develop its intelligence and analysis function.
Lieutenant General Patrick Hughes became the new assistant secretary in November 2003, serving in the role
until March 2005. When Michael Chertoff took over from Tom Ridge as DHS secretary in 2005, he carried out
a “Second-Stage Review” of the organization of DHS, one outcome of which was the separation of the
intelligence analysis and infrastructure protection functions, and the establishment of the Office of
Intelligence & Analysis to be led by an under secretary who also would serve as the chief intelligence officer
(CINT) of the department. Longtime CIA official Charlie Allen was appointed to serve in this role shortly
after the completion of the review.
Allen was tireless in trying to build up DHS I&A, developing the first strategic plan for the DHS
intelligence enterprise, working to improve I&A’s analytic tradecraft, and strengthening its ties with non-
federal law enforcement agencies by embedding analysts at the new “fusion centers” that states and major
cities were establishing. In August 2007, Congress passed the Implementing Recommendations of the 9/11
Commission Act, Title V of which updated I&A’s authorities to reflect the changes that had been made in the
Second-Stage Review, clarify I&A’s authorities with respect to the operational components of the DHS, and
elevate the leader of I&A to a Senate-confirmed under secretary position.
Maturing I&A: Ongoing Challenges and Notable Incidents
I&A’s statutory authorities today remain largely unchanged since this 2007 law. (For additional context
on I&A’s authorities and organizational structure, see Appendix A). Since that time, through the Obama and
Trump administrations, DHS I&A has made progress to mature its capabilities and institutionalize its policies
and processes in a number of respects. It has demonstrated its value through its activities to develop and
support state and local fusion centers, and through various activities carried out in coordination with DHS
component agencies (including Customs and Border Protection, Immigration and Customs Enforcement, and
U.S. Citizenship and Immigration Services) to leverage their information holdings in support of broader
national security activities to counter terrorism, human smuggling, and organized crime.
However, DHS I&A has faced an ongoing set of challenges and setbacks throughout this time period. It
has had low workforce morale, consistently ranking near the bottom of the annual federal workforce surveys
over the past decade. It has continued to struggle to define its analytic value proposition with respect to peer
intelligence agencies. It has taken on new responsibilities, including for department-wide information-sharing
and counterintelligence operations, that have increased the burden on I&A leadership. At times, it has faced
resistance from DHS components to efforts to increase department-wide intelligence integration. At times, it
has been overburdened by the responsibility to produce intelligence for the DHS secretary and senior
leadership team. And it has stumbled on occasion in responding to a media spotlight on its activities.
A few notable incidents—one from more than a decade ago, and several episodes from the past year—
illustrate these challenges. In April 2009, I&A produced a non-public report (intended for law enforcement
partners) entitled “Rightwing Extremism: Current Economic and Political Climate Fueling Resurgence in
Radicalization and Recruitment.” This report was leaked to the news media, and DHS Secretary Janet
Napolitano quickly faced backlash from members of Congress (many of whom were calling for her to be fired)
and veterans’ organizations, based on how the report had characterized the right-wing extremist groups’
recruitment of former service members.
Secretary Napolitano initially defended the report, noting accurately that it was a continuation of
reporting on domestic terrorism threats at I&A that had increased during the final two years of the Bush
administration. But in the face of increased political pressure, Secretary Napolitano apologized to veterans’
organizations about the report and put into place a process for other elements of DHS—including the Privacy
Office, Office of Civil Rights and Civil Liberties, and General Counsel—to review and clear analytic products
that would be disseminated to non-federal recipients. This clearance process, which was formalized in 2010,
had the effect of slowing down I&A’s ability to issue reports in a timely manner and had a harmful impact on
10
11
12
13
14
15
16
17
the independence of I&A’s analytic judgments. DHS I&A also stopped producing reports on domestic
terrorism threats for more than two years after this report, only resuming the issuance of such reports in July
2011.
