Editor's Сhoice
September 4, 2022
© Photo: archives.gov

By Peter VAN BUREN

Let’s commit a potential crime by reading this: “Every day the Iraqis turn out military communiques threatening ‘severe punishment’ against Iran.” That line is classified, albeit from 1988. It was put into the public sphere via Wikileaks but never officially declassified. Technically it remains classified even though it is a click away for anybody with internet access.

It illustrates that if there are three things most everyone in government agrees on a) there are too many classified documents classified too highly, b) no one is going to risk their neck to be the first to start classifying less and c) handling all that classified is a major problem for even those trying to do the right thing.

As former CIA and NSA Director Michael Hayden said, “Everything’s secret. I mean, I got an email saying ‘Merry Christmas.’ It carried a top secret NSA classification marking.”

In 2010 Congress passed the Reducing Over-Classification Act, which mandated several steps to improve classification practices.  But in a minor act of legislative malpractice, Congress failed to define the meaning of the term “overclassification.”   So it is not entirely clear what the Act was supposed to reduce.

Eight blue-ribbon U.S. government commissions have addressed the subject of overclassification, never mind literally hundreds of agency taskforces, each deeming overclassification rampant. As recently as 2017 the Information Security Oversight Office (ISOO) at the National Archives and Records Administration (NARA; the people now seeking possession of the classified documents once held at Mar-a-Lago) concluded “too much classification impedes the proper sharing of information necessary to respond to security threats, while too little declassification undermines the trust of the American people in their government. Reforms will require adopting strategies that increase the precision and decrease the permissiveness of security classification decisions and improve the efficiency and effectiveness of declassification programs.” In addition to better government, less overclassification will save money. ISOO estimates in FY 2017 the government spent $18.39 billion on security classification, while private companies spent another $1.49 billion to work with federal agencies under the National Industrial Security Program. The cost to process a Top Secret clearance is between $3,000 and about $15,000It adds up.

The basic way documents end up (over)classified is because it is too easy to classify something, too tempting to over classify something, and nearly impossible absent being the president of the United States to declassify something. It works like this:

A junior State Department official or young Army Captain (the intelligence agencies follow a similar albeit more complex model given that they deem everything they do basically highly classified) sets out to write a report on Iran. He turns to his classified word processing network because, well, it’s Iran, and selects Confidential, Secret or Top Secret, each heading having pages and pages of definitions in Executive Order 12356 (there are some 2,865 security classification guides out there.) He’s heard his boss’ boss doesn’t have time to read anything but important stuff, so selected Secret to try and get some eye-time.

He can then select a handling guide, a designator of who among the 1.5 million Americans hold a full security clearance can actually legally read his document. Choice there include EXDIS – Exclusive Distribution Only, LIMDIS – Limited Distribution Only, NODIS – No Distribution (other than to persons indicated), STADIS – State Distribution Only, CHEROKEE – Limited to senior officials, NOFORN – No Foreign Distribution, LOU – Limited Official Use, SENSITIVE BU – Background Use Only, CONDIS – Controlled Distribution and US – US Government Only. Note the “and” as he can select more than one designator, for example, LIMDIS NOFORN SENSITIVE BU. When our drafter steps over the line into Top Secret documents or dealing with intelligence information, he gets a whole new set of handling designators, such as SCI, Secure Compartmentalized Information, that spells out a very small circle of people who may read what he has written. Information that originates with NATO or friendly foreign governments has its own set of designators. The list is not endless, but is pretty close to that in practice. The desire to limit documents to those who “need to know” can have tragic consequences, as discovered after 9/11 when it was found the CIA held data which the FBI might have used to stop the attack. Overclassification is a barrier to information sharing at its most critical junctures.

Who can make these designations? Any of 1.5 million Americans. Who can delete or downgrade a classification? In practice, the head of the originating agency or his designates (for example, the Secretary of State for State Department documents) and the President. It is easy to see the problem. Add to that that classification is done electronically while declassification is a manual, paper-based process.

