10.3 Counterterrorism, Counterintelligence & Special Investigations Directorates

10.3 Counterterrorism, Counterintelligence & Special Investigations Directorates

The Bureau of Diplomatic Security (DS) is a complex, multi-faceted law enforcement and national security organization. Headed by the Assistant Secretary of State for Diplomatic Security, DS fulfills its statutory mandates through specialized operational directorates. Each directorate is led by senior Diplomatic Security Service (DSS) Special Agents, Technical Security Officers (TSOs), and specialized intelligence analysts. To excel on the DSSAT and understand the operational realities of the Foreign Service, candidates must master the functional responsibilities, tactical assets, and investigative capabilities of DS's core operational directorates: High Threat Programs / Counterterrorism, Counterintelligence, Special Investigations, and Technical Security.

---

Counterterrorism & High Threat Programs Directorate (HTP)

In the post-9/11 national security landscape, protecting diplomatic personnel operating in volatile, non-permissive, and active combat environments represents one of DS's highest operational priorities. The High Threat Programs Directorate (HTP) manages security policy, tactical logistics, emergency contingency planning, and specialized protective resources for high-threat diplomatic posts worldwide (such as U.S. missions in Kabul, Baghdad, Kyiv, Mogadishu, and Port-au-Prince).

Mobile Security Deployments (MSD)

At the tactical tip of the spear within DS is Mobile Security Deployments (MSD)—the specialized tactical operational unit of the Diplomatic Security Service. Headquartered at the DSS Tactical Training Center in Virginia, MSD consists of elite Special Agents who undergo an intensive selection and training regimen emphasizing advanced counter-assault tactics, precision marksmanship, room clearing, close quarters battle (CQB), tactical medicine, post-blast investigation, vehicular counter-ambush driving, and specialized weapons systems.

MSD operates three primary tactical mission profiles:

1. Mobile Security Teams (MST): Deployed globally on short notice to reinforce embassy security during civil unrest, political collapse, or heightened terrorist threat environments. MSTs augment local Marine Security Guard (MSG) detachments and local guard forces, providing heavy tactical response capabilities.
2. Special Reaction Teams (SRT) & Evacuation Details: Conduct high-threat tactical non-combatant evacuation operations (NEOs) to extract U.S. diplomatic personnel, American citizens, and foreign national staff from besieged diplomatic facilities or hostile urban zones.
3. Mobile Training Teams (MTT): Deploy overseas to train host-nation tactical police units, foreign presidential guard details, and embassy protective bodyguards under the Antiterrorism Assistance (ATA) program.

Antiterrorism Assistance (ATA) Program

Managed under DS, the ATA program serves as the U.S. government's primary vehicle for building foreign partner-nation counterterrorism capacity. ATA provides advanced tactical training, bomb disposal equipment, border security technology, crisis management instruction, and cyber-investigation tools to law enforcement agencies in partner nations, creating an international front line against transnational terrorist networks.

---

Counterintelligence Directorate (DS/ICI)

Foreign intelligence entities (FIEs)—including hostile state intelligence services and state-sponsored cyber threat actors—actively target U.S. Department of State personnel, communications, and diplomatic facilities worldwide to acquire sensitive national security information, compromise foreign policy deliberations, and recruit insider assets.

The Office of Counterintelligence (DS/ICI/CI) within the Counterintelligence Directorate is tasked with detecting, deterring, and neutralizing foreign espionage directed against the Department of State:

Core Counterintelligence Functions

• Espionage Investigations: Investigates allegations of unauthorized disclosures of classified information, foreign intelligence contact violations, and espionage offenses committed by State Department employees domestic or abroad, coordinating closely with the FBI under Executive Order 12333.
• Defensive Counterintelligence Briefings: Conducts mandatory defensive CI briefings for foreign service personnel deploying to high-threat human intelligence (HUMINT) environments (such as Russia, China, and designated hostile posts), educating diplomats on foreign honeypot traps, surveillance techniques, and recruitment indicators.
• Foreign Contact & Travel Reporting: Enforces mandatory compliance with Security Executive Agent Directive 3 (SEAD 3), reviewing foreign contacts, unofficial foreign travel, and financial disclosures to mitigate foreign influence risks.
• Insider Threat Program: Manages the Department's Insider Threat Program pursuant to Executive Order 13587, utilizing continuous evaluation algorithms, user activity monitoring (UAM) on classified/unclassified networks, and multidisciplinary risk analysis to identify anomalous behavior indicative of insider leaks or espionage.

