Report of Investigation Agency Access to the Ssci Shared Drive on Rdinet

Read from the scan by GLM-OCR; expect the odd misread word.

# SECRET//NOFORN

SSCI on the RDINet $ ^{6} $ (Exhibit E). The report detailed that in the November 2010 timeframe, a member of the SSCI staff conducted a search on the RDINet that appeared intended to access a part of the system to which the member did not have authorized access.

## IV. (U) INVESTIGATIVE FINDINGS

## (U) Executive Summary of Investigative Findings

20. (U//FOUO) OIG investigation found support for allegations that CIA staff intentionally accessed the SSCI shared drive without authorization and exceeded authorized access. Additionally, three members of the RDINet IT team were not candid with OIG when interviewed and initially failed to disclose their recent investigative access to the SSCI shared drive. The investigation did not find support for the allegation that CIA performed real-time interception of SSCI communications for its review of the matter in question, however, CIA did review stored information that included (b)(3) and a review of some of the emails of SSCI Majority staff members on that network. The investigation found that D/CIA Brennan did not authorize the access or know the extent of the access, and OIG obtained conflicting testimony regarding whether or not D/CIA Brennan had any knowledge of a review performed on the SSCI shared drive (b)(3) until after it was completed. OIG investigation further found that the Director of Security authorized a review of the SSCI activities, including the reconstruction of the emails of SSCI staffers, following a stand-down order by the D/CIA and a request to withdraw authorization by the SSCI security officer. Finally, OIG investigation found that the CIA referral of criminal conduct by SSCI staffers was predicated on inaccurate information provided to the then-Acting General Counsel.

## (U) Absence of a Formal Memorandum of Understanding Regarding the Operation of RDINet

21. (U//FOUO) OIG did not find evidence that a final document was agreed upon by both the SSCI and CIA, nor any documentation that an agreement was signed by the CIA or the SSCI. OIG did find, however, that there was a common understanding reached between the CIA and the SSCI. Several letters between SSCI Chairman Feinstein, then SSCI Vice Chairman Bond, and then D/CIA Panetta were exchanged in 2009 that contained enough similar language to define a working agreement. The common understanding between the SSCI and CIA did contain language regarding a walled-off network shared drive for exclusive SSCI use, except when IT staff required access for maintenance or troubleshooting. In addition to the working agreement, the SSCI staff were provided a warning at each login that their "use of this system may be monitored and you have no expectation of privacy." OIG found that the (b)(3) installed at the outset of RDINet by CIC was connected in the normal course of

installed at the outset of RDINet by CIC was connected in the normal course of business and (b)(3) was collected in a manner consistent with the administration of

[6] (U) Pursuant to Section 1.6(b) of Executive Order 12333, as amended, and Sections VI.B, VII.A.4, and VIII.A of the 1995 Crimes Reporting Memorandum of Understanding between the Department of Justice and the Intelligence Community, the CIA is required to the report to the DOJ information concerning federal crimes.