The United States maintains approximately 285 diplomatic facilities worldwide. Attacks on such facilities, and on U.S. diplomatic personnel, are not infrequent. U.S. Ambassador Christopher Stevens and three other U.S. personnel were killed in Benghazi, Libya on September 11, 2012, after armed individuals attacked and burned buildings on the main mission compound and subsequently attacked a second annex site where U.S. personnel had been evacuated. Five other U.S. Ambassadors have died by violent acts in the line of duty, although none since 1979. Since 1977, 66 American diplomatic personnel have been killed by terrorists. These events, along with recent attacks on U.S. embassies in Egypt, Sudan, Tunisia, Yemen, and Turkey, have drawn renewed attention to the challenges facing U.S. diplomats abroad, as well as to the difficulty in balancing concerns for their security against the outreach required of their mission. Under reciprocal treaty obligations, host nations are obligated to provide security for the diplomatic facilities of sending states. However, instances in which host nations have been unable or not fully committed to fulfilling this responsibility have sometimes left U.S. facilities vulnerable, especially in extraordinary circumstances. U.S. facilities therefore employ a layered approach to security including not only the measures taken by a host country, but also additional, U.S.-coordinated measures, to include armed Diplomatic Security agents, hardened facilities, U.S.-trained and/or contracted local security guards, and sometimes U.S. Marine Security Guard detachments. The inability to provide perfect security, especially against the evident threat of mob violence, has led some observers to question the deployment of personnel in high-threat environments. The Department of State's Assistant Secretary for Diplomatic Security, testifying in November 2009, underlined that "the Department currently operates diplomatic missions in locations where, in the past, we might have closed the post and evacuated all personnel when faced with similar threats." The rapid growth in the number of U.S. civilians deployed in the high-risk environments of Iraq, Afghanistan, and Pakistan spurred significant investment in recent years in the Department of State's capacity to provide security in dangerous areas through its Bureau of Diplomatic Security (DS). The challenges of providing security in these war-related areas may have also strained DS's capability to provide security for deployed diplomats in other hardship posts around the world. Observers have suggested that funding for embassy security follows a "boom and bust" cycle, in which major attacks are followed by a sudden influx of resources that may be difficult to expend in a well-planned manner. An influx of security-related resources in the 1980s, in response to the 1983/1984 bombings in Beirut, Lebanon, was followed by a lull in the 1990s when diplomatic security funding was greatly reduced prior to the 1998 attacks in Kenya and Tanzania. The subsequent State Department Accountability Review Board suggested that the preceding years of reduced spending for embassy security was a contributing factor to the vulnerability of the targeted embassies. This report provides background information on the authorities, regulations, and procedures in place at the Department of State regarding diplomatic security. It also describes several areas of potential congressional interest, including the Accountability Review Board process, whose conclusions the Secretary of State is required to report to Congress, and discussion of embassy security funding trends. It also examines the September 11, 2012, attack in Benghazi, Libya. The report may be updated to reflect ongoing developments. Under the 1963 Vienna Convention on Consular Relations and the 1961 Vienna Convention on Diplomatic Relations, nearly all countries around the world participate in reciprocal obligations regarding the diplomatic facilities of other countries in their territory. The United States is a state party to these conventions. Section 3 of Article 31 of the 1963 Vienna Convention on Consular Relations, "Inviolability of the consular premises," states that, other than in the case of fire or other disaster requiring prompt protective action, "the receiving State is under a special duty to take all appropriate steps to protect the consular premises against any intrusion or damage and to prevent any disturbance of the peace of the consular post or impairment of its dignity." Article 40 of the same Convention further states that "the receiving State shall treat consular officers with due respect and shall take all appropriate steps to prevent any attack on their person, freedom or dignity." An attack on an Ambassador is also covered under Article 29 of the 1961 Convention on Diplomatic Relations, which states "The person of a diplomatic agent shall be inviolable. He shall not be liable to any form of arrest or detention. The receiving State shall treat him with due respect and shall take all appropriate steps to prevent any attack on his person, freedom or dignity." The grounds of diplomatic missions are protected under the 1961 Vienna Convention on Diplomatic Relations. Article 22 (Section 1-3) of the Convention states: 1. The premises of the mission shall be inviolable. The agents of the receiving State may not enter them, except with the consent of the head of the mission. 2. The receiving State is under a special duty to take all appropriate steps to protect the premises of the mission against any intrusion or damage and to prevent any disturbance of the peace of the mission or impairment of its dignity. 3. The premises of the mission, their furnishings and other property thereon and the means of transport of the mission shall be immune from search, requisition, attachment or execution. The protection of U.S. government employees and facilities under Chief of Mission (COM) authority overseas from terrorist, criminal, or technical attack is the responsibility of the Secretary of State, as designated under the Omnibus Diplomatic Security and Antiterrorism Act of 1986, as amended. The act specifies that the Secretary of State must develop and implement (in consultation with the heads of other federal agencies having personnel or missions abroad where appropriate and within the scope of the resources made available) policies and programs, including funding levels and standards, to provide for the security of U.S. government operations of a diplomatic nature and foreign government operations of a diplomatic nature in the United States. Within the department, the Secretary has delegated these responsibilities to the Assistant Secretary for Diplomatic Security. The Assistant Secretary, who heads the Bureau for Diplomatic Security (DS), is responsible for, among other tasks: 1. Establishing and operating post security and protective functions abroad; 2. Emergency planning abroad; 3. Establishing and operating local guard services abroad; 4. Supervising