## Dod Instruction 5240.22 Counterintelligence Support To Counterterrorism And Force Protection

 Originating Component:
Office of the Under Secretary of Defense for Intelligence and Security Effective:
October 12, 2022 Releasability:
Cleared for public release.  Available on the Directives Division Website at https://www.esd.whs.mil/DD/. Reissues and Cancels:
DoD Instruction 5240.22, "Counterintelligence Support to Force Protection," September 24, 2009, as amended Approved by:
Ronald S. Moultrie, Under Secretary of Defense for Intelligence and Security
 Purpose: In accordance with the authority in DoD Directives (DoDD) 5143.01 and 5240.01 and the guidance in DoDD 5240.02, Executive Order 12333 as amended, and DoD Manual 5240.01, this issuance establishes policy, assigns responsibilities, and prescribes procedures for conducting and managing counterintelligence (CI) support to counterterrorism (CT) and force protection (FP).



## Table Of Contents


SECTION 1:  GENERAL ISSUANCE INFORMATION ........ 3
1.1.  Applicability. ........ 3 1.2.  Policy. ........ 3 1.3.  Information Collections. ........ 3
SECTION 2:  RESPONSIBILITIES ........ 4
2.1.  Under Secretary of Defense for Intelligence and Security (USD(I&S)). ........ 4 2.2.  Director for Defense Intelligence (CI, Law Enforcement, and Security). ........ 4 2.3.  Director, Defense Intelligence Agency (DIA). ........ 5 2.4.  Under Secretary of Defense for Policy. ........ 5 2.5.  OSD and DoD Component Heads. ........ 6
2.6.  Secretaries of the Military Departments. ........ 6 2.7.  CJCS. ........ 7
SECTION 3:  PROCEDURES ........ 8
3.1.  JTTFs. ........ 8 3.2.  CT and FP Information Sharing. ........ 9 3.3.  Time-Sensitive CT and FP Threat information Sharing Procedures. ........ 10 3.4.  Reporting CT and FP Threat Information to the FBI. ........ 11 3.5.  FPDs. ........ 11
GLOSSARY ........ 15
G.1.  Acronyms. ........ 15 G.2.  Definitions. ........ 16
REFERENCES ........ 18


## Section 1:  General Issuance Information 1.1.  Applicability.

This issuance applies to the OSD, the Military Departments, the Office of the Chairman of the Joint Chiefs of Staff (CJCS) and the Joint Staff, the Combatant Commands (CCMDs), the Office of Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities within the DoD (referred to collectively in this issuance as the "DoD Components").

## 1.2.  Policy.

In accordance with DoDD 5240.02, it is DoD policy to conduct CI activities to counter international terrorism and support the overall DoD FP effort.

## 1.3.  Information Collections.

The reports on terrorist threat information, referred to in Paragraph 2.3.c., do not require licensing with a report control symbol in accordance with Paragraph 1.b.(3) of Enclosure 2 to Volume 1 of DoD Manual 8910.01.

## Section 2:  Responsibilities 2.1.  Under Secretary Of Defense For Intelligence And Security (Usd(I&S)).

In addition to the responsibilities in Paragraph 2.5., the USD(I&S):

a.  Establishes policy for and provides oversight of DoD CI support to CT and FP. b.  Resolves issues concerning CI support to CT and FP that cannot be resolved by the OSD
and DoD Component heads.

## 2.2.  Director For Defense Intelligence (Ci, Law Enforcement, And Security).

Under the authority, direction, and control of the USD(I&S), the Director for Defense Intelligence (CI, Law Enforcement, and Security):

a.  Advises OSD and DoD Component heads in CI enterprise-wide support to CT and FP.
b.  Oversees DoD Components to ensure compliance with CI support to CT and FP policy. c.  Represents the USD(I&S) at forums concerning CI support to CT and FP.
d.  In accordance with DoD Instruction (DoDI) 2000.12, as part of the Planning, Programming, Budgeting, and Execution process, and in coordination with the CJCS, annually reviews the adequacy of intelligence, CI, physical security, and other security resources to determine whether they adequately support antiterrorism (AT) and CT program objectives.

