Wednesday, April 6, 2016

Edward Snowden Background Materials

As I know a number of people in class are researching the Edward Snowden case for their presentation, I would like to offer them the following background data.

Firstly, Snowden knew of a vulnerability in the way that the U.S. government does security clearances, and he social engineered a fraudulent security clearance by exploiting this vulnerability.


Here is the Wikipedia article on the USIS vulnerability that is the root cause of the Snowden matter.

https://en.wikipedia.org/wiki/USIS_(company)

USIS provided security-based information and service solutions to both government and corporate customers, in the United States and abroad. Its corporate headquarters are in IdylwoodVirginia, near Falls Church, in Greater Washington, D.C.[1][2] USIS is a part of Altegrity Inc., a company headquartered in the Falls Church area that is owned by Providence Equity Partners.[3]

History[edit]

USIS was founded in 1996 after the investigative branch of the United States Office of Personnel Management (OPM) was privatized. Its creation was due to an effort of Vice President of the United States Al Gore's effort to reduce the size of the civil service. Originally known as U.S. Investigations Services Inc.,[3] it was at first an employee-owned company. Around 2000 the Carlyle Group invested in USIS and in 2003 Welsh, Carson, Anderson & Stowe committed capital to them. In 2007 Carlyle announced that it would sell USIS to Providence Equity Partners, a private equity firm, for US$1.5 billion.[4] In the fiscal year 2012 the company received $253 million for the contract work of the OPM, 67% of the OPM's contract spending for the fiscal year.[3]

Aaron Alexis background check[edit]

In 2007 an OPM contract investigator employed by USIS conducted the field work for the OPM-FIS background investigation[5] on Aaron Alexis, who has been accused of killing twelve people at the Washington Navy Yard on Monday, September 16, 2013.[6]

Edward Snowden background check and investigation[edit]

In 2011, OPM contract investigators employed by USIS conducted the field work for the OPM security clearance re-investigation on Edward Snowden, who leaked classified documents beginning on June 5, 2013.[7] On June 18, 2013, the Subcommittee on Efficiency and Effectiveness of Federal Programs and the Federal Workforce and the Subcommittee on Financial and Contracting Oversight, both of the U.S. Senate Homeland Security and Governmental Affairs Committee, held a joint hearing.[8] Michelle B. Schmitz, the OPM assistant inspector general for investigations, testified that USIS had been under investigation since late 2011, stating that it involves a "complicated contract fraud case."[8] Patrick McFarland, the OPM inspector general, did not reveal the reason for the investigation of USIS, and said when asked about Snowden's security clearance re-investigation, "We do believe there may be some problems."[7]

USIS response to accusations regarding its Alexis and Snowden checks[edit]

In a September 8, 2014, media release, the company insisted that, despite being "the target of inaccurate and misleading public allegations," USIS is a responsible government contractor. It labeled as myth reports that USIS botched its field work for OPM background investigations on Aaron Alexis and Edward Snowden, calling the claim "absolutely false." The company asserted that "OPM confirmed in sworn testimony before Congress on February 11, 2014 that the investigative file compiled by USIS on Aaron Alexis 'was complete and in compliance with all investigative standards.'" USIS also said it followed all OPM-mandated procedures and protocols in its background investigation of Edward Snowden. The company further clarified that it "does not grant security clearances and plays no role in making those determinations." The decision to grant or renew a clearance, said USIS, "is the sole responsibility of the federal government agency that requested the background investigation."[9]

Fraud investigation and charges[edit]