I&A received heightened attention in 2020 and early 2021, following several years in which the office was
largely able to avoid the public spotlight. In July 2020, The Washington Post wrote about open-source
intelligence reports that I&A had produced in relation to the ongoing civil unrest in Portland, Oregon,
including reports on a New York Times article and a blog post by the editor-in-chief of Lawfare. This raised
concerns about potentially impermissible activity at I&A, including criticism from Acting DHS Secretary Chad
Wolf and former I&A Under Secretary General Frank Taylor.
The following month, former I&A Acting Under Secretary Brian Murphy—a career official who had been
reassigned from the role in the wake of this incident—filed a whistleblower reprisal complaint that was
publicly released by the House Intelligence Committee. The complaint detailed a series of incidents of
political appointees at DHS and the White House attempting to improperly influence analytic assessments,
including those regarding Russian influence operations and white supremacist terrorism. The fact pattern in
the complaint highlights the greater vulnerability of DHS I&A to political pressure, compared with agencies
such as the FBI, due to its weaker stature and institutional norms.
The attack on the U.S. Capitol on January 6, 2021, prompted a new set of concerns about I&A’s activities,
as information came to light that I&A had not released any reports in advance of the attack that previewed
potential threats to the Capitol on that date. In hearings and letters after the attack, Congressional leaders
queried I&A leadership about this inaction. Notably, this critique was in many respects the exact opposite of
the one made in response to DHS activities in Portland: In this case, I&A was being faulted for inaction instead
of excessive or overzealous action.
The Future of Homeland Security Intelligence: Options for Reform
Given this history, current leaders at DHS and in Congress face a variety of questions with respect to the
path forward for I&A. How should its priorities adapt given shifts to the homeland threat landscape,
particularly with respect to domestic terrorism threats? Who are the highest priority customers of I&A’s
analysis? How should DHS address legitimate privacy and civil liberties concerns without impeding the timely
production of reports? And most importantly, what is the long-term vision for I&A’s role, and what steps need
to be taken to achieve and sustain this vision?
In addressing these issues, the most important issue that DHS leadership and Congress need to consider
is the current misalignment between the scope of I&A’s authorities and resources and the expectations of its
stakeholders. There are two broad options to address this issue: either expand its authorities and resources to
meet the general expectations of its stakeholders, or alternately, reduce these expectations by slimming it
down organizationally and moving ancillary responsibilities to other offices. In shorthand, these two options
are to “Go Big” or “Go Small.”
Go Big: In this model, I&A would be given new authorities for clandestine collection of information, both
directly and through tasking of other agencies. These authorities would be similar in nature to the FBI’s
current collection authorities but decoupled from investigative authorities; its role would be similar in certain
respects to MI5 in the United Kingdom or the Canadian Security Intelligence Service. I&A would wield these
collection authorities in conjunction with its activities to integrate information from state and local law
enforcement agencies and from DHS’s operational components, and use this data to inform strategic
intelligence analysis and identify specific threats that then can be passed over to the FBI and other federal law
enforcement agencies for investigation. To reinforce these authorities, the DNI could designate I&A as the
mission manager for homeland security intelligence, pursuant to Sec. 1.3(b)(12) of Executive Order 12333 as
amended.
18
19
20
21
22
23
24
In addressing these issues, the most important issue that DHS leadership and Congress need to consider is the current misalignment between the scope of I&A’s authorities and resources and the expectations of its stakeholders.
I&A in the Go Big model would need to have much more robust legal oversight, particularly with respect
to the collection, retention, and dissemination of U.S. persons information. And it may also be warranted for
I&A to assume the responsibilities of other offices with adjacent roles, including the interagency (but FBI-led)
Terrorist Screening Center. I&A also could take on additional IC-wide responsibilities for other priority
mission areas closely related to DHS’s core missions, (e.g., transnational organized crime, economic security)
and would have primary analytic responsibility to assess the linkages among different types of homeland
threats, helping to understand the seams and move the intelligence community away from siloed approaches
to the assessment of cyber threats, transnational organized crime, terrorism, human smuggling, nuclear
proliferation, and other threat domains.
