Posts Tagged ‘Christchurch terrorist attacks’

When the blind lead the blind.

datePosted on 08:28, December 15th, 2020 by Pablo

The Royal Commission of Inquiry (RCI) Report on the Christchurch terrorist attacks has been released and the verdict is mixed. Some are pleased that systemic failures were identified and acknowledged while others are disappointed that no single person or agency was held to account for those failures. The Muslim community, although given a prominent place in the RCI investigations and Report and offered direct apologies by the Prime Minister and heads of Police and the Security Intelligence Service (SIS), remains unsatisfied with the outcome even if it accepts the recommendations that derive from the Report (as does the government).

Under its terms of reference, the RCI investigation was very broad and very shallow. Because of its scope it eventually had to be extended a year beyond its original six month mandate and have its budget doubled. It was broad in the sense that it had to address the terrorist and his activities, the impact his actions had on the targeted community, the actions and inaction of State security agencies (not just those involved in counter-terrorism (CT) efforts) that contributed to the event and a host of extraneous factors considered relevant to the investigation (for example, European and US experiences with rightwing terrorism).

It was shallow in the sense that, even though it could have availed itself of powers of compulsion under oath under the Inquiries Act, it chose not to. Instead, the RCI engaged in a self-limiting investigatory approach where it was dependent on the voluntary cooperation of State entities and officials when it came to evidence provision and testimony. Because of concerns about national security, no government officials (other than agency heads) identified during the course of the investigation were publicly named and their testimony is to remain sealed for thirty years. Although available to security authorities, the terrorist’s evidence is permanently suppressed in order to avoid copy-cat behaviour. 

One view is that this was done to encourage honesty and candor on the part of witnesses with potential liability exposure, but it also meant that in terms of transparency and public accountability, the RCI was hamstrung from the start. A more cynical view has it that this covers up culpability and whitewashes the truth while absolving the guilty.

Others have written about the before and after-effects of the attacks on New Zealand’s Muslim community as well as the history of local white supremacists and rightwing extremists. The work of the RCI has been amply scrutinised. The Report itself has been dissected at length. Given that, here the focus is on the institutional deficiencies within the New Zealand Intelligence Community (NZIC) that were uncovered by the RCI.

If one phrase sums up the Royal Commission of Inquiry’s Report on the Christchurch terrorist attacks, it is “systemic failure.” The failure was institutional and individual, within and across New Zealand’s borders and involved errors of commission and omission.

The most salient finding is that there was a pervasive obsession with Islamic extremists within the NZ Counter-Terrorism community dating to 9/11. This myopic focus was shared by collection (operational) agencies, analytic agencies, oversight and coordination agencies, foreign partners, the governments and most politicians of the day. The media and the public, while largely unconcerned about the possibility of domestic terrorism, accepted the official line that after 9/11 and given events in the Middle East, Islamic extremism was the most likely threat to the Kiwi way of life.

The problem with this perspective is its lack of grounding in fact. Before and after 9/11, no Muslim has been charged, much less convicted of any act of ideologically-motivated violence in Aotearoa. A couple of people have been arrested and imprisoned for possessing jihadist materials, a few have been detained for objectionable social media posts, some have been sent into de-radicalisation diversion programs and some have had their passports cancelled based upon fears that they would travel to the Middle East to join ISIS or al-Qaeda. Two have been killed in drone strikes in the Middle East and one is languishing in a Syrian opposition jail. Back at home, at any given time, 30-35 people are monitored by the intelligence services because of their perceived jihadist sympathies. They may be inclined towards violence but as of yet none have decisively acted on their impulses. When it comes to contemplating acts of terrorist violence on NZ soil, would-be jihadists have been relatively few and far between, and all talk and no lethal action.

During the same timeframe, right-wing extremism world-wide grew bolder in terms of violent acts and larger in terms of numbers, starting with the mass murders perpetrated by Anders Breivik in Oslo in 2011 and accelerating after 2015 with murderous attacks in places like the US, UK and Germany as Daesh was defeated in Iraq and Syria and refugee flows increased from the Middle East and Northern Africa into Europe. On-line white supremacist forums proliferated, as did the number of self-radicalised “lone wolves” who populated discussion groups focused on who, when and how to commit violence against Muslims, Jews, immigrants, gays, Arabs, Africans, and other perceived undesirables.

Groups like Atomwaffen Division, English Defense League, Proud Boys and Boogaloo Bois moved from their keyboards to the streets. NZ was not immune to this phenomenon, with groups such as the Dominion Movement, Northern Front, National Front, White Defense League, New Order, Right Wing Resistance, and more recent off-shoots like Western Guard and European Students Association waxing and waning before becoming more visible and vitriolic over the last ten years (other violently-inclined groups have formed after March 15, including Action Zealandia). 