the U.S. Marine Corps security guard program; 5. Liaising with U.S. private-sector security interests abroad; 6. Developing and coordinating counterterrorism planning, emergency action planning abroad, threat analysis programs, and liaison with other federal agencies to carry out these functions; 7. Developing and implementing technical and physical security programs, including security-related construction, radio, and personnel security communications, armored vehicles, computer and communications security, and research programs necessary to develop such measures. The mission of developing and implementing security policies and programs that provide for the protection of all U.S. government personnel (including accompanying dependents) on official duty abroad is executed through the DS, also established by the Omnibus Diplomatic Security and Antiterrorism Act of 1986, as amended. The DS provides protection to personnel, information, and facilities at over 273 embassies and consulates, and over 100 domestic Department of State locations. According to its website, "every diplomatic mission in the world operates under a security program designed and maintained by Diplomatic Security." The bureau is staffed by more than 34,000 employees worldwide—with roughly 90% of them contractors. Out of a total force of special agents of approximately 2,000, DS has nearly 800 special agents posted in regional security offices at over 250 posts worldwide. Its reach to diplomatic missions in 157 countries makes it the most widely represented American security and law enforcement organization around the world, according to its website. The Bureau of Diplomatic Security's workforce, excluding contractors, more than doubled between September 2000 and August 2012, as shown in Figure 1 . When serving abroad, DS special agents are referred to as regional security officers (RSOs). RSOs' responsibilities include not only managing security programs and formulating emergency contingency plans, but also providing the first line of defense for U.S. personnel and dependents, as well as facilities and sensitive information. RSOs are the primary advisor to the Chief of Mission (usually the Ambassador) on all security matters. In performing their functions, RSOs work closely with other groups including Marine Security Guards, surveillance detection teams, local guards, cleared American guards, local investigators, and host government officials. DS also provides Mobile Security Teams, dispatched from Washington, DC, to high-threat posts to conduct training for embassy personnel, their dependents, and local guards in protective tactics, as well as providing emergency security support, including protective security for COMs, surveillance detection operations, and assistance with post evacuations. DS also provides specially trained agents to lead contractor-provided personal protection teams and guard services in areas of ongoing conflict, where the host nation is unable or unwilling to provide the required level of security. In extreme situations, U.S. military assistance can be provided to the RSOs in the form of combat-equipped Fleet Anti-Terrorism Security Teams (FAST) provided by regional commanders. In an average year, DS receives over 1,000 threats and incidents against U.S. interests overseas. The security posture of each U.S. diplomatic facility varies based on the Department of State's assessment of local conditions. Regular reviews of threats to posts are conducted by the State Department. As part of this security review process, RSOs are required to inspect the physical security at each work facility every three years and to inspect potential properties before State Department acquisition. Senior officials stated that all posts were required to review their security posture in advance of the 9/11/12 anniversary, and in the wake of the attack on the U.S. interim facilities in Benghazi, Libya, all diplomatic posts were reportedly again ordered to review their security posture and to take all necessary steps to enhance it if necessary. The process of resource allocation to specific posts is based on a set of security indicators called the Security Environment Threat List (SETL). 22 U.S.C. §4865, "Security requirements for United States diplomatic facilities," requires that the list shall contain a section that addresses potential acts of international terrorism against United States diplomatic facilities based on threat identification criteria that emphasize the threat of transnational terrorism and include the local security environment, host government support, and other relevant factors such as cultural realities. Such plan shall be reviewed and updated every six months. Based on the SETL, DS, in consultation with other agencies, assigns threat levels to each post. According to the Government Accountability Office (GAO), six threat categories inform the SETL, including terrorism, political violence, and residential and non-residential crime. A rating is then assigned for each category, on a four-level scale. Critical: grave impact on American diplomats High: serious impact on American diplomats Medium: moderate impact on American diplomats Low: minor impact on American diplomats The protective measures for each post are dictated by the post's overall threat level. As of February 2012, over 50% of all posts were considered "critical" or "high" under the terrorism category of threat assessment. Prior to the Benghazi attack, the Department of State had been reviewing the SETL threat ratings with an eye toward better determining "the ratio between threat and vulnerability at diplomatic facilities overseas." DS increasingly provides security support at greater distances from capital cities and traditional embassy platforms, according to Department of State documents, "often in places and situations where the Security Environment Threat List and the security standards did not foresee today's realities." DS is therefore "developing guidelines whereby diplomatic facilities in contingency zones and other non-traditional platforms can be recognized as 'critical plus,'" which would require innovative security solutions or waivers of existing standards. While security arrangements for specific locations or individuals are not made public by the Department of State, diplomatic facilities typically rely on a combination of an outer layer of host nation-provided and/or contract guard forces, physical perimeter security, and State Department agents or contractors. These arrangements are overseen by the department's Bureau of Diplomatic Security (DS) and the deployed Regional Security Officer (RSO). Reporting to the Director of Diplomatic Security, the U.S. Marine Security Guard posted detachments to 152 U.S. diplomatic facilities around the world as of September 2012; 35 new Marine Guard detachments were requested by the department after the Benghazi attacks. Still, Marine Corps guards are thus present at many, but not all U.S. diplomatic facilities. Until recently, the primary mission