Go Small: In the opposite direction from this approach is an option to reduce the size of I&A and focus it
on effectively carrying out a small number of core missions, instead of continuing to tackle an overly diffuse
set of responsibilities. Templates for this model include the Bureau of Intelligence and Research (INR) at the
Department of State and the Office of Intelligence and Analysis at the Department of the Treasury, both of
which are significantly smaller (in terms of budget and personnel) than I&A.
In this model, I&A would focus on providing all-source strategic analysis on homeland threats to
departmental leadership and to other senior leaders in the executive branch and state and local government. It
would emphasize mission areas and cross-mission threats that are not duplicative to other agencies’ primary
areas of focus, and also proactively assess emerging threats to the homeland. I&A also would maintain its
current relationship with state and local fusion centers and would still have a coordinating role with respect to
intelligence offices within DHS components, but would be less involved in their operational activities.
I&A would devolve a variety of programs and authorities to other parts of DHS, including some of the
“additional, non-statutory authorities” noted in Appendix A. It would transfer lead responsibility for
counterintelligence back to the Office of Security and transfer information-sharing responsibilities (including
relevant IT projects) to the DHS chief information officer. It would disengage from cybersecurity-related
analysis, letting the Cybersecurity and Infrastructure Security Agency take the lead (as detailed in the next
section) and narrow the scope of its terrorism-related analysis to reduce unnecessary duplication with FBI and
NCTC reporting. It would scale back many of the other support activities within its Intelligence Enterprise
Readiness branch and focus relentlessly on improving the agility and professionalism of its core analytic team.
These two competing visions for I&A could not be more different, and both have their benefits and
drawbacks. The Go Big option increases the inherent risks to civil liberties, and to date there has not been a
public appetite for a strong domestic intelligence agency within DHS. But this is a model that would make
DHS I&A more effective at anticipating and identifying homeland threats and would synchronize reality with
the current public perception of DHS’s authorities.
By contrast, the Go Small option creates risks of disunity and dysfunction, encouraging DHS components
to operate within stovepipes and abandoning other programs to uncertain futures. A smaller I&A also may be
less capable to respond to new and emerging threats to the homeland. But this option gives I&A an
opportunity to become a more focused and effective agency, addressing core priorities, avoiding distractions,
and improving the quality and relevance of strategic analysis.
25
This report does not decide between these two alternatives, other than to suggest that both are preferable
to the status quo, which is a path of sustained mediocrity and questionable overall value, even with strong
leadership in place and diligence and commitment by the I&A workforce. Senior officials in the executive
branch and in Congress need to recognize that dramatic reform is necessary, look carefully at the current and
future threat landscape, and make the tough decisions about what sort of intelligence capability DHS needs,
not just for the next few years, but in the decades to come.
Near-Term Recommendations
Apart from these broad considerations about DHS I&A’s authorities and organizational structure, there
are a number of other reforms and policy changes that DHS leadership and Congress should consider, which
would improve I&A’s strategic focus, operational efficiency, and public accountability. Each of these six
recommendations can be undertaken in the near term, independent of considerations about broader
organizational changes.
I&A should fully integrate its cybersecurity-related analytic activities with the Cybersecurity and Infrastructure
Security Agency (CISA). Many reports released by I&A’s Cyber Threat Mission Center duplicate CISA’s
cybersecurity reports for non-federal stakeholders, and I&A’s clearance review process frequently delays the
release of these reports, reducing their utility to I&A’s customers. To limit this duplication and enhance I&A’s
strategic focus, lead responsibility within DHS for cyber threat analysis should be shifted to CISA, led by an
assistant director for analysis, who reports to the CISA director but is dual-hatted as a senior I&A official. A
small cadre of I&A analysts, still operating under I&A’s Title 50 intelligence authorities, should be detailed to
CISA to support these activities, liaise with other cyber intelligence–focused offices within the IC, and
continue to produce strategic intelligence on cyber threats. Under this plan, cybersecurity-related reports no
longer would need to go through I&A’s clearance processes, given existing policies at CISA to remove
personally identifiable information from its reports.