e.  Assists and supports the CJCS in advising the Secretary of Defense of any changes needed to meet AT and CT requirements.

f.  Manages DoD participation in the Joint Terrorism Task Forces (JTTFs) and FP
detachments (FPDs).

g.  Oversees a DoD Global Watch capability--a collaboration between Defense criminal investigative organizations (DCIOs), Military Department CI organizations (MDCOs), the Pentagon FP Agency (PFPA), and the Federal Bureau of Investigation (FBI)--that coordinates, synchronizes, and de-conflicts inter-service or interagency information pertaining to criminal, terrorism, FP, and foreign intelligence entity threats and incidents with a DoD nexus.

## 2.3.  Director, Defense Intelligence Agency (Dia).

Under the authority, direction, and control of the USD(I&S), and in addition to the responsibilities in Paragraph 2.5., as the Defense CI Manager in accordance with DoDD 5240.02, the Director, DIA:
a.  Manages Defense CI enterprise-wide support to CT and FP implementation and resource planning.

b.  Collects, analyzes, and disseminates time-sensitive and non-time-sensitive terrorist and FP
threat information and assessments to supported commanders, in accordance with DoDIs 2000.12, 3115.17, and S-5240.17 and DoDM 5240.02.

c.  Provides functional management for the DoD JTTF and FPD programs. d.  Provides CI support to information operations to enable FP in accordance with DoDD 3600.01.

e.  Through the DIA Defense Combatting Terrorism Center.

(1)  Serves as the focal point for intelligence analysis pertaining to international terrorist and FP threats to DoD personnel, installations, and missions, in accordance with the August 2, 2011 Memorandum of Understanding (MOU) between the FBI and DoD and its January 18, 2017 Annex A.

(2)  Establishes worldwide DoD terrorist threat levels by country.

## 2.4.  Under Secretary Of Defense For Policy.

In addition to the responsibilities in Paragraph 2.5., the Under Secretary of Defense for Policy:
a.  In conjunction with the USD(I&S):
(1)  Serves as the DoD repository for existing agreements and understandings between DoD Components and the FBI.

(2)  Conducts reviews of appended CT and FP information sharing agreements, in accordance with the 2017 Annex A to the 2011 FBI/DoD MOU.

b.  In coordination with the USD(I&S), resolves any information sharing disagreements between the FBI and the DoD Components regarding CT and FP threat information sharing procedures, in accordance with the 2017 Annex A to the 2011 FBI/DoD MOU.

c.  In conjunction with the USD(I&S) and the CJCS, ensure the Mission Assurance Coordination Boards coordinate with the Defense Security Enterprise Executive Committee and Advisory Group, to address and resolve issues of mutual concern in exercising appropriate oversight of CT and FP threat information sharing procedures.

## 2.5.  Osd And Dod Component Heads.

The OSD and DoD Component heads:
a.  Approve assignment of personnel as task force officers (TFOs) and task force members
(TFMs) to the National Joint Terrorism Task Force (NJTTF) and JTTFs, as appropriate.
b.  Integrate CI support into FP efforts, including when establishing priority intelligence requirements.

c.  Produce CI assessments to meet AT and FP requirements of in-garrison and deployed forces in accordance with DoDI 5240.18.

d.  Conduct authorized CI activities, in accordance with DoDD 5240.02, DoDD 5240.01, and DoDM 5240.02, in support of AT and FP measures.

## 2.6.  Secretaries Of The Military Departments.

In addition to the responsibilities in Paragraph 2.5., the Secretaries of the Military Departments:

a.  Provide appropriately trained and credentialed personnel to serve:
(1)  At FPDs. (2)  As TFOs and TFMs at the NJTTF and at regional JTTFs.
b.  Provide staff as appropriate to the DoD Global Watch.
c.  Conduct liaison with Federal, State, local, and foreign agencies for the collection and exchange of international terrorist threat information, in accordance with Military Department policy.

d.  Collect, report, and disseminate time-sensitive and non-time-sensitive terrorist and FP
threat information to supported Components.

e.  Provide supported commands with international terrorist threat analysis and production.
f.  Provide tailored international terrorist briefings to supported commands as part of a CI
awareness and reporting program in accordance with DoDD 5240.06.

g.  In coordination with the FBI, and in accordance with the 2017 Annex A to the 2011
FBI/DoD MOU, conduct:
(1)  CI investigations of international terrorism threats in accordance with DoDI 5240.04.