of these specially trained Marines was primarily to prevent the compromise of classified U.S. government information and equipment. A secondary role was the protection of U.S. citizens at those facilities during crises. However, after the Benghazi attack, the memorandum of agreement between the Department of State and the Marine Corps was renegotiated, and the new mandate emphasizes protection of personnel as a primary mission of the Marine Corps Security Guards. The detachments, when deployed, are under civilian authority at all times, under a chain of command which includes the RSO and ultimately the Chief of Mission. Some observers have suggested that while any number of physical threats are taken into consideration by State Department planners, the threat of mob violence over a sustained time period is one that no facility, no matter how well fortified, can defeat in the absence of protection from the host nation's security forces. The coordinated bombings of the U.S. embassies in Kenya and Tanzania in 1998 spurred a period of intense congressional scrutiny of embassy construction. At that time, the Department of State determined that 195 (80%) of its overseas facilities did not meet security standards and should be replaced. In response, a funding program codified in the Secure Embassy Construction and Counterterrorism Act of 1999 (SECCA) provided for the following: the authorization of five years of funding at $900 million each year for Worldwide Security in the State Department's Embassy Security Construction and Maintenance Account (ESCM), as well as additional funds for Worldwide Security in the Diplomatic and Consular Programs account covering security upgrades at posts such as improved doors and windows, computer and software security improvements, purchase of secure vehicles, and other items. an accompanying five-year requirement that the Secretary of State submit to Congress each year a prioritized list identifying each diplomatic facility or diplomatic or consular post and compound in need of replacement or for any major security enhancements. a requirement that embassy emergency action plans address the threat of large explosive attacks from vehicles. new facilities (constructed after November 1999) would be required to: be on large enough sites to accommodate all non-military U.S. government personnel in one place (the "co-location" requirement), and ensure that any new facility would be no less than 100 feet from the embassy or consulate compound's perimeter (the "set back" requirement). Given this additional funding stream and heightened priority, the State Department in May 2001 elevated what had been the Office of Foreign Buildings Operations to a Bureau of Overseas Buildings Operations (OBO), led by an Assistant Secretary-equivalent Director/Chief Operating Officer, reporting directly to the Under Secretary of State for Management. OBO's responsibility is to direct the worldwide overseas building programs for all federal employees serving under the authority of the Chief of Mission in a country. With the Bureau of Diplomatic Security, OBO determines the security priority status of U.S. diplomatic facilities around the world and the steps needed to bring the facilities into compliance with State Department security standards. In 2001, under pressure to expedite the unprecedented, $21 billion construction program it began after the 1998 embassy bombings, the Department of State sought to use standardization to accelerate the delivery of new diplomatic facilities. OBO embraced a new Standard Embassy Design (SED) for new chanceries and consulates, in which new diplomatic compounds would be built based on one of three categories: small, medium, and large facilities, each with a pre-engineered design featuring high fences and 100-foot setbacks, as required by SECCA. The SED provided plans for the site, the main office building, annex buildings, perimeter protection, warehouse, shops, utility buildings, recreation centers, and Marine Security Guard quarters. The OBO contended that the pre-engineered plans reduced costs, expedited construction, and enhanced quality. Over 100 embassies were reportedly designed and built using the SED strategy. However, some critics of the SED designs suggested that the highly secure facilities present an unappealing, closed, unwelcoming, fortress image of the United States. Critics also argued that designs tended to push U.S. facilities away from urban centers (largely because SEDs, in implementing SECCA-mandated setback and co-location requirements, required large footprints, often available only in remote locations), making it more difficult for diplomats to do their work and for local officials and publics to engage with U.S. officials and programs. In short, the SED facilities were not only constraining U.S. diplomatic activity, critics argued; they were unable to uphold their representational role as demonstrations of the best the United States had to offer. Starting in 2010, OBO moved away from the Standard Embassy Design concept and introduced a new building initiative called Design Excellence (also referred to as the Excellence Initiative), inspired by a similar initiative launched by the General Services Administration in 1994 to improve the quality and civic value of domestic federal buildings. According to budget documents, the initiative was introduced "to ensure that every project serves the interests of U.S. diplomacy, meets or exceeds the highest quality industry building standards as well as mandated security standards, and provides the best value to the U.S. taxpayer." While continuing to prioritize security, the Excellence program moves away from uniformity and emphasizes site-specific architectural features and environmental considerations. Rather than placing U.S. facilities on large real estate plots outside of cities, embassies and consulates would, by their location in urban areas, "contribute to the civic and urban fabric of host cities." Designs would be "welcoming"; responsive to local culture; and would use "contextually appropriate and durable materials." The first project slated to be fully completed under this new approach is the new embassy compound in Mexico City, due for completion in 2019. The impact of the Benghazi attacks on the Department of State's Design Excellence concept has been debated, including in a July 10, 2014, hearing of the House Committee on Oversight and Government Reform. While State Department officials insist that Design Excellence places "paramount" importance on security considerations, a panel recommended by the post-Benghazi Accountability Review Board has criticized the initiative. The panel, led by former Under Secretary of State for Management Grant Green (himself an advocate and implementer of the SED), provided its report to the Department of State in May 2013. The report suggests that the entire design excellence approach be the subject of a detailed review focusing on its security implications. The panel reportedly found that DS officials