I&A should continue to enhance its analytic focus on domestic terrorism threats, in close coordination with the
FBI. The attack on the U.S. Capitol on January 6, 2021, reinforced the heightened nature of the domestic
violent extremist (DVE) threat to the homeland—a threat that has been growing for the past decade,
particularly with respect to racially or ethnically motivated violent extremists, as FBI Director Christopher
Wray discussed in testimony before Congress in March 2021. While the FBI has primary responsibilities with
respect to investigating and analyzing these threats, I&A can and should play a complementary role, primarily
by using its own authorities to carry out open-source analysis of DVE. The FBI’s Assistant Director for
Counterterrorism Jill Sanborn noted in another March 2021 hearing that it does not monitor publicly available
social media conversations in the absence of a predicated investigation. DHS I&A can potentially fill this
gap, given its lack of similar investigative constraints, and assess what former CIA Director Michael Hayden
has referred to as the “spaces between cases.” DHS I&A also can utilize its active relationships with the state
and local fusion centers in support of efforts to counter domestic terrorism, facilitating efforts by state and
local law enforcement agencies to assist with the FBI’s investigative activities. The announcement by DHS
Secretary Alejandro Mayorkas in early May 2021 of a new domestic terrorism branch at I&A is consistent with
this recommendation, but it is critical that this initiative be closely coordinated with the FBI and that it
leverages I&A’s open-source authorities.
DHS I&A should reform its processes for the review and clearance of reports, with the goals of improving
efficiency and removing risks of politicization. As described earlier, since 2009 I&A has had processes for every
intelligence product to be reviewed by several other DHS offices (including the Privacy Office, Office of Civil
Rights and Civil Liberties, and General Counsel) before it can be released and disseminated to non-federal
partners. These processes have inhibited I&A’s ability to issue reports in a timely manner, diminishing
relevance to customers of their reports. State and local agencies at times have avoided partnering with I&A on
“joint seal” reports to circumvent these processes.
26
27
28
29
There is a need for privacy, civil liberties, and legal concerns to be considered in DHS I&A’s intelligence
reporting, but the role for these other offices should be to shape policies and participate in broad compliance
activities—not to review individual reports. The process that has been in place for the past 12 years, however
well intentioned, politicizes intelligence and undermines I&A’s independence.
Instead, I&A should enhance its internal staffing for reviewing reports, consistent with established
analytic policies and its intelligence oversight guidelines, and only should involve other DHS offices in the
review of individual reports at its own initiative. These activities should be led by an I&A official who is a
direct report to the under secretary. Involvement of the DHS secretary, deputy secretary, or other non-I&A
officials in the review of intelligence reports—as was promulgated in reported revisions to these policies in
2020—also should be curtailed.
DHS leadership should commission an independent review of workforce issues at I&A. This review should
examine issues such as recruitment and retention, opportunities for professional development and
advancement (including with other IC agencies), worksite conditions, and other issues with respect to
organizational culture, leadership, and morale. I&A also should actively use existing federal programs to hire
recent graduates and leverage the new authorities provided in the Department of Homeland Security
Intelligence and Cybersecurity Diversity Fellowship Program Act, signed into law in December 2020.
The president and Congress should prioritize appointing and confirming an under secretary for I&A, and
separately consider options to provide this position with a fixed term. As of the date of the issuance of this report,
the Biden administration has not yet nominated an individual to serve as under secretary for Intelligence and
Analysis. DHS I&A has had lengthy leadership gaps over the past 16 years, with Senate-confirmed leaders not
in place for more than four years cumulatively over that time period. These leadership gaps have weakened the
authority of the office and left it vulnerable to crises and organizational drift. The Biden administration
should prioritize the nomination for this role, and the Senate Select Committee on Intelligence and Senate
Homeland Security and Governmental Affairs Committee should move swiftly to act on a nominee.
As part of a broader review of I&A, Congress also should consider whether the under secretary for
Intelligence and Analysis should have a fixed-term appointment of five or more years, to allow for greater
continuity in the role. While this change would create the risk that the DHS secretary might not have a strong
rapport with his or her intelligence chief, a greater degree of independence would reduce the risks of
politicization and would allow for greater continuity in implementing high-priority initiatives and maturing
the organizational culture.