This suggests that post-2011 NZ counter-terrorism (CT) threat assessments should have incorporated the rising global trend of irregular right-wing violence. Yet in the period 2010-2019 right-wing extremism was mentioned only a handful of times in CT reports, most in reference to terrorist attacks overseas. When and where the possibility of a right-wing terrorist attack in NZ was mentioned, such as in a 2011 Combined Threat Assessment Group (CTAG) report that the Oslo attack was a model for copycats and that New Zealand’s firearms regimes allowed for the legal purchase of military-style weapons with that intent, it was ignored by other agencies. Bureaucratic rivalries may have contributed to that.

The organization of the NZIC and the business model used by front line collection agencies made detection of non-Islamicist terrorist threats difficult. Collection agencies like the NZSIS and NZ Police operate on a “lead-based” and “customer” focused business model, in which the agencies react to tips about suspicious behaviour and frame their operations and analyses according to the perceived needs of their sponsors and patrons—primarily the government and foreign partners. The decentralised and siloed nature of the NZIC is another contributing factor to the failure to detect terrorist plots, whereby the alphabet soup of intelligence shops in areas like Customs, Immigration, MBIE and coordinating and analytic agencies like CTAG, the National Assessments Bureau (NAB), Security and Intelligence Board (SIB), Counter-Terrorism Coordination Committee (CTCC) and a number of others compartamentalise and narrowly share classified information on a “need to know” basis.

There are no strong hierarchies in the chains of command linking the functionally-differentiated agencies within the NZIC, with various intelligence units answering to different ministers and seldom to each other. This led to duplication of functions and tunnel vision within the community. Although the NAB ostensibly serves as the lead agency in the decentralised NZIC organizational pyramid, vertical as well as horizontal accountability between NZIC members was and is limited.

Then there was the issue of emphasis. In terms of overall organizational focus, domestic terrorism was a secondary concern for the NZ security community in the decade prior to the Christchurch attacks. Only 20 mentions of domestic terrorism were made during that period. The bulk of those referred to home-grown and returning jihadists.

The dysfunctional organizational arrangement and myopic mindset was compounded by the fact that there is little proactive or “over the horizon,” futures-forecasting strategic analysis within the NZIC’s component parts. Under extant funding models and given the security orientation of political masters and foreign partners, there was little incentive for intelligence shops to expend resources on discerning distant threats via strategic analysis or convincing political funders that the CT focus needed to be expanded in light of an emerging global right-wing extremist movement that uses the internet as a recruiting, radicalisation and irregular warfare tutorial platform.

This was obviously short-sighted and (still) leads to institutional lag when confronting the threat environment (whereby agencies play steep learning curve catch-up because their focus is on the last and not the next major threat). It also violates the basic professional requirement that threat landscapes be divided according to an objectively-determined differentiation between possible, probable, proximate, immediate and imminent threats upon which preventive measures can be predicated.

The Report repeatedly references Police and SIS complaints that they were under-resourced during the decade prior to the attacks, something that contributed to their inability to monitor right-wing extremism. The SIS reported that it had 225 personnel in 2013-14, of which 35-50 percent were engaged in security vetting and the rest in domestic and foreign espionage and counter-espionage functions, with only 4.5 full time equivalent staff dedicated to terrorism investigations. By 2019 the total staff had increased to 328 full time equivalents but the functional distribution remained the same. During the same period the SIS budget increased 245 percent, from $33,751,000 in 2007-08 to $82,843,000 in 2018-19. This does not include at least one dedicated cash injection of over $175 million provided by the National government in 2016-17 to the NZIC and excludes any “black budget” expenditures (most intelligence agencies carry off-the-books “black budgets” for particularly sensitive operations).

The nearly $50 million operational budget increase and 100 staff added during the half decade leading to the attacks was not reflected in SIS CT operations, so the question begs as to whether it was not so much the lack of resources that impeded improvement in that operational area but a maldistribution of resources within it that contributed to the SIS failure to detect the threat emerging from the extremist Right. After all, it dedicated between a third and half of its staff to vetting security clearance applications. Assuming that clerical staff occupy five-ten percent of personnel numbers, then the amount of people dedicated to domestic espionage (including CT), foreign espionage and counter-espionage within the SIS is remarkably low for a front-line intelligence agency. The political priority given to counter-terrorism efforts by governments during the years after 9/11 and emergence of ISIS in Europe make it hard to fathom that only 4.5 equivalent full time staff were dedicated to CT efforts in 2014, and that the same distribution of personnel continued even with the 50 percent increase in staff by mid-2019.

The NZ Police also claim to have struggled with resources for intelligence work in general and CT work in particular. Citing shortfalls, the Police stopped investigating right-wing extremism in 2014 and no reports on the subject were issued until 2019 (after the attacks). The intelligence wings of the Police were said to be lightly staffed and spread over a number of issue areas that went well beyond CT concerns. Both the National Security Group (NSG)  and Security and Intelligence Group (SITG) claimed to not have enough resources to engage in the type of strategic intelligence assessments that would have made early detection of right-wing extremists easier. In 2010 the National Intelligence Centre employed 53 staff out of a total complement of 11,890, then 63 in 2012 and 52 in 2013 with similar total numbers, while in 2018 “International and National Security” functions employed 357 out of 12,467 staff (organizational changes made for different staffing statistic categories in Annual Reports after 2017). 