had a number of reservations about the Design Excellence approach, in particular in comparison to SED, including the absence of a business case or cost-benefit analysis supporting Design Excellence; Design Excellence facilities would take longer to be built than SED facilities, and therefore leave more personnel vulnerable for longer; Design Excellence facilities would require greater scrutiny by overstretched diplomatic security officials to determine and deploy appropriate security measures; and could cause steeper learning curves for transferring officials; and smaller sites in urban locations prized by Design Excellence could pose greater security risks. Concern about the new approach is reportedly not limited to DS. William Miner, the retired former director of the OBO's design and engineering office, publicly confirmed DS's concern and registered his own opposition to the design excellence initiative, suggesting that while the SED initiative had been too focused on security and safety, the new approach risked going too far towards aesthetics. Miner expressed concern regarding the non-standard glass curtain wall facade planned for the new U.S. embassy in London—a feature most would agree is in line with the Design Excellence approach, even if it technically pre-dates it—calling it "fragile." According to the State Department, OBO's efforts have, since 2000, "delivered 111 new diplomatic facilities, enabling over 30,300 U.S. government employees to move into more safe, secure and functional facilities." However, in July 2013, the then-acting Assistant Secretary for Diplomatic Security testified that sub-standard facilities at roughly 110 posts need to be replaced with more secure buildings and 15 of the so-called high-threat posts lack facilities meeting security standards first set out after the 1983/1984 Beirut bombings. When faced with a deteriorating security environment or in the aftermath of a major security incident, a number of measures are at the disposal of Department of State officials to protect U.S. personnel and U.S. citizens more broadly. These range from travel warnings, to the temporary evacuation of Americans (diplomatic personnel, their dependents, and U.S. citizens as a whole), to closure of a post. The State Department, depending on local conditions, may recommend that diplomatic staff or dependents, or all U.S. citizens, leave the foreign country. Should local situations become unpredictable or unmanageable, a Chief of Mission may, upon the approval of the Under Secretary of State for Management, order an "Authorized Departure" for a given post. Such a step allows families of post employees and/or non-essential staff to depart on a voluntary basis and provides some flexibility in determining which employees or groups of employees may depart. Authorized Departure is an intermediate step in the events leading up to an Ordered Departure, or drawdown, of diplomatic mission personnel and their dependents. Ordered Departure is initiated in extraordinary circumstances when the embassy or consulate is no longer confident of the security of its personnel and families. Implementation of this status mandates the departure of all non-emergency mission staff and employees. Ordered Departure may be initiated by the Chief of Mission or the Secretary of State. For evacuation of U.S. citizens who are not post/mission employees or their dependents, the department may, in certain exceptional cases, provide departure assistance. The department encourages the use of existing commercial transportation options whenever possible and provides U.S. citizens with information on these options. Where the local transportation infrastructure is compromised, the department tries to arrange chartered or non-commercial transportation for U.S. citizens to evacuate. Involvement of the U.S. military in any evacuation is, the department emphasizes, a last resort; most evacuations employ commercial means and local infrastructure. The cost of any assistance is, by law, required to be provided "on a reimbursable basis to the maximum extent practicable." This means that evacuation costs are generally the responsibility of the U.S. citizen evacuated, who is asked to commit in writing to repayment of the U.S. government. Emergency financial assistance may be available for destitute evacuees. The Benghazi attack highlighted the dangerous environment in which some diplomatic posts operate, and raised questions about the decision-making processes behind situating diplomatic representations in high-threat locations and exposing U.S. personnel to heightened risks. According to Department of State regulations, a decision to open, close, or change the status of an embassy is made by the President; for lower-level representations such as consulates, the State Department's Under Secretary for Management may determine its status. Proposals to modify the status of a post are usually made by the Assistant Secretary of the regional bureau concerned. After the Benghazi attack, the department revised its procedures regarding the opening or reopening of a Critical Threat or High Risk High Threat Post. Under the new regulations, such an action would require the establishment of multi-bureau planning, implementation and support cells. These cells are designed to ensure proper thought has been given to key questions (including security concerns) prior to the post's opening, and that once open, the posts are properly resourced. The Accountability Review Board (ARB) process was first recommended by the 1985 Advisory Panel of Overseas Security led by Admiral Inman, which recommended that "Foreign Service Regulations be promulgated to require the Secretary of State to convene a Board of Inquiry with powers of establishing accountability in all cases involving terrorism or security related attacks that result in significant damage and/or casualties to United States personnel or property." This recommendation was codified by the Omnibus Diplomatic Security and Antiterrorism Act of 1986, as amended. The act requires the Secretary of State to convene an Accountability Review Board after a security-related incident, defined by the act as "any case of serious injury, loss of life, or significant destruction of property at or related to a U.S. Government mission abroad, or a case of a serious breach of security involving intelligence activities or a foreign government directed at a U.S. mission abroad (other than a facility or installation subject to the control of a U.S. area military commander)." Exceptions are made for incidents determined by the Secretary of State as not relating to security, and for facilities in Afghanistan and Iraq. The objective of such Boards, according to State's regulations, is "to foster more effective security of U.S. missions and personnel abroad by ensuring a thorough and independent review of security-related incidents.... the Board seeks to determine accountability and promote and encourage improved security programs and practices." Nineteen Accountability