The leadership of DHS and the relevant committees in Congress should work proactively to provide greater
transparency into the activities of the Office of Intelligence and Analysis. Largely because of security classification,
many of the activities of I&A are shielded today from public oversight. The result of this is a decrease in public
accountability—and to the extent that there is oversight in the form of coverage by the news media or
independent groups, that coverage is often incomplete or misleading.
One option to increase transparency would be a review, directed by the secretary in coordination with the
director of national intelligence, of the use of security classification and control markings with respect to
I&A’s activities. Because I&A’s budget is embedded within the much larger National Intelligence Program
budget, all of the details about the funding of I&A are classified, even for programs that otherwise are
unclassified and publicly detailed, such as its engagement with state and local fusion centers. In 2012, I&A
created the separate Homeland Security Intelligence Program budget with the intention of doing this, but
there is no public transparency with respect to this budget as well. DHS I&A also should be more forward-
leaning with proactive disclosure of its internal policies and procedures, the majority of which can be released
publicly with no apparent security risks.
30
31
32
33
34
Congress has a critical oversight role to play here as well. In the first decade of the department’s
existence, the House and Senate homeland security and intelligence committees held frequent oversight
hearings with I&A leadership, compelling I&A to produce public, unclassified testimony that provided details
on I&A programs and activities. These hearings gradually have decreased over time—and the majority of
hearings with I&A leaders in recent years have been panels on current threats, not oversight hearings on I&A’s
programs and operations. The House and Senate committees should hold public oversight hearings with I&A
leadership on an annual basis and compel the production of public testimony.
Conclusion
In its 2002 report, which put forward a detailed vision for homeland security intelligence, the Markle Task
Force on National Security wrote, “Information analysis is the brain of homeland security. Used well, it can
guide strategic, timely moves throughout our country and around the world. Done poorly, even armies of
guards and analysts will be useless.”
Nearly 20 years later, these words ring true, and it is incumbent on policymakers to assess and review the
performance of the DHS Office of Intelligence & Analysis and take steps to update and rebalance its
authorities and responsibilities. This reassessment and update of I&A’s role needs to be undertaken with
urgency, so that the office can anticipate risks more effectively and prepare DHS and other homeland security
stakeholders to address the complex and growing threats to the homeland that the United States faces today.
Appendix: DHS Intelligence & Analysis Organizational Overview
This brief organizational overview of I&A is intended to provide additional context to the narrative and
recommendations in this report. It briefly describes I&A’s organizational structure, budget and personnel,
authorities and responsibilities, priority mission areas, and the structure for Congressional oversight of the
office.
Leadership and Organizational Structure: The DHS Office of Intelligence & Analysis is led by an under
secretary for intelligence & analysis, who is a Senate-confirmed official and a direct report to the Secretary of
DHS. The principal deputy under secretary is the second-in-command in the office and is a career official. At
present, two deputy under secretaries report to these two leaders—one for Intelligence Enterprise
Operations, under which are I&A’s mission-focused analytic activities and its field operations—and one for
Intelligence Enterprise Readiness, which has responsibility for strategic planning and mission support
activities, including training, finance, and information technology. A Chief of Staff office also separately
supports the two senior officials at I&A.
Additional details on this structure are found in the organization chart below, released by DHS in 2019.
35
36
37
Budget and Personnel: The budget for the DHS Office of Intelligence and Analysis, like all intelligence
community elements, is not publicly disclosed due to security classification. However, DHS annually releases
budget documents for its Analysis and Operations account, which blends the budget for I&A and the Office of
Operations Coordination. In fiscal year 2020, the enacted Analysis and Operations budget was $284 million,
supporting 897 positions. DHS requested $312 million for FY 2021, in support of the same number of positions,
and in December 2020 Congress appropriated $298.5 million for this budget account.