(2)  CT operations and collections, in accordance with DoDI S-5240.09 and
DoDI S-5240.17.

## 2.7.  Cjcs.

In addition to the responsibilities in Paragraph 2.5., the CJCS:
a.  Receives, authorizes, and prioritizes requests for new FPD locations from the CCMDs, as described in Section 3.

b.  Assigns a representative from the Joint Staff Intelligence Directorate (J2) to the NJTTF
Executive Board, and the Joint Staff/J2 representative will ensure all relevant CT and FP information is shared with the Joint Staff Operations Directorate (J3), AT/FP Division (J33).



## Section 3:  Procedures 3.1.  Jttfs.

a.  The DoD will support national-level CT efforts through the assignment or detail of personnel as TFOs and TFMs to the NJTTF and JTTFs.  The TFOs and TFMs will work in partnership with the FBI and other TFOs and TFMs to enhance communication, coordination, and cooperation between the DoD and Federal, State, and local government agencies that represent the intelligence, LE, public safety, transportation, and homeland security communities.

(1)  DoD Federal LE officers and Army CI Special Agents (SAs) will serve as NJTTF
and JTTF TFOs, in accordance with the July 21, 2009 MOU between the FBI and DoD.

(2)  DoD Federal LE officers and Army CI SAs:
(a)  Are the only DoD personnel authorized for TFO assignment or detail to NJTTF
and JTTFs.

(b)  Will notify respective components, in accordance with component policies, of the following information that affects DoD equities:

1.  Developing threat information. 2.  Joint investigative information. 3.  Investigative leads and other intelligence.
(3)  TFOs assigned or detailed to JTTFs will perform duties under the control of FBI
leadership.  TFOs may:
(a)  Be assigned as the lead investigator for any CT matter under joint investigation, in coordination with the JTTF's leadership.

(b)  Serve as a liaison between assigned DoD Component and the FBI during CT
investigations.

b.  TFOs must:
(1)  Be credentialed by the FBI and deputized by the U.S. Marshals Service in accordance with Section 0.112 of Title 28, Code of Federal Regulations.

(2)  Have statutory authority to conduct LE activities to enforce Federal criminal codes.

(3)  Have graduated from one of the following criminal investigator training programs:
(a)  Federal Law Enforcement Training Center, Criminal Investigation Training Program.

(b)  U.S. Air Force Special Investigations Academy. (c)  U.S. Army Criminal Investigation Command SA Course. (d)  FBI Basic Field Training Course.
(e)  Drug Enforcement Administration Basic Agent Training Course.
(f)  Federal Law Enforcement Training Center Uniformed Police Training Program.
(4)  Possess a Top Secret security clearance with eligibility for access to sensitive compartmented information.

(5)  Qualify with their primary authorized firearm, in accordance with assigned DoD
Component's policy, within the 6 months immediately before assignment to a JTTF and on a continuing basis thereafter.

(6)  Complete deadly force training in accordance with assigned DoD Component's policy.

(7)  Not have a conviction for a crime of domestic violence. (8)  Meet assigned DoD Component's medical qualification and physical fitness requirements.

c.  DoD Components will:
(1)  Coordinate with the NJTTF before assigning TFOs to a JTTF.

(2)  If required by the JTTF, provide TFOs with an appropriately equipped governmentowned vehicle.

(3)  Provide TFOs with an authorized weapon, ammunition, raid jacket, body armor, and other duty gear, in accordance with DoD Component policy.

d.  Before assigning or detailing TFMs to serve at JTTFs, coordinate with the NJTTF and the MDCOs supporting the DoD Component, in accordance with DoDI O-5240.10.

## 3.2.  Ct And Fp Information Sharing.

DoD Components that identify CT and FP threat information will:
a.  Provide identified CT and FP threat information to the FBI via supporting MDCO, in accordance with DoDI O-5240.10.

b.  Inform the DoD Global Watch of CT and FP threat information that was shared with the FBI through the supporting MDCO.