Review Boards have reportedly been empanelled since 1986. These have included ARBs on, for example, the August 1998 embassy bombings in Kenya and Tanzania, and the deaths of three Defense Department personnel serving in the U.S. Embassy in Pakistan in February 2010. However, most attacks are not the subject of an ARB; for instance, while by one accounting 273 "significant" attacks against U.S. diplomatic facilities and personnel took place between 1998 and 2012, only 12 ARBs were conducted during that time. The act specifies that a Board is to be convened not later than 60 days after the occurrence of an incident, although the Secretary can extend this for an additional 60 days if she determines that the additional period is necessary for the convening of the Board. A written decision by the Secretary of State to convene the Board, specifying its membership and duration, as well as its purposes and jurisdiction, is published in the Federal Register , or other similar document, if deemed appropriate by the Secretary. On forming a Board, the Secretary is also required to promptly inform the chairman of the Committee on Foreign Relations of the Senate and the Speaker of the House of Representatives that the Board has been convened, the membership of the Board, and other appropriate information about the Board. The written findings of an ARB are to include 1. the extent to which the incident or incidents with respect to which the Board was convened was security related; 2. whether the security systems and security procedures at that mission were adequate; 3. whether the security systems and security procedures were properly implemented; 4. the impact of intelligence and information availability; and 5. such other facts and circumstances which may be relevant to the appropriate security management of United States missions abroad. The recommendations of previous Boards have not been made public, other than the unclassified version of the Crowe ARB empanelled to study the 1998 Embassy attacks. The ARBs do not report directly to Congress. However, executive branch officials are required to report to Congress the recommendations of the ARB as follows: any recommendations made by the Board to the Secretary of State to improve the security and efficiency of any program or operation which the Board has reviewed, must be reported by the Secretary to Congress no later than 90 days after the receipt of such recommendations, including any action taken with respect to that recommendation. should the Board find any breach of duty by U.S. personnel, the Board notifies the head of the appropriate federal agency or instrumentality, who shall, not later than 30 days after the receipt of that finding, transmit to Congress a report specifying the nature of the case and a summary of the evidence transmitted by the Board; and the decision by the federal agency or instrumentality to take disciplinary or other appropriate action against that individual or the reasons for deciding not to take disciplinary or other action with respect to that individual. Ambassador Christopher Stevens and three other U.S. personnel (Sean Smith, Tyrone Woods, and Glen Doherty) were killed in an attack on the U.S. Special Mission Compound (SMC) and Annex in Benghazi, Libya on September 11, 2012. The attack resulted in the destruction and abandonment of the U.S. facilities. The State Department initially stated that U.S.-provided security was robust, consistent with other small missions in similar environments, and that Libyan guards fought the attackers alongside U.S. personnel. Ongoing congressional inquiries have focused on a number of questions, including whether sufficient resources were provided to protect the facilities and personnel in the context of an increasingly threatening security situation which led to the closure of the British consulate in Benghazi, among other international facilities. According to DS Bureau documents, a DS team was deployed to Benghazi in 2011 to establish a diplomatic presence there after the Embassy in Tripoli had closed due to deteriorating security. The team first established a temporary location; after subsequently identifying a more secure location, DS moved department personnel to a large villa compound which, according to DS, "significantly enhanced the security of all U.S. personnel in Benghazi." The Accountability Review Board report (see below), congressional testimony and investigations, and media reporting have described the critical threat environment in Libya and suggested that the temporary U.S. facilities in Benghazi had been reinforced in the months preceding the attack. According to the ARB report, "DS funded and installed in 2012 a number of physical security upgrades. These included heightening the outer perimeter wall, safety grills on safe area egress windows, concrete jersey barriers, manual drop-arm vehicle barriers, a steel gate for the Villa C safe area, some locally manufactured steel doors, sandbag fortifications, security cameras, some additional security lighting, guard booths, and an Internal Defense Notification System." Still, the ARB concluded that "Benghazi was also severely under-resourced with regard to certain needed security equipment." On the night of the attack, the Benghazi facilities were reportedly protected by an unarmed, contracted local guard force; a local militia; and armed DS agents. A U.S. Marine detachment had not been posted there, a situation that is not unusual for smaller posts at which classified information is not produced. The compound's security posture on the night of the attack included four locally hired unarmed guards, provided under contract with a British private security firm named Blue Mountain. The contract, which took effect in March, reportedly was worth $387,413 over one year. Among the tasks of the guards were the operation of a metal detector and inspection of visitors' bags. While armed security contractors protect many State Department facilities in high-threat locations, Libyan political sensitivities ruled out the use of armed private security guard forces. three armed members of the February 17 Martyrs Brigade, a local militia that participated in the anti-Qaddafi uprising. Given the lack of centralized Libyan governmental capacity to discharge its responsibilities as host nation to protect the U.S. facilities under the Vienna Convention (as described below), this function was provided by the Brigade, which trained with U.S. officials for this role. Its members, who were reportedly expected to provide their own weapons and ammunition, were paid $28 per day, what one press account describes as a "relatively standard wage." DS officials have testified that on the night of the attack, three February 17 Brigade personnel were present at the U.S. facilities. U.S. security personnel at the facilities on the night of the attack included five armed Diplomatic Security agents (three who were assigned to Benghazi, and two travelling with the Ambassador), according to testimony by a senior Diplomatic