Report of Investigation Agency Access to the Ssci Shared Drive on Rdinet

Read from the scan by GLM-OCR; expect the odd misread word.

## SECRET//NOFORN

(U) Executive Summary

(U) On 30 January 2014, the CIA Office of Inspector General (OIG) opened an investigation into allegations that Agency personnel improperly accessed Senate Select Committee on Intelligence (SSCI) staff files and records on the CIA-operated and maintained Rendition, Detention, and Interrogation network (RDINet). On 30 January 2014, in accordance with Title 50 U.S.C. $ 3517(b) (5) $ , OIG reported the matter to the Department of Justice (DOJ) for potential violations of Titles 18 U.S.C. $ 2511 (Wiretap Act) and 18 U.S.C. $ 1030 (Computer Fraud and Abuse Act) $ 1. The investigation was predicated on information obtained as part of an OIG review into allegations made by SSCI Chairman Dianne Feinstein to Director of the Central Intelligence Agency (D/CIA) John Brennan that CIA personnel had "conducted one or more searches of the computer network at an offsite facility that the CIA had assigned exclusively to the staff of the [SSCI]." The OIG investigation was limited in scope to review the conduct of Agency officials, and did not examine the conduct of SSCI staff members.

(U) The OIG investigation determined the following:

1. (U) Five Agency employees, two attorneys and three information technology (IT) staff members, improperly accessed SSCI Majority staff shared drives on the RDINet.

o (U) The three IT staff members who accessed the SSCI Majority shared drive displayed a lack of candor about their activities when interviewed by the OIG.

2. (U) The Agency filed a crimes report with the DOJ, reporting that SSCI staff members may have improperly accessed Agency information on the RDINet. The OIG investigation determined that the factual basis for this referral was unfounded and the author of the letter had been provided inaccurate information on which the letter was based.

(b)(3)

3. (U) Subsequent to directive by the D/CIA to halt the Agency review of SSCI staff access to the RDINet, the Director of Security (D/OS) conducted a limited and incomplete investigation of SSCI activities on the RDINet that included (b)(3)

and a review of some of the emails of SSCI Majority staff members on that

network.

(U) RDINet was built at an Agency facility in June 2009 to support a SSCI review of the Agency's rendition, detention, and interrogation activities. RDINet was created to allow Agency staff to review documents for production to the SSCI, and to provide appropriate documents to the SSCI staff. Separate electronic shared drives were created on RDINet for the use of the SSCI Majority and Minority staffs and for the Agency personnel supporting the review and redaction