## 3.3.  Time-Sensitive Ct And Fp Threat Information Sharing Procedures.

The DoD Components will immediately share time-sensitive CT and FP threat information as follows:
a.  In accordance with the 2017 Annex A to the 2011 FBI/DoD MOU, when the FBI
identifies a time-sensitive threat with a DoD nexus and notifies the DoD Global Watch and the NJTTF Military Operations Support Team, the DoD Global Watch will confirm receipt with the FBI and notify:

(1)  DCIOs.
(2)  MDCOs. (3)  PFPA. (4)  DIA.
b.  The DoD Global Watch will notify the Chief of Operations at the National Joint Operations Intelligence Center located in the National Military Command Center, who will, as appropriate, notify:

(1)  The National Joint Operations Intelligence Center, OSD Liaison Officer. (2)  OSD Component heads. (3)  CJCS, Vice CJCS, and the Director, Joint Staff.
c.  The MDCOs, DCIOs, and PFPA will notify respective chains of command and these DoD
Components:

(1)  The Military Departments.
(2)  The Defense Agencies, DoD Field Activities, and CCMDs, in accordance with the MDCO support responsibilities in DoDI O-5240.10.

d.  The National Joint Operations Intelligence Center OSD liaison officer will:

(1)  Inform senior OSD and Joint Staff leadership.
(2)  Inform the Joint Staff's Current Operations desk.
e.  In accordance with the 2017 Annex A to the 2011 FBI/DoD MOU, all other threats (i.e., non time-sensitive threats) will be:
(1)  Reported through the NJTTF Unit Chief or designee, who will forward the information to the DoD Global Watch, by email or phone; phone notifications will be followed up with written notification (e.g., email or letter).

(2)  The DoD Global Watch will confirm receipt and provide appropriate notification to the DIA Defense Combatting Terrorism Center and the appropriate Defense investigative elements responsible for international or domestic terrorism.

## 3.4.  Reporting Ct And Fp Threat Information To The Fbi.

The DoD Components will share CT and FP threat information with the FBI as follows:
a.  DoD Components that identify CT and FP threat information in the course of conducting CI, security, or LE activities will provide this information to the supporting MDCO, in accordance with DoDI O-5240.10, or DCIO, as appropriate.  The supporting MDCO or DCIO will then notify the FBI.

b.  DoD Components will inform the DoD Global Watch of CT and FP threat information that was shared with the FBI through the supporting MDCO or DCIO.

c.  PFPA will notify the DoD Global Watch of CT and FP threat information shared with the FBI.

## 3.5.  Fpds.

a.  DoD maintains a CI, CT, and FP presence in designated overseas locations through FPDs.
FPDs support the CCMDs by detecting and warning of threats to in-transit and assigned DoD
personnel and resources.  The Secretaries of the Military Departments assign MDCO SAs to FPDs, in accordance with the May 9, 2003 MOU between the Bureau of Diplomatic Security in the Department of State (DOS) and the DoD (or its successor agreement).  FPD office manning levels will be determined by the MDCOs, in coordination with the Director, DIA.

(1)  In accordance with Section 3927 of Title 22, United States Code, FPD members are under the direction, coordination, and supervision of the chiefs of mission.  FPDs maintain close operational synchronization with:

(a)  The regional security officer (RSO). (b)  The senior defense official/defense attache (SDO/DATT).
(c)  Other country team members, as appropriate.
(2)  In accordance with the 2003 DOS/DoD MOU (or its successor agreement), the MDCOs:

(a)  Have operational and administrative control of designated FPDs. (b)  Fund all international cooperative administrative support services in accordance
with DoDI 7060.06.
(c)  Fund the operational and maintenance costs of designated FPD.
(3)  The RSO has primacy for addressing all security issues affecting DoD personnel who are operating in-country under chief of mission authority.  The RSO is responsible for ensuring the FPD operates within the security guidelines and procedures established by the DOS, as outlined by the chief of mission, and in accordance with the 2003 DOS/DoD MOU (or its successor agreement).

