Fundamentals Regarding Complex – Larger Organized Criminal Groups:
I’ve found through most of my career in the FBI (and since then) that the most significant crimes of interest (at least to law enforcement and prosecutors) rarely arrived as “gift wrapped” on the doorsteps of the FBI (or other agencies) ready to be prosecuted. In fact, most effective cases were ultimately identified via strong sources of intelligence, such as well-placed informants, cooperating witnesses (with leverage on them), or, in many recent instances, through inspired Subject Matter Experts (SMEs) from various cross-sector partners we increasingly relied on. We (in current and former law enforcement) should remain very mindful of this fundamental truth, as well as a few well-deserved criticisms from private industry (major victims) over the years, including:
When contacting the local Field Office, victims (individuals and organizations) were often told:
- The case that they shared was not significant enough to interest the prosecutors,
- The case should be referred to another Field Office, where the company was located (and that this matter is not in our Area Of Responsibility), or
- That you (the victim company) did not specify what the loss dollar amount was, or,
- Since the “bad guys” were at least in part overseas, the likelihood of prosecution or recovery was very low.
- The fraud described does not appear to be tied to Terrorism or Organized Crime and, as such, is not really a “Top Priority.”
Embracing this history – Sets the foundation or premise for the “Stir the Embers” Alliance.
Through the projects and initiatives outlined (and yet to be developed), this effort will:
** Develop more inspired resources (newly trained and via critical SME partners) that will:
- Build actionable intelligence packages regarding known (and yet to be identified) threat actors and their associates that can be referred to law enforcement for further action, essential for effective cybersecurity assessment.
- Identify areas of exploitation targeted by criminal groups related to new and evolving technologies employed by US private sector organizations to sell and market products and services, addressing emerging threats.
- Identify noteworthy anomalies in the behavior of criminal threat actors as those identified exploited areas are presented,
- Build sets of “early warning” identifiers regarding this behavior.
- In coordination with law enforcement partners, establish non-attributable online resources to expand the collection of intelligence regarding new and evolving criminal schemes related to digital asset protection.
- Connect “The Dots” of conduct and miscreant relationships that may in fact be tied to Terrorist Financing and/or international organized crime.