Even with the changes in statistics measurements that incorporated other liaison and analysis duties, it is clear that staffing of Police intelligence operations remained fairly constant and even rose slightly towards the end of the period covered by the RCI Report. It was therefore not a major impediment to CT operations per se. Instead, it appears that the allocations of resources within the intelligence branch were directed to areas other than CT, again, consistently throughout the years and paralleling the operational priorities of the SIS. Funding for additional CT staff at the national level was approved in 2018, but the problem remained that, to quote the Report, the “New Zealand Police had generally viewed right-wing extremism as more of a public order issue than a potential terrorist threat” (Part 8, Section 6.5 paragraph 30).

There is no mention in the Report of whether Police intelligence received information about violent right-wing extremists during the course of undercover operations targeting criminal gang activities such as drugs or weapons dealing (so-called “street crimes”). Yet, although no information on right-wing extremists was reported at the national level after 2014, “(w)e (the RCI) were also provided examples from the National Security Investigations Team of leads related to right-wing extremism that met the risk threshold and were pursued.” (Part 8, Section 6.5 paragraph 36). In other words, there were leads coming from somewhere about right-wing extremists and they were pursued, but nothing more is known about them (at least as far as the public record is concerned).

The “lack of interest” problem regarding right-wing extremism was compounded by the fact that tactical intelligence leads are mostly developed by each Police District, and during the time period in which the killer was planning and preparing apparently no leads on violent right-wing extremists were developed by the intelligence shops based in Dunedin and Christchurch, much less elsewhere. Instead, at both the district and national levels, in terms of strategic as well as tactical assessments, the NZ Police focused CT efforts on detecting and disrupting the plans of Islamicists (and had some success with that).

Even so, the NZ Police did allocate intelligence resources to monitoring some non-Islamicist groups. During the period covered by the Review, which came in the wake of the infamous Urewera Raids, the Police followed intelligence leads and conducted operations against environmental, animal rights and anti-1080 activists along with the ‘normal” business of providing intelligence for non-ideologically motivated criminal investigations. This is worth noting because terrorism involving lethal mass attacks is most likely to be ideologically rather than criminally motivated (following the logic that criminal activity is a form of commercial rather than advocacy enterprise and public violence is generally bad for business). Amongst ideological activists in NZ, environmental and other Leftist groups are less prone to supporting terrorism to advance their goals than either aspiring jihadists or right-wing extremists (including so-called “eco-fascists” involved in anti-1080 campaigns). And yet they received more attention from the intelligence services than neo-Nazis did, and CT efforts remained focused on would-be jihadists.

It was therefore not just a lack of resources allocated to CT efforts within the Police, SIS and other agencies that impeded the detection of right-wing terrorist threats. Instead, it was the lack of priority given to them that contributed to the systemic intelligence failure. Intelligence work done by the Police and the SIS involve at their core human intelligence collection. That essentially means boots on and ears to the ground, which in turn is an issue of trained staff dedicated to the task on the one hand, and objective threat recognition on the other. In spite of the evolving threat landscape in the decade prior to the Christchurch attacks, CT staffing numbers remained small and steady, with low emphasis placed on non-Islamicist threats. When they were, the objects of scrutiny were not from the extremist Right.

The GCSB was exonerated of any culpability in enabling the attacks. That is because, according to the Report, it basically serves as a foreign signals intelligence agency and only engages in domestic espionage when tasked to do so under warrant by a NZ partner agency. In the decade before March 15 it was never tasked by the SIS, Police or other security agencies to monitor right-wing extremists.

Although it exposes the disorganization and biases of the NZ intelligence apparatus when it came to CT prior to March 15, the Report claims that these systemic failures did not contribute to the attacks because the killer’s operational security made discovering him a matter of “chance.” That, in spite of reports about his peculiar behaviour at a gun club, his social media rants and use of IP addresses associated with extremist views and weapons purchases, his drone surveillance of the al-Noor mosque and his stockpiling of military-style weapons and ammunition (which are attributed to deficiencies of the firearms licensing regime and failures by vetting authorities to discharge their duties properly). The dots were there to be connected but, according to the RCI, only by chance could they have been.

That has the makings of a Tui ad.

What is clear is that foreign intelligence partners and domestic intelligence agencies saw right-wing extremism as a low priority local law enforcement issue, not a pressing national security threat. In spite of some brief warnings and occasional mentions, the NZ Police and SIS did not see violent right-wing extremism as posing an imminent danger to society and other frontline agencies did not screen for it in their threat assessments. Instead, the security community prioritized the domestic aspects of  the so-called “War on Terror” (sic). Local politicians supported and funded that approach, which was generally given low priority because domestic terrorism was, in spite of the anti-jihadist fear-mongering of the Key government, a secondary concern in the NZIC collective assessment  of NZ’s threat landscape.

With the