There’s another problem, derivative classification. Derivative classification means the incorporating, paraphrasing, restating, or generating in new form information that is already classified, and marking the newly developed material consistent with the classification markings that apply to the source information. In other words, classified documents give birth to more classified documents when they’re quoted or used as source materials, a kind of classified snowball effect. The numbers are staggering: then-Bradley Manning leaked 251,287 classified documents from the State Department alone, covering a seven year period, an average of roughly 36,000 classified documents just from one agency, and a relatively small one at that compared to the military. It is possible to say no one can really say how many classified documents exist, though one estimate was as high as 49 million.

With so much classified, the real question is how to securely handle the tsunami. A thought experiment: imagine someone hands you a single document and says protect this at all costs. You might fold it carefully into a pocket, check to see it is there several times and hour, maybe put it in a safe at night. Now someone hands you 36,000 documents and says protect them at all costs and while you are trying to do that they keep producing additional classified documents and demanding you handle them properly. Let’s see how it worked in one personal example.

As a State Department official I wrote a personal blog, then permitted, on international affairs. I linked to one of the 251,287 documents Manning had released into the wild via Wikileaks, a short piece saying Senator John McCain traveled to Libya several years earlier to sell aircraft parts to Libyan leader Muammar Quaddafi. I had no personal knowledge of the event, building an argument against selling military spare parts to terrorists solely from the Wikileaks-hosted document.

State’s Office of Diplomatic Security charged me with mishandling classified information (the original Wikileaks doc was marked Confidential.) Arguments that I did not leak the document, did not ever physically possess the document, that media such as the New York Times, Washington Post and in my case USA Today were regularly publishing from documents marked classified by Wikileaks, and that the document I quoted from existed on the web for anyone to view were rejected by State, who referred my case to the Department of Justice for prosecution. In my defense the American Civil Liberties Union wrote “State reveals a penchant for superficially advancing national image at the cost of transparency. At its worst, it is yet another instance of the government making false claims of secrecy to avoid legal and political accountability.” DOJ refused prosecution without comment, and Diplomatic Security moved immediately to punish me internally under existing administrative procedures.

So what does all this mean for Donald Trump?

Of the thousands of documents seized from Mar-a-Lago, it is believed about 150 were marked classified. Is Trump going to jail for mishandling this classified material? Almost certainly not.

Can the classification system be twisted to create some sort of court room drama affecting him? Almost certainly yes. That decision rests with Attorney General Merrick Garland.

There is of course the elephant in the room, the possibility that during his time in office Trump declassified some of the documents, as he was able to do. Given that there is no set declassification procedures per se created by the various Executive Orders establishing the classification system, it could as easily come down to Trump’s word that he did declassify the documents against… well, no one’s word, simply a lack of evidence saying the documents were declassified. A jury could ultimately decide.

Trump could also effectively argue along the lines above that at least some of the documents were overclassified, misclassified, or no longer needed to be classified. This would take place in some forum, maybe a courtroom, paragraph-by-paragraph as most classified docs are usually delineated that way. This is very hard to envision. Remember, while there are negative consequences for improper disclosure, there aren’t for overclassification.

Trump could be prosecuted for some minor offense of mishandling classified material, highly unlikely the stuff a sitting Attorney General from one party brings against a would-be candidate from the opposing party, at least in an American democracy. Classified documents are mishandled all the time; in my own case, the government gave examples to include Agency Case No. 2005-0237, where a diplomatic courier lost 12 diplomatic pouches overseas including four bags containing Top Secret documents. A three-day suspension was mitigated to a letter of reprimand. In a second case, a confidential draft cable was found at a residence abroad. Agency Case No. 2006-002 saw a one-day suspension proposed. In each case, Security determined the classified material had been compromised. In FSGB Case No. 2005-042, an individual inadvertently left one Confidential and two Secret documents in a taxi. That individual was only proposed for a three-day suspension, subsequently mitigated to two days. Small stuff.

In the Wikileaks case, out of over 251, 287 documents released, the Department of Defense was force to conclude due to overclassification and the passage of time “no real harm” was done to the United States. DOD wrote with  “high confidence that disclosure of the Iraq data set will have no direct personal impact on current and former U.S. leadership in Iraq.”