b.  The FPD's primary mission is to detect and warn of threats to DoD personnel and resources in-transit at overseas locations without a permanent DoD CI presence.  The mission further includes serving as a force multiplier for the U.S. Embassy country team in support of the DoD presence and mission, which includes, but is not limited to:

(1)  Liaison.
(2)  Defense threat assessments.
(3)  Route and travel threat assessments. (4)  Foreign intelligence entity and international terrorist threat briefings.
(5)  DoD investigative lead reporting. (6)  Intelligence report production.
(7)  Conducting or assisting in vulnerability assessments of ports, airfields, other facilities, and routes used by in-transit forces.

(8)  CI support to combatting transnational organized crime.
c.  FPDs maintain liaison contact with host nation officials to assess an operational picture of the local intelligence, terrorist, and criminal threat.

d.  The CCMDs work through the SDO/DATT for tasking the FPD, in accordance with DoDD 5205.75.

(1)  The FPD will coordinate all activities with the SDO/DATT, in accordance DoDI C- 5105.81.

(2)  The CCMDs will keep the FPD advised of all projected force movements through its area of responsibility.

(3)  FPDs will communicate threat information directly to transiting units via established communication channels in a timely manner.  FPDs provide assessment findings and reports, threat information, vulnerability assessment data, and related FP information to the CCMD.

e.  Triennially, the Joint Staff will review, validate, and prioritize CCMD requests to establish FPDs.

(1)  In coordination with the Joint Staff/J2, Joint Staff/J3, and Plans Directorate, CCMDs prioritize requests for FPD locations within assigned area of responsibility and submit the requests to the Joint Staff after initial coordination with the relevant U.S. Embassy.

(2)  In coordination with the Joint Staff/J2, the Joint Staff/J3 consolidates the CCMD
requests and validates the following requirements; locations will not be selected for an FPD:
(a)  If there is an in-garrison or permanent party MDCO element within the identified country.

(b)  If the DIA-established intelligence and terrorism threats are both "LOW" and the DOS-established criminal threat is "MEDIUM" or lower.

(c)  Without appropriate coordination with the relevant U.S. Embassy or diplomatic post to verify acceptance of the FPD.

(d)  If the DOS does not maintain a permanent party RSO in-country.

(3)  Following validation of CCMD submissions against criteria identified in Paragraph 3.5.e.(2), the Joint Staff/J3 establishes a single prioritized list of remaining CCMD
FPD requirements, based on the assessment criteria agreed upon by the Joint Staff, MDCOs, DIA, and the CCMDs.  These criteria will include:
(a)  Intelligence, terrorism, and criminal threat levels identified at the time of the assessment.

(b)  Annual throughput of DoD personnel, aircraft, and vessels as reported by the CCMDs for the:

1.  Current fiscal year. 2.  Two immediately preceding fiscal years. 3.  Projected data for the following fiscal year.
(c)  The number of exercises conducted annually in-country in which DoD
participates.

(d)  CCMD prioritization of each identified location within its area of responsibility.

(4)  The Joint Staff/J3 will provide the prioritized list of CCMDs' FPD nominations to DIA.  The Director, DIA, in coordination with the MDCOs, the Joint Staff, and the USD(I&S), will establish a prioritized list based upon available MDCO resources.  CCMD FPD requirements that cannot be fulfilled due to limited MDCO resources will not be considered for staffing.

(a)  The MDCOs, the Joint Staff, and the USD(I&S) will review the triennial prioritization list and adjust the list based on changing circumstances such as current and projected increase in the volume of transient DoD personnel and country or regional threat conditions.

(b)  Unfilled requirements will remain on the triennial prioritization list to potentially be filled, contingent upon MDCO resources.

