Police control of classified information

Mark Cottle ukcrypto at chiark.greenend.org.uk
Fri, 10 Apr 2009 11:38:27 +0100


On 9 Apr 2009 at 11:28, Ian Batten wrote:
> 
> 
> Is ``Police SECRET'' the same as real SECRET?  After all, we could  
> start marking company material as SECRET, but that wouldn't make it  
> the same as MoD SECRET.  Does material generated by the police and  
> marked SECRET by them imply the same rigour of handling as stuff  
> marked SECRET by the intelligence services?
> 

If I recall correctly from when I was a civil servant, there is a 
standard HM Government protective marking scheme, which should be 
common to all departments and agencies (including the police and 
intelligence community). It is also supposed to apply to any parts of 
the private sector which work for the public sector. Unfortunately 
this system is undermined by flaws which affect many other aspects of 
the machinery of government and public services. 

There is a widespread implicit assumption in government that by 
setting policy one determines how things occur in the real world - 
senior civil servants and elected politicians are particularly prone 
to this fallacy (because if they weren't they would have to face up 
to their relative ineffectuality). Things never work exactly as 
they're supposed to because policies have to be implemented by human 
beings. It doesn't matter how detailed and prescriptive you make your 
definition of SECRET or CONFIDENTIAL, there will always be a human 
interpreting it and there will always be variations in such 
interpretation. Of course you can send people through extensive 
training and refresher courses and you can circulate firm sounding 
memos reminding people of policy - but the pressures of the real 
world and the complexity of human psychology will still conspire to 
defeat attempts at truly common and consistent implementation. And 
that's before you get to the problem of environments where HM 
Government schemes apply alongside local or corporate schemes. 
(I seem to recall that the although the clearance level "DV" was 
supposed to be common across departments and agencies the 
intelligence services do their own vetting and in effect try to have 
their own separate DV category)

In the end, all systems that depend entirely on rigid implementation 
of policy by humans will tend to fail to some extent. They are no 
substitute for organizations staffed by intelligent people who are 
encouraged to act intelligently and protected from pressures which 
might force errors. Sadly the reality today seems to tend towards the 
former.

Mark Cottle
-----------------