Technical Security Directorate (DS/ST) & TSCM

Physical counterintelligence is paired with advanced technical counter-surveillance managed by the Technical Security Directorate (DS/ST). Staffed by specialized Security Engineering Officers (SEOs) and Security Technical Specialists (STSs), DS/ST protects diplomatic facilities against technical espionage:

• Technical Surveillance Countermeasures (TSCM): Conducts sophisticated electronic sweeps of embassy facilities, ambassadorial residences, and Sensitive Compartmented Information Facilities (SCIFs) to detect clandestine listening devices (bugs), laser eavesdropping, unauthorized radio frequency (RF) transmitters, and compromised wiring.
• Cyber Threat Analysis & IT Security: Monitors Department of State computer networks globally to detect advanced persistent threat (APT) cyber espionage, unauthorized network intrusions, and malware targeting foreign policy databases.

---

Special Investigations Directorate & Criminal Enforcement

While protective security and counterintelligence represent key pillars of DS, DSS is fundamentally a federal law enforcement agency with broad statutory criminal investigative jurisdiction under 22 U.S.C. § 2709. The Special Investigations Directorate directs domestic and international criminal investigations, focusing primarily on transnational identity fraud, document integrity, and foreign corruption.

Passport & Visa Fraud Enforcement

The integrity of U.S. travel documents is the first line of defense for U.S. border security. DSS Special Agents hold primary federal jurisdiction over violations of Title 18 of the United States Code concerning travel document security:

• 18 U.S.C. § 1541 (Issuance Without Authority)
• 18 U.S.C. § 1542 (False Statement in Application and Use of Passport)
• 18 U.S.C. § 1543 (Forgery or False Use of Passport)
• 18 U.S.C. § 1544 (Misuse of Passport)
• 18 U.S.C. § 1546 (Fraud and Misuse of Visas, Permits, and Other Documents)

Passport and visa fraud are rarely isolated administrative offenses; they are primary enabling crimes utilized by international terrorist operatives, foreign intelligence officers, transnational organized crime syndicates, human traffickers, and drug cartels to bypass border controls and establish fraudulent identities in the United States.

Overseas Criminal Investigations Division (OCID) & ARSO-Is

To combat document fraud at the source, DSS established the Overseas Criminal Investigations Division (OCID), deploying Special Agents worldwide as Assistant Regional Security Officer Investigators (ARSO-Is) within consular sections at major U.S. embassies and consulates.

ARSO-Is perform critical law enforcement functions overseas:

• Consular Fraud Investigations: Partner with consular officers to investigate fraudulent visa applications, counterfeit civil documents, imposter rings, and corrupt visa vendor syndicates.
• Host-Nation Law Enforcement Liaison: Collaborate directly with foreign police, border guards, and immigration agencies to raid document forgery labs and arrest transnational human smuggling facilitators.
• Capacity Building & Training: Train foreign immigration officers and airline gate agents on advanced counterfeit document detection techniques.

International Investigations Division (IID) & Fugitive Apprehension

The International Investigations Division (IID) coordinates extraterritorial criminal cases involving international fugitives, extraditions, and complex cross-border crimes. DSS Special Agents work in tandem with the U.S. Marshals Service (USMS), FBI, INTERPOL, and foreign police agencies to locate, arrest, and return federal fugitives who have fled overseas to evade U.S. justice.

---

Threat Intelligence and Analysis Directorate (TIA)

Supporting all operational directorates is the Threat Intelligence and Analysis Directorate (TIA). TIA serves as the analytical intelligence engine of DS, synthesizing classified reports from the Intelligence Community (CIA, DIA, NSA, FBI), open-source intelligence (OSINT), and regional embassy reporting.

TIA produces Threat Level Designations (TLDs) for every U.S. diplomatic post worldwide, evaluating risk across four specific threat categories:

1. Terrorism: Assessment of transnational and localized terrorist group capabilities and intent.
2. Political Violence: Evaluation of civil unrest, war, insurgencies, and political instability.
3. Crime: Analysis of violent crime, street crime, and organized criminal activity affecting personnel.
4. Human Intelligence / Cyber Threat: Assessment of foreign intelligence service presence, espionage risk, and cyber exploitation capabilities.

Through these integrated operational directorates, the Bureau of Diplomatic Security delivers an end-to-end global security and law enforcement framework that protects American diplomacy worldwide.