(5)  Any FPD requirement on the prioritized list which, during the triennial review, is found to meet one or more of the disqualifying factors identified in Paragraph 3.2.e.(2) will be:

(a)  Reviewed by the MDCOs, the Joint Staff, and the USD(I&S).
(b)  Considered for removal from the prioritized list or closure.
f.  The Joint Staff will evaluate CCMD requests to establish FPDs that develop outside of the triennial review.  If validated, the Joint Staff/J3, in conjunction with the Joint Staff/J2, will:

(1)  Prioritize the new requirement using the criteria established in Paragraph 3.6.e.(3).
(2)  Provide the results to the Director, DIA, who will coordinate with the MDCOs, to assess the requirement against available resources.

g.  If a CCMD or MDCO requests to close an FPD earlier then the triennial review, the request will be coordinated with the Director, DIA; the MDCOs; and the DOS.  If all parties concur, the Director, DIA will work with the appropriate MDCOs to close the FPD.



## Glossary G.1.  Acronyms.

ACRONYM
MEANING
AT
antiterrorism
CCMD
Combatant Command
CI
counterintelligence
CJCS
Chairman of the Joint Chiefs of Staff
CT
counterterrorism
DCIO
Defense criminal investigative organization
DIA
Defense Intelligence Agency
DoDD
DoD directive
DoDI
DoD instruction
DOS
Department of State
FBI
Federal Bureau of Investigation
FP
force protection
FPD
force protection detachment
J2
(Joint Staff) Intelligence Directorate
J3
(Joint Staff) Operations Directorate
JTTF
Joint Terrorism Task Force
LE
law enforcement
MDCO
Military Department counterintelligence organization
MOU
memorandum of understanding
NJTTF
National Joint Terrorism Task Force
PFPA
Pentagon Force Protection Agency
RSO
regional security officer
SA
special agent
SDO/DATT
senior defense official/defense attache
TFM
task force member
TFO
task force officer
USD(I&S)
Under Secretary of Defense for Intelligence and Security

## G.2.  Definitions.

Unless otherwise noted, these terms and definitions are for the purpose of this issuance.

TERM
DEFINITION Defined in the DoD Dictionary of Military and Associated Terms.
chief of mission
Defined in DoDD 5240.02 and DoDM 5240.01.
CI country team
Defined in the DoD Dictionary of Military and Associated Terms.
DCIO
The Air Force Office of Special Investigations, U.S. Army Criminal Investigations Command, the Defense Criminal Investigative
Service, and the Naval Criminal Investigative Service.

DoD Federal law enforcement officer
A civilian employee within the DoD who has statutory authority, upon probable cause, to conduct search and seizure of persons and things in accordance with the 4th Amendment of the United States
Constitution, to include arrests of civilians for violations of the
criminal laws of the United States.

DoD Global Watch
A central, collaborative environment where MDCO, DCIO, and PFPA representatives are co-located, to share information while
supporting their parent organizations and respective Service components.  DoD Global Watch personnel, on a 24-hour, 7-day-aweek basis, maintain situational awareness and recognize emerging law enforcement, foreign intelligence, terrorism, and force protection threats, to streamline notifications for their parent organizations and Service components.

FPD
A CI element that provides support to transiting DoD ships, personnel, and aircraft in regions of elevated threat. Defined in DoDD 5240.02.
functional management JTTF
Task force operating under the authority and direction of the FBI comprised of Federal, State and local law enforcement, intelligence,
public safety, transportation, and homeland security agencies. Defined in DoDD 5240.02.
MDCO
The Air Force Office of Special Investigations, U.S. Army Criminal Investigations Command, and the Naval Criminal Investigative
Service.

military criminal investigative organization TERM
DEFINITION
Military Operations Support Team
Sub-element of the NJTTF, coordinates, synchronizes, and deconflicts terrorism and FP related threat information and leads between FBI and DoD.
NJTTF
FBI-hosted multi-agency task force consisting of multiple agencies, collocated at the National CT Center, to conduct program
management of the JTTFs and coordinate the sharing of terrorism threat information and intelligence.

permanent DoD CI presence
For the purpose of this issuance, CI battalions, detachments, field offices, groups, operating locations, squadrons, resident agencies, or other entities operated by one of the MDCOs on a full-time basis in
support of service or CCMD steady state requirements.  Such
elements do not include expeditionary, deployed or otherwise temporary entities which fulfill non-steady state requirements,
regardless of the length of time during which such elements are in operation.

prioritization
Process by which the validated CCMD nomination for FP detachments are rank ordered using objective criteria established
within this issuance. Defined in the DoD Dictionary of Military and Associated Terms.
RSO TFM
An employee of a governmental agency or military member, has an active security clearance recognized by the FBI, and is authorized to have access to FBI facilities.  A TFM may be assigned or detailed on a full or part-time basis, as agreed upon in advance by the FBI and DoD.