In June 2013 the office of Senator Claire McCaskill stated that USIS was "under active criminal investigation".[8] A statement from USIS stated that it was unaware that it was under criminal investigation.[8] It added that "USIS complied with that subpoena and has cooperated fully with the government's civil investigative efforts".[10] USIS, as the government's No. 1 provider of background checks for the United States, earned $253 million in awards this year alone.[11]
On January 23, 2014, the U.S. Department of Justice filed fraud charges against USIS. The suit was originally filed by a long time USIS employee, whistleblower Blake Percival. The suit, United States of America, ex rel Blake Percival vs USIS alleges that beginning in at least March 2008 and continuing through at least September 2012, USIS management devised and executed a scheme to deliberately circumvent contractually required quality reviews of reports of investigation of completed background investigations in order to increase the company's revenues and profits. USIS responded that the faulty checks "relate to a small group of individuals over a specific time period."[12]

Cyber attack[edit]

On July 7, 2014, the company said it was hit by a cyber attack prompting the US government to suspend its work with the firm. Experts who have examined the hack "believe it has all the markings of a state-sponsored attack," but did not detail possible suspects.[13][14]

OPM drops USIS[edit]

On September 9, 2014, the OPM confirmed it would not renew any of its contracts with USIS upon their expiration at month's end. USIS said it was "deeply disappointed with OPM's decision," which affects 3,000 employees handling a caseload that averaged about 21,000 background investigations a month for total fees of $320 million during the last fiscal year.[15]

References[edit]

  1. Jump up ^ "Contact Us." USIS. Retrieved July 1, 2013. "USIS Corporate Headquarters 7799 Leesburg Pike Suite 400 South Falls Church, VA"
  2. Jump up ^ "2010 CENSUS - CENSUS BLOCK MAP: Idylwood CDP, VA." U.S. Census Bureau. Retrieved July 1, 2013.
  3. Jump up to: a b c Taborek, Nick. "Al Gore Reinventions Helped Create USIS’s Outsourced Clearances." Bloomberg Businessweek. June 24, 2013.
  4. Jump up ^ Adler, Neil. "Private equity firm to buy USIS for $1.5B." Washington Business Journal. May 11, 2007. Retrieved July 2, 2013.
  5. Jump up ^ "Same firm checked background of Navy Yard shooter, Snowden"Yahoo News. 20 September 2013. Retrieved 9 December 2014.
  6. Jump up ^ http://news.yahoo.com/washington-gunman-hunted-victims-fbi-213651130.html
  7. Jump up to: a b Waterman, Shaun."[http://www.washingtontimes.com/news/2013/jun/21/nsa-leaker-ed-snowdens-clearance-had-problems-firm/Washington Times. June 21, 2013. Retrieved September 20, 2014.
  8. Jump up to: a b c d Davidson, Joe. "Firm that did background check on Snowden is under investigation." The Washington Post. June 20, 2013. Retrieved July 2, 2013.
  9. Jump up ^ http://www.usis.com/Media-Release-Detail.aspx?dpid=152
  10. Jump up ^ Lardner, Richard and Kimberley Dozier. "Watchdog faults background check of NSA leaker." Associated Press via Yahoo! News. June 20, 2013. Retrieved July 2, 2013.
  11. Jump up ^ Chris Strohm and Nick Taborek (8 July 2013). "Dead Among Those Interviewed in Faulty Background Checks"Bloomberg. Retrieved 9 December 2014.
  12. Jump up ^ Tom Hamburger and Debbi Wilgoren (23 January 2014). "Justice Department says USIS submitted 665,000 incomplete background checks"The Washington Post. Retrieved January 23, 2014.
  13. Jump up ^ Julian Hattem. "Major DHS contractor hit by cyberattack"TheHill. Retrieved 9 December 2014.
  14. Jump up ^ "Homeland Security Contractor Breached"The Daily Beast. Retrieved 9 December 2014.
  15. Jump up ^ Davenport, Christian. "USIS contracts for federal background security checks won't be renewed." The Washington Post. September 9, 2014. Retrieved September 9, 2014.

Further reading[edit]





Here is the Wikipedia entry of Snowden (a lot of it is PR fluff, but it does provide a resonable point for starting your research).

https://en.wikipedia.org/wiki/Edward_Snowden


No comments:

Post a Comment