Clearance Levels

[David_Biggins@usermgmt.com]

> -----Original Message-----
> From: Watkin Simon [mailto:Simon.Watkin@homeoffice.gsi.gov.uk]
> Sent: 24 October 2002 13:13
> To: 'ukcrypto@chiark.greenend.org.uk'
> Subject: RE: Clearance Levels
> 
> 
> > From: Ian G Batten [mailto:I.G.Batten@ftel.co.uk]
> > Sent: 24 October 2002 12:42
> > 
> > > > > http://www.homeoffice.gov.uk/ripa/ioccop.htm
> > 
> >   6.9 Each intercepting agency maintains a distribution list 
> > of persons
> >   who may have access to intercepted material or need to see any
> >   reporting in relation to it. All such persons must be 
> appropriately
> >   vetted.
> > 
> > Would Simon care to comment on the definition of ``appropriately
> > vetted'' and ``required level of security clearance''?  If the 
> > answer is
> > ``DV'' and ``Top Secret Codeword Caveat'' (*), that's one 
> > thing.  If the
> > answer is ``SC'' and ``Confidential'' that's another.
> > 
> > ian
> > 
> > (*) Or whatever the things are called --- I think PV is 
> enough for Top
> > Secret.
> 
> It is a matter for each intercepting agency to determine the 
> appropriate
> vetting of all persons who have access to intercept material 
> and of those
> who have access to summaries, reports or intelligence derived 
> from intercept
> material.

On this basis, an agency could decide, for reasons of its own, that no
vetting was required - "it's only traffic, not content" or whatever.

This is definitely part of what people find unacceptable about the idea
of extending snooping powers of any sort - the fact that increasingly
and inevitably there is less control as the snooping is extended.

The degree of vetting required for such access MUST be a function of the
type of data being accessed, not of the office the investigating person
works for.

This must be part of the national standard, applied equally to all
departments and agencies, otherwise it makes a joke of the whole
question of privacy.

> Although not an intercepting agency, all Home Office 
> officials who consider
> applications for interception warrants and advise the Home 
> Secretary on
> those applications have DV (Developed Vetting) clearance.

A standard that should be required nationally for all access to
interception or traffic monitoring data.   

Perhaps a lower level can be accepted for reverse lookup.

## dave ##