Schneier links to a Wikipedia article about Sensitive Compartmented Information Facilities (SCIFs) and explains that he wanted to speak to the members of Congress in such a facility, but could not do so because he is denied access to such facilities as someone without the appropriate security clearances. And that puzzled me, and prompted me to read the Wikipedia article after reading Schneier's blog post submitted here, because I had been told years ago, when I definitely did not have the appropriate level of clearance for a SCIF (as I have never had and probably never will have) that I did have access to a special hearing room for one of the congressional intelligence oversight committees. I was inside the room at the time, with foreign visitors. (I was there as the interpreter for the foreign visitors.) I saw the hearing room back in the 1980s, as I recall, as part of a people-to-people program funded by the United States government that brought over people from other countries to look at how society works in the United States. The look inside the secure room was part of learning about how intelligence agencies in the United States are overseen by Congress. It was represented to us that when the room in the Capitol was closed up, it was impervious to any then-known form of surveillance. So now what Schneier says has me puzzled about whether or not there is any level of secure room between what he calls a "regular room" and a room that a United States citizen can only enter with a very high level of security clearance. It seems to me that there ought to be some kind of in-between room like that, precisely for meetings like the one Schneier just had. That would be better for effective congressional oversight, I think.
> So now what Schneier says has me puzzled about whether or not there is any level of secure room between what he calls a "regular room" and a room that a United States citizen can only enter with a very high level of security clearance.
There are. Schneier has it wrong unfortunately (or at least, was misinformed). You can enter a room approved for classified information without a clearance, you just must be escorted by someone who does have one. I've been in such a room myself without a clearance. I imagine what you were told about a special hearing room for one of the congressional intelligence oversight committees was true then and is still true now.
There is an unfortunate amount of misinformation flying around and it really detracts from what might otherwise be a productive discussion. I hope Schneier takes a but more time to double check his assertions in his next post.
Schneier, a non-governmental security researcher, was asked by the representatives to hold a meeting with them. He suggested to hold it in a secure meeting room. They tell him that he's not allowed in there.
There are standard processes in pretty much every government organization for escorting uncleared personnel into a SCIF. The fact that they chose not to in this case might indicate that they aren't taking this seriously.
Or that the NSA wanted to listen in, and this was just an excuse given so that a secure room would not be used. In fact, the whole thing could have just been an elaborate way to glean what's in the Snowden documents.
The whole security clearance thing is rather over-rated. Many people are immediately disqualified during the background investigation because they missed a payment on something once, or changed jobs too often, or were arrested, yet never convicted of a crime.
So the fact that someone does not qualify for a security clearance says very little about them as a person.
Thanks for this link. It's really fantastic to read some of the reasons for approval and denial.. Here's a good one that was really interesting to me for personal reasons since some of the facts are similar to mine:
"Applicant was born in Iran. He left Iran in 1985, was educated in the United States, married a native-born U.S. citizen, and became a U.S. citizen. He adopted an American name when he became a U.S. citizen, and he gave American names to his children. He has never returned to Iran. He held a public trust position for three years. His sister is a citizen and resident of Iran, but he has never visited her in Iran. His parents and two brothers are citizens and residents of the United States. His older brother held a security clearance for six years. Although his parents live in the United States, they spend about six months of each year visiting their daughter in Iran. Security concerns are mitigated by Applicant’s deep and longstanding relationships and loyalties in the United States. Clearance is granted. CASE NO: 12-11015.h1 "
Well, good luck to you! If you decide to go this route, I think the trick is making yourself very desirable to a defense contractor so that they'll sponsor your clearance and go to bat for you.
There are people that have filed for bankruptcy that managed to get a TS. It would be highly unusual to be rejected for missing a single payment, provided you are current while the investigation is going on. It would also be extremely unlikely that one gets rejected for changing jobs frequently, unless one of your former employers alleged misconduct of some sort.
The security process in my experience is very much about how much of what they find you were forthcoming with and announced on the forms.
If you missed a payment there is a section of the background paperwork you fill out proving information on it. It is very likely you would be denied if you left that section blank and had a missed payment, or if you changed jobs, or addresses very often and did not list all of them with proper references so they could verify them. But you will be denied basically because you lied not because of the missed payment or address changes.
I only have a passing knowledge of how data security is handled by the government, but I suspect that the fact that they are discussing classified material which Schneier should not have access to may make using an SCIF more bureaucratically challenging.
"My guess is that because I am untrusted, I might plant a bug in the SCIF. So it's less that I'm not allowed in, and more that if I was allowed in they would have to re-SCIF the place."