TFO
A statutory law enforcement officer, authorized to carry a firearm, deputized pursuant to Title 18, United States Code, assigned to the
supervision of the JTTF, CI Task Force, or other Department of
Justice/FBI task force, issued Federal law enforcement credentials, has an active security clearance recognized by the FBI, and is authorized to have access to FBI facilities.  A TFO may be assigned or detailed on a full or part-time basis, as agreed upon in advance by
the FBI and DoD.

validation
Process by which CCMD nomination for FPDs are assessed against disqualifying conditions to ensure the proposed locations are legitimate requirements and may proceed to prioritization.

## References

Code of Federal Regulations, Title 28, Section 0.112 DoD Directive 3600.01, "Information Operations (IO)," May 2, 2013, as amended DoD Directive 5143.01, "Under Secretary of Defense for Intelligence and Security
(USD(I&S))," October 24, 2014, as amended
DoD Directive 5205.75, "DoD Operations at U.S. Embassies," December 4, 2013, as amended
DoD Directive 5240.01, "DoD Intelligence Activities," August 27, 2007, as amended DoD Directive 5240.02, "Counterintelligence (CI)," March 17, 2015, as amended
DoD Directive 5240.06, "Counterintelligence Awareness and Reporting (CIAR)," May 17, 2011,
as amended
DoD Instruction 2000.12. "DoD Antiterrorism (AT) Program," March 1, 2012, as amended DoD Instruction 3115.17, "Management and Oversight of DoD All-Source Analysis,"
November 16, 2016, as amended
DoD Instruction C-5105.81, "Implementing Instructions for DoD Operations at U.S. Embassies
(U)," November 6, 2008
DoD Instruction 5240.04, "Counterintelligence (CI) Investigations," April 1, 2016, as amended DoD Instruction S-5240.09, "(U) Offensive Counterintelligence Operations (OFCO),"
February 2, 2015, as amended
DoD Instruction O-5240.10, "Counterintelligence (CI) in the DoD Components," April 27, 2020 DoD Instruction S-5240.17, "(U) Counterintelligence Collections Activities (CCA),"
March 14, 2014, as amended
DoD Instruction 5240.18, "Counterintelligence (CI) Analysis and Production,"
November 17, 2009, as amended
DoD Instruction 7060.06, "International Cooperative Administrative Support Services (ICASS),"
May 15, 2012, as amended
DoD Manual 5240.01, "Procedures Governing the Conduct of DoD Intelligence Activities,"
August 8, 2016
DoD Manual 8910.01, Volume 1, "DoD Information Collections Manual:  Procedures for DoD
Internal Information Collections," June 30, 2014, as amended
Executive Order 12333, "United States Intelligence Activities," December 4, 1981, as amended
Memorandum of Understanding Between the Bureau of Diplomatic Security, Department of
State, and the Counterintelligence Field Activity, the Department of Defense Regarding
Force Protection Detachments, May 9, 20031
Memorandum of Understanding between the Federal Bureau of Investigation and the
Department of Defense Governing Information Sharing, Operational Coordination, and
Investigative Responsibilities, August 2, 20111
Memorandum of Understanding between the Federal Bureau of Investigation and the
Department of Defense Governing Information Sharing, Operational Coordination, and
Investigative Responsibilities, Annex A, "Counterterrorism Information Sharing,"
January 18, 20171

Memorandum of Understanding between the Federal Bureau of Investigation and the
Department of Defense, "Joint Terrorism Task Force," July 21, 20091
Office of the Chairman of the Joint Chiefs of Staff, "DoD Dictionary of Military and Associated
Terms," current edition
United States Code, Title 18 United States Code, Title 22, Section 3927 United States Constitution, 4th Amendment