Security official. The compound could also call on a "well-trained U.S. quick reaction security team" stationed at an annex two kilometers away. Further complicating the U.S. security picture in Benghazi, numerous news reports have suggested that the annex was a classified CIA installation and that the quick reaction team mentioned above was part of a CIA presence. Personnel at the annex in Benghazi reportedly included a security force of approximately 10 individuals, who had on previous occasions shielded Ambassador Stevens when he left the U.S. facility. Members of this force were reportedly among those responding directly to the September 11 attack. The reaction team's responsibility, if any, for security at the main mission compound has not been publicly established. In the first week of October 2012, then-Secretary of State Clinton convened an accountability review board (ARB) to investigate the Benghazi attack, as required by Title III of the Omnibus Diplomatic and Antiterrorism Act of 1986. The Board was chaired by former Under Secretary of State Thomas Pickering and included five members, four of whom were designated by the Secretary of State and one by the intelligence community. The Secretary of State charged the Board "with determining whether our security systems and procedures in Benghazi were adequate, whether those systems and procedures were properly implemented, and any lessons that may be relevant to our work around the world." On December 18, the Accountability Review Board published its findings in an unclassified version of its report. The Board concluded that while responsibility for the September 11, 2012, attack rests solely and completely with the terrorists who perpetrated it, systemic failures in Washington, DC, led to key decisions that left the Special Mission in Benghazi with significant security shortfalls. Key leadership failures in the Bureau of Diplomatic Security (DS) as well as in the Bureau of Near Eastern Affairs (NEA) led to confusion over decision-making in relation to security and policy in Benghazi; these were likely factors in the insufficient priority given to the Benghazi mission's security-related requests, according to the Board. Decisions by the department's senior leadership regarding the nature and extension of Special Mission Benghazi's unclear status also left it outside normal procedures for funding and executing security measures, including office facility standards and accountability measures under the Secure Embassy Construction and Counterterrorism Act of 1999 and the Overseas Security Policy Board (OSPB). As the Board's report states, the Special Mission compound and Annex "was never a consulate and never formally notified to the Libyan government." This fact is referred to as a "key driver behind the weak security platform in Benghazi." The Board did not find breach of duty by any single U.S. government employee; it also found that security systems and procedures in place were implemented properly. U.S. intelligence provided no immediate specific warning of the attack, according to the ARB. The Board concluded there was no protest prior to the attack, which it refers to as "unanticipated" in "scale and intensity." Regarding the Special Mission's security posture, it found an inadequate number of Bureau of Diplomatic Security staff in Benghazi on the day of the attack. The Board characterized the Libyan government response as "profoundly lacking on the night of the attacks, reflecting both weak capacity and near absence of central government influence and control in Benghazi." The report also raises concern regarding the "loyalties" of the February 17 th Martyrs Brigade militia that provided security at the Special Mission compound under an agreement with the State Department. The Board also concludes that Congress "must do its part ... and provide necessary resources to the State Department to address security risks and meet mission imperatives." The ARB report lists a number of recommendations within six categories: Overarching Security Considerations; Staffing High Risk, High Threat Posts; Training and Awareness; Security and Fire Safety Equipment; Intelligence and Threat Analysis; and Personnel Accountability. Many of the recommendations will require additional resources for added personnel, training, and equipment. Among the Accountability Review Board's key recommendations are the following: review of the proper balance between acceptable risk and strengthened security for personnel in "high risk, high threat" posts, beyond reliance on host government support; re-examination of the organization/management of the DS Bureau to emphasize control for security policy for all U.S. overseas facilities; the new Diplomatic Security Deputy Assistant Secretary for High Threat Posts may be useful in this regard, as would having the Office of Intelligence and Threat Analysis report directly to the DS Assistant Secretary and provide threat analysis to all DS components, regional assistant secretaries, and Chiefs of Mission; establishment of minimum security standards for temporary facilities in high-risk environments, and collocation of U.S. government agencies when in the same metropolitan area, unless a waiver has been approved; restoring the Capital Security Cost Sharing Program to its full capacity of $2.2 billion, adjusted for inflation in FY2015; this program combines funds from all agencies represented overseas. Overseas Contingency Operation (OCO) funds also could be used to respond to security threats and vulnerabilities overseas; expansion of the Marine Security Guard (MSG) Program and coordination between DOD and DOS to identify additional resources for stronger capabilities at high risk posts; endorsement of DOS's request for increased DS personnel for high-risk posts, Mobile Security Deployment teams, and increased DS staffing in Washington for support; enhanced tour longevity, efforts to address language capacity, and better training on crisis response; provision of equipment such as fire safety and surveillance cameras, and exploration of options for non-lethal deterrents; better identification and action on indications of deteriorating threat situations; and revision of DOS regulations or amending relevant statutes to include disciplinary action when poor performance or unsatisfactory leadership by senior officials is related to a security incident. On September 25, 2013, the State Department's Office of the Inspector General (OIG) issued a "special review of the Accountability Review Board process." The review, initiated internally by the Inspector General's office, concluded that the Accountability Review Board process "operates as intended—independently and without bias—to identify vulnerabilities in the Department of State's security programs." However, it faulted the department for not having a single institutional nexus for weighing the risks to high-threat posts against the interests of maintaining presence there. The report calls for sustained high-level attention from