Bottom line is there unlikely to be any real smoking gun coming out of the Mar-a-Lago basement. Overclassification and the precedent it has set all but assure Trump’s security transgressions, if any, were minor and likely inconsequential.

wemeantwell.com

The views of individual contributors do not necessarily represent those of the Strategic Culture Foundation.
Overclassification and Mar-a-Lago

By Peter VAN BUREN

Let’s commit a potential crime by reading this: “Every day the Iraqis turn out military communiques threatening ‘severe punishment’ against Iran.” That line is classified, albeit from 1988. It was put into the public sphere via Wikileaks but never officially declassified. Technically it remains classified even though it is a click away for anybody with internet access.

It illustrates that if there are three things most everyone in government agrees on a) there are too many classified documents classified too highly, b) no one is going to risk their neck to be the first to start classifying less and c) handling all that classified is a major problem for even those trying to do the right thing.

As former CIA and NSA Director Michael Hayden said, “Everything’s secret. I mean, I got an email saying ‘Merry Christmas.’ It carried a top secret NSA classification marking.”

In 2010 Congress passed the Reducing Over-Classification Act, which mandated several steps to improve classification practices.  But in a minor act of legislative malpractice, Congress failed to define the meaning of the term “overclassification.”   So it is not entirely clear what the Act was supposed to reduce.

Eight blue-ribbon U.S. government commissions have addressed the subject of overclassification, never mind literally hundreds of agency taskforces, each deeming overclassification rampant. As recently as 2017 the Information Security Oversight Office (ISOO) at the National Archives and Records Administration (NARA; the people now seeking possession of the classified documents once held at Mar-a-Lago) concluded “too much classification impedes the proper sharing of information necessary to respond to security threats, while too little declassification undermines the trust of the American people in their government. Reforms will require adopting strategies that increase the precision and decrease the permissiveness of security classification decisions and improve the efficiency and effectiveness of declassification programs.” In addition to better government, less overclassification will save money. ISOO estimates in FY 2017 the government spent $18.39 billion on security classification, while private companies spent another $1.49 billion to work with federal agencies under the National Industrial Security Program. The cost to process a Top Secret clearance is between $3,000 and about $15,000It adds up.

The basic way documents end up (over)classified is because it is too easy to classify something, too tempting to over classify something, and nearly impossible absent being the president of the United States to declassify something. It works like this:

A junior State Department official or young Army Captain (the intelligence agencies follow a similar albeit more complex model given that they deem everything they do basically highly classified) sets out to write a report on Iran. He turns to his classified word processing network because, well, it’s Iran, and selects Confidential, Secret or Top Secret, each heading having pages and pages of definitions in Executive Order 12356 (there are some 2,865 security classification guides out there.) He’s heard his boss’ boss doesn’t have time to read anything but important stuff, so selected Secret to try and get some eye-time.

He can then select a handling guide, a designator of who among the 1.5 million Americans hold a full security clearance can actually legally read his document. Choice there include EXDIS – Exclusive Distribution Only, LIMDIS – Limited Distribution Only, NODIS – No Distribution (other than to persons indicated), STADIS – State Distribution Only, CHEROKEE – Limited to senior officials, NOFORN – No Foreign Distribution, LOU – Limited Official Use, SENSITIVE BU – Background Use Only, CONDIS – Controlled Distribution and US – US Government Only. Note the “and” as he can select more than one designator, for example, LIMDIS NOFORN SENSITIVE BU. When our drafter steps over the line into Top Secret documents or dealing with intelligence information, he gets a whole new set of handling designators, such as SCI, Secure Compartmentalized Information, that spells out a very small circle of people who may read what he has written. Information that originates with NATO or friendly foreign governments has its own set of designators. The list is not endless, but is pretty close to that in practice. The desire to limit documents to those who “need to know” can have tragic consequences, as discovered after 9/11 when it was found the CIA held data which the FBI might have used to stop the attack. Overclassification is a barrier to information sharing at its most critical junctures.

Who can make these designations? Any of 1.5 million Americans. Who can delete or downgrade a classification? In practice, the head of the originating agency or his designates (for example, the Secretary of State for State Department documents) and the President. It is easy to see the problem. Add to that that classification is done electronically while declassification is a manual, paper-based process.