Authorities and Responsibilities: I&A’s statutory authorities are found primarily in Title II of the Homeland
Security Act (as amended). Sec. 201 of the act establishes the under secretary for intelligence and analysis as
the chief intelligence officer of the department; subsection 201(d) outlines 23 specific responsibilities related
to intelligence and analysis, which are explicitly given to the secretary, not to the under secretary for I&A—but
then delegated to the under secretary in DHS Delegation 08503. These 23 provisions define I&A’s broad
responsibilities with respect to analysis, information integration, and dissemination, clarify its role with
respect to the intelligence community, and give it responsibilities for mission support in areas such as training
and information technology. Section 207 of the Homeland Security Act outlines the responsibilities of the
intelligence components of DHS with respect to I&A, and Sec. 210A outlines DHS’s responsibilities with
respect to support for state and local fusion centers.
Executive Order 12333 (as amended) also clarifies I&A’s authorities as a member of the intelligence
community, including general responsibilities in Section 1.4 of the order, and authority in Section 1.7(i) to
“collect (overtly or through publicly available sources), analyze, produce, and disseminate information,
intelligence, and counterintelligence to support national and departmental missions.”
DHS I&A also has taken on additional non-statutory responsibilities at the direction of the DHS secretary
over the past 15 years. For example:
Source: Department of Homeland Security’s Office of
Intelligence and Analysis, Office of Intelligence and
Analysis Organizational Chart (July 22, 2015),
https://www.dhs.gov/publication/office-intelligence-
and-analysis-organizational-chart.
In February 2007, Secretary Chertoff issued the DHS Policy for Internal Information Exchange and Sharing (also known as the “One DHS”
memo) and designated the assistant secretary for intelligence and analysis as the principal responsible for internal information-sharing among
DHS offices and components.
38
39
40
41
42
Priority Mission Areas: The FY2020–24 Strategic Plan for the Office of Intelligence & Analysis identifies
five priority mission areas for I&A: counterintelligence, counterterrorism, cyber, economic security, and
transnational organized crime. In each of these five areas, I&A has established Mission Centers that are
tasked to “collect information to address DHS and national intelligence priorities and provide available
reporting gathered by our Components and State, Local, Tribal, and Territorial (SLTT) partners to the
Intelligence Community (IC) and other customers.”
Congressional Oversight: The House and Senate intelligence committees have primary authorizing
jurisdiction over DHS I&A, and the Senate Select Committee on Intelligence receives the primary referral for
the nomination of the under secretary. But the Senate Homeland Security and Governmental Affairs
Committee (HSGAC) has the right (but not the obligation) to hold its own second hearing for the nominee as
part of the confirmation process. Both HSGAC and the House Committee on Homeland Security actively
engage with I&A as part of their broader oversight of the Department of Homeland Security and have
jurisdiction over the provisions in the Homeland Security Act that define I&A’s substantive responsibilities.
The House and Senate Appropriations Subcommittees for the Department of Homeland Security also play an
active role in oversight of I&A.
Further Reading
In addition to the sources cited in the endnotes, the following reports, articles, and videos were consulted
in the development of this report and provide additional relevant context on the DHS Office of Intelligence
and Analysis:
“The Evolving Terrorist Threat and the Importance of Intelligence to Protect the Homeland,” policy
event, Center for Strategic and International Studies, September 7, 2011, video and transcripts at
.
Congressional Research Service, The Department of Homeland Security Intelligence Enterprise: Operational
Overview and Oversight Challenges for Congress, (March 19, 2010), .
Government Accountability Office, DHS Intelligence Analysis: Additional Actions Needed to Address Analytic
Priorities and Workforce Challenges, (June 4, 2014), .
“The Homeland Security Intelligence Enterprise at 15: Looking Back and Assessing Future Challenges,”
GW Center for Cyber & Homeland Security, October 13, 2017, archived webcast available at
.
House Committee on Homeland Security Majority Staff, Reviewing the Department of Homeland Security’s
Intelligence Enterprise: Fighting Terrorism by Addressing Key Gaps, (December 2016),
1.