State Department leaders to ensure ARB recommendation implementation. On the recommendations of the Benghazi ARB, the OIG report suggests that the department has taken implementation seriously and is making progress, but may not be meeting the ARB's intent on issues ranging from the security role of regional assistant secretaries, to the development of minimum security standards for occupancy of temporary facilities, to tripwire guidance. The protection of U.S. government employees and facilities under chief of mission authority overseas from terrorist, criminal, or technical attack is the responsibility of the Secretary of State. The Benghazi attack prompted the department to take several actions. In the immediate aftermath, the department ordered all posts to review their security posture and to take all necessary steps to enhance it if necessary. Shortly thereafter, five Interagency Security Assessment Teams (ISATs) were deployed to 19 posts in 13 countries to undertake urgent reviews of high-threat posts. In order to ensure consistent focus on the most endangered locations, State also reorganized its Diplomatic Security Bureau by establishing a new Deputy Assistant Secretary for High Threat Posts to oversee security arrangements for a number of so-designated countries. In addition to the above steps, then-Secretary of State Clinton convened an accountability review board (ARB) to investigate the Benghazi attack. More information on the State Department's actions in response to the Benghazi attack is available in CRS Report R43195, Securing U.S. Diplomatic Facilities and Personnel Abroad: Legislative and Executive Branch Initiatives , by [author name scrubbed]. The appropriation of funds for embassy security is one area in which Congress is particularly active. Title I, Section 2 (k) of the State Department Basic Authorities Act of 1956 states that the Secretary of State "may use funds appropriated or otherwise made available to the Secretary to provide maximum physical security in Government-owned and leased properties and vehicles abroad." The original authorization to use appropriated funds designated for embassy security in the Department of State's Embassy Security Construction and Maintenance (ESCM) account is derived from the Secure Embassy Construction and Counterterrorism Act of 1999. The Foreign Relations Authorization Act of 2003 increased the authorization levels of the original legislation. Because Congress has not passed subsequent foreign relations authorization legislation, the authorization of appropriations for embassy security purposes is derived from appropriating funds for "Worldwide Security Upgrades" in the Department of State, Foreign Operations appropriations legislation and in provisions in the same annual appropriation stating that "Funds appropriated by this Act ... may be obligated and expended notwithstanding" provisions in the Department of State Basic Authorities Act of 1956 requiring an authorization of funding before appropriations can be obligated or expended. Within the Department of State budget, virtually all of the embassy and diplomatic security funding is within five subaccounts: Worldwide Security Protection (WSP), within the Diplomatic and Consular Programs (D&CP) account; Worldwide Security Upgrades within the Embassy Security, Construction, and Maintenance (ESCM) account; Diplomatic Security (DS); Counterterrorism within the Diplomatic and Consular Programs account (D&CP); and Diplomatic Security within the Border Security Program (BSP). WSP, the largest component of security-related funding within the Department of State, provides for a safe and secure environment overseas for personnel promoting the interests of the United States. It provides for the security of life, property, and information. WSP supports numerous security programs including a worldwide guard force protecting overseas diplomatic missions and residences, as well as domestic facilities. As part of what the department calls a Security Realignment Initiative, many DS-related salaries and related costs from DS and other bureaus have been requested under WSP (rather than D&CP) for the first time in FY2015. The Worldwide Security Upgrades (WSU) subaccount within ESCM provides funding for bricks and mortar-type of security needs. It funds the Department of State's portion of the Capital Security Cost Sharing that combines with funds from other agencies represented overseas for planning, design, and construction of secure new embassy compounds. It also funds ongoing security activities and security-related maintenance. The Bureau of Diplomatic Security, funded under D&CP, is the law enforcement and security arm of the Department of State. DS protects people, property, and information. It conducts international investigations, provides threat analysis, and focuses on cybersecurity, counterterrorism, personnel security, and security technology. The Bureau of Counterterrorism (CT), funded within D&CP, leads the U.S. government in counterterrorism diplomacy and provides an on-call capability to respond to terrorist incidents worldwide. The Diplomatic Security subaccount within the Border Security Program (BSP) guards domestic consular affairs facilities. It also coordinates and investigates security issues related to U.S. visas and passports. Table 1 below provides base funding (also referred to as regular or enduring appropriations) that is available to all overseas facilities, and total security funding requested and enacted for the five security-related accounts from FY2008 to the FY2015 funding request. Total security includes the base funding plus supplemental and/or Overseas Contingency Operations (OCO) funding for embassy security that is available primarily for Iraq and other frontline states. Supplemental funds were requested and enacted for FY2008, FY2009, and FY2010. OCO funds were requested and enacted for FY2012, FY2013, FY2014, and requested for FY2015. Supplemental and OCO security money has been temporary funding largely for war-related security measures in Iraq. The base total is for diplomatic security activities in the rest of the U.S. facilities around the world, but may also include some ongoing security funding for Iraq, Afghanistan, and Pakistan. Following are some observations derived from the data shown in that table: The FY2013 request represents the largest request for total security funding at $4.96 billion. More than half was designated as OCO funding. That year, Congress appropriated $4.76 billion for total embassy security, more than half as OCO funds. At $3.71 billion, FY2014 was the peak year for State Department base security requests . The highest level of base embassy security funding passed by Congress ($3.78 billion) also was in FY2014. For total security funding, Congress provided less than was requested every year except FY2009. For base funding, Congress only provided more in FY2014. Total security funding as a percentage of Administration of Foreign Affairs expenditures was highest (40%) in FY2014 and also was the highest (32%) as a percentage of total State Department funding that same year. The Benghazi Accountability Review Board report, released on December 19, 2012, said, "The solution requires a more serious and sustained commitment from Congress to support State Department needs, which, in total, constitute a small percentage both of the full national budget and that spent for national security. One overall conclusion in this report is that Congress must do its part to meet this challenge and provide necessary resources to the State Department to address security risks and meet mission imperatives." The ARB also recommended that the Department of State work with Congress to restore the Capital Security Cost Sharing Program to its full capacity, adjusted for inflation, of $2.2 billion in 2015, for up to a 10-year period. Additionally, the ARB recommended that State work with Congress to make OCO funds available for security at high risk/high threat posts, and seek greater flexibility for OBO to use its funds for security threats at temporary facilities in high threat environments. As Congress examines funding levels for the purpose of properly securing American personnel, embassies, and information around the world, it continues to do so in a climate of shrinking budgets; proposed funding increases might be met with calls for offsetting cuts elsewhere or co-locating overseas facilities. A recent example of cost-saving considerations was the Department of State's plans to co-locate the U.S. Embassy to the Holy See within the U.S. Embassy to Italy compound in Rome. This plan was decided in keeping with the general ARB recommendations about co-locating multiple U.S. missions in the same city, as well as a specific 2008 Inspector General report that cited security concerns and leasing costs. On its completion in 2015, the move is expected to improve security and save an estimated $1.4 million a year, according to the Department of State. The Consolidated Appropriations Act, 2014, allowed funds to be used for this purpose, under the condition that the Secretary of State reports to Congress in writing that it will remain independent from other U.S. missions in Rome and that the relocation will not increase annual operating costs, will not reduce staff, and will enhance overall security of the U.S. Embassy to the Holy See. Of continuing concern is the possible effect, barring the enactment of a new budget deal, that the Budget Control Act of 2011 (BCA, P.L. 112-25 ) could have on diplomatic security funding in FY2014 and beyond. FY2013 across-the-board spending reductions were implemented at an estimated 5% reduction with an additional 0.032% rescission, according to Section 3004, Division G, P.L. 113-6 . Meeting BCA spending caps set through FY2021 by reducing embassy security funds could undermine future security funding needs. Adding to the difficulty of meeting future security needs around the world is the unpredictability in the timing of funding bills being passed by Congress. Fiscal years may not be in sync with new increasing needs or with contracts. When Congress passes funding bills well into the new fiscal year, or passes continuing resolutions in place of spending bills for the remainder of the fiscal year, the agency is left to guess what annual funding it can expect and has fewer months to spend the funds once received. A broader aspect of the funding debate is whether the United States can afford to maintain facilities and adequate security everywhere, especially in nascent democracies that are often unstable and unpredictable. If embassy security is the responsibility of the local government, but that government does not have the capability required to keep American personnel safe, the U.S. government must weigh the security risks and costs of keeping a U.S. presence in such environments.

Summary: The United States maintains about 285 diplomatic facilities worldwide. Attacks on such facilities, and on U.S. diplomatic personnel, are not infrequent. The deaths of Ambassador Christopher Stevens and three other U.S. personnel in Benghazi, Libya, on September 11, 2012, along with attacks that week on U.S. embassies in Egypt, Sudan, Tunisia, and Yemen, drew renewed attention to the challenges facing U.S. diplomats abroad, as well as to the difficulty in balancing concerns for their security against the outreach required of their mission. Congress plays a key role in shaping the response to these challenges, such as by providing resources for diplomatic security and examining security breaches overseas. The inability to provide perfect security, especially against the evident threat of mob violence, has focused particular scrutiny on the deployment of diplomatic personnel in high-threat environments. The Department of State currently maintains a presence in locations faced with security conditions that previously would likely have led State to evacuate personnel and close the post. Under reciprocal treaty obligations, host nations are obligated to provide security for the diplomatic facilities of sending states. However, instances in which host nations have been unable or not fully committed to fulfilling this responsibility have sometimes left U.S. facilities vulnerable, especially in extraordinary circumstances. U.S. facilities therefore employ a layered approach to security including not only the measures taken by a host country, but also additional, U.S.-coordinated measures, to include armed Diplomatic Security agents, hardened facilities, U.S.-trained and/or contracted local security guards, and sometimes U.S. Marine Security Guard detachments. The rapid growth in the number of U.S. civilians deployed in the high-risk environments of Iraq, Afghanistan, and Pakistan spurred significant investment in recent years in the Department of State's capacity to provide security in dangerous areas through its Bureau of Diplomatic Security (DS). However, it simultaneously placed unprecedented burdens on DS's capability to carry out this mission successfully in these and other challenging locations. Most of the funding for the protection of U.S. missions abroad is provided through the Worldwide Security Protection (WSP) component of the State Department's Diplomatic & Consular Programs (D&CP) account and through the Worldwide Security Upgrades (WSU) component of the Embassy Security, Construction and Maintenance (ESCM) account. The total security funding requested for FY2015 is about $4.76 billion. This report provides background information on the organization, practice, and funding of U.S. diplomatic security efforts. It also provides summary information on the September 11, 2012, attack on U.S. facilities in Benghazi, Libya, as well as on the subsequent Accountability Review Board. More information on congressional and State Department actions in response to the Benghazi attack is available in CRS Report R43195, Securing U.S. Diplomatic Facilities and Personnel Abroad: Legislative and Executive Branch Initiatives, by [author name scrubbed].