There’s another problem, derivative classification. Derivative classification means the incorporating, paraphrasing, restating, or generating in new form information that is already classified, and marking the newly developed material consistent with the classification markings that apply to the source information. In other words, classified documents give birth to more classified documents when they’re quoted or used as source materials, a kind of classified snowball effect. The numbers are staggering: then-Bradley Manning leaked 251,287 classified documents from the State Department alone, covering a seven year period, an average of roughly 36,000 classified documents just from one agency, and a relatively small one at that compared to the military. It is possible to say no one can really say how many classified documents exist, though one estimate was as high as 49 million.

With so much classified, the real question is how to securely handle the tsunami. A thought experiment: imagine someone hands you a single document and says protect this at all costs. You might fold it carefully into a pocket, check to see it is there several times and hour, maybe put it in a safe at night. Now someone hands you 36,000 documents and says protect them at all costs and while you are trying to do that they keep producing additional classified documents and demanding you handle them properly. Let’s see how it worked in one personal example.

As a State Department official I wrote a personal blog, then permitted, on international affairs. I linked to one of the 251,287 documents Manning had released into the wild via Wikileaks, a short piece saying Senator John McCain traveled to Libya several years earlier to sell aircraft parts to Libyan leader Muammar Quaddafi. I had no personal knowledge of the event, building an argument against selling military spare parts to terrorists solely from the Wikileaks-hosted document.

State’s Office of Diplomatic Security charged me with mishandling classified information (the original Wikileaks doc was marked Confidential.) Arguments that I did not leak the document, did not ever physically possess the document, that media such as the New York Times, Washington Post and in my case USA Today were regularly publishing from documents marked classified by Wikileaks, and that the document I quoted from existed on the web for anyone to view were rejected by State, who referred my case to the Department of Justice for prosecution. In my defense the American Civil Liberties Union wrote “State reveals a penchant for superficially advancing national image at the cost of transparency. At its worst, it is yet another instance of the government making false claims of secrecy to avoid legal and political accountability.” DOJ refused prosecution without comment, and Diplomatic Security moved immediately to punish me internally under existing administrative procedures.

So what does all this mean for Donald Trump?

Of the thousands of documents seized from Mar-a-Lago, it is believed about 150 were marked classified. Is Trump going to jail for mishandling this classified material? Almost certainly not.

Can the classification system be twisted to create some sort of court room drama affecting him? Almost certainly yes. That decision rests with Attorney General Merrick Garland.

There is of course the elephant in the room, the possibility that during his time in office Trump declassified some of the documents, as he was able to do. Given that there is no set declassification procedures per se created by the various Executive Orders establishing the classification system, it could as easily come down to Trump’s word that he did declassify the documents against… well, no one’s word, simply a lack of evidence saying the documents were declassified. A jury could ultimately decide.

Trump could also effectively argue along the lines above that at least some of the documents were overclassified, misclassified, or no longer needed to be classified. This would take place in some forum, maybe a courtroom, paragraph-by-paragraph as most classified docs are usually delineated that way. This is very hard to envision. Remember, while there are negative consequences for improper disclosure, there aren’t for overclassification.

Trump could be prosecuted for some minor offense of mishandling classified material, highly unlikely the stuff a sitting Attorney General from one party brings against a would-be candidate from the opposing party, at least in an American democracy. Classified documents are mishandled all the time; in my own case, the government gave examples to include Agency Case No. 2005-0237, where a diplomatic courier lost 12 diplomatic pouches overseas including four bags containing Top Secret documents. A three-day suspension was mitigated to a letter of reprimand. In a second case, a confidential draft cable was found at a residence abroad. Agency Case No. 2006-002 saw a one-day suspension proposed. In each case, Security determined the classified material had been compromised. In FSGB Case No. 2005-042, an individual inadvertently left one Confidential and two Secret documents in a taxi. That individual was only proposed for a three-day suspension, subsequently mitigated to two days. Small stuff.

In the Wikileaks case, out of over 251, 287 documents released, the Department of Defense was force to conclude due to overclassification and the passage of time “no real harm” was done to the United States. DOD wrote with  “high confidence that disclosure of the Iraq data set will have no direct personal impact on current and former U.S. leadership in Iraq.”

Bottom line is there unlikely to be any real smoking gun coming out of the Mar-a-Lago basement. Overclassification and the precedent it has set all but assure Trump’s security transgressions, if any, were minor and likely inconsequential.

wemeantwell.com