Inspectors General of the Intelligence Community, Department of Homeland Security, and Department of
Justice, Review of Domestic Sharing of Counterterrorism Information, (March 30, 2017),
.
In September 2010, Secretary Napolitano designated I&A as the lead office for the DHS Counterintelligence Program, following a period when
responsibility for counterintelligence activities within DHS had been bifurcated between I&A and the DHS Office of the Chief Security
Officer.
In April 2011, Secretary Napolitano established the under secretary for I&A as the vice-chair of the Department’s new Counterterrorism
Advisory Board, and subsequent leaders of I&A have served as the counterterrorism coordinator for DHS as a whole. In December 2020, the
Counter Threats Advisory Board Act, passed into law as part of the Consolidated Appropriations Act, codified that the under secretary for I&A
will serve as the chair of this board.
43
44
45
46
https://www.csis.org/events/evolving-terrorist-threat-and-importance-intelligence-protect-homeland
https://fas.org/sgp/crs/homesec/R40602.pdf
https://www.gao.gov/products/gao-14-397
https://www.youtube.com/watch?v=D7Uo4UqP-3U
https://www.hsdl.org/?
view&did=79735
https://www.oig.dhs.gov/reports/2017/review-domestic-sharing-counterterrorism-information/oig-17-49-mar17
Authors
“Protecting the Homeland: Intelligence Integration 15 Years after 9/11,” (Intelligence and National
Security Alliance (INSA), November 2016),
.
Brian Michael Jenkins, Andrew Liepman, and Henry H. Willis, “Identifying Enemies Among Us: Evolving
Terrorist Threats and the Continuing Challenges of Domestic Intelligence Collection and Information
Sharing,” (RAND Corporation, 2014),
.
About the Author
Christian Beckner is an Adjunct Senior Fellow at the Center for New American Security (CNAS),
supporting its work on homeland security and counterterrorism issues. His prior homeland security–related
experience includes six years on the professional staff of the Senate Homeland Security and Governmental
Affairs Committee, from 2007 to 2013, where he had lead responsibility for oversight of the DHS Office of
Intelligence and Analysis (I&A) and other homeland security intelligence programs, among other
responsibilities. From 2013 to 2017, he was Deputy Director at the Center for Cyber and Homeland Security at
the George Washington University, and since 2018 he has led member-focused cybersecurity and technology
programs at the National Retail Federation. Prior to working at the U.S. Senate, he held homeland security–
related positions at the Center for Strategic and International Studies, IBM, and the O’Gara Company.
Beckner has an MSc in foreign service and an MBA from Georgetown University and a BA from Stanford
University.
Acknowledgments
The author thanks the current and former DHS officials who have spoken candidly over the past 15 years
about I&A and its progress and challenges, including individuals who agreed to anonymously review the draft
report and provide their feedback on it. Thank you to Carrie Cordero and Katie Galgano for their leadership at
CNAS on homeland security issues, and to the editing and design team that supported the publication of this
report. The views expressed in this report are the author’s own and do not reflect the views of CNAS or any
other organization with which the author is affiliated. This project and briefing paper are made possible by the
generous support of the Democracy Fund.
Endnotes
Adjunct Senior Fellow
Christian Beckner is currently the senior director of retail technology and cybersecurity at the National Retail Federation. In this capacity, Beckner leads NRF’s CIO Council,...
https://www.insaonline.org/wp-
content/uploads/2017/04/INSA_WP_ProtectHomeland.pdf
https://www.rand.org/content/dam/rand/pubs/conf_proceedings/CF300/CF317/RAND_CF317.pdf
Christian Beckner
GET THE LATEST FROM CNAS
Sign up for weekly updates and analysis on the most important issues in U.S. national security.
EMAIL ADDRESS
(202) 457-9400 [email protected]
Center for a New American Security 1152 15th Street, NW Suite 950 Washington, DC 20005
YouTube
About
Events
Internships
Careers
Support CNAS
Follow CNAS
Press
Contact
© 2023 Center for a New American Security (en-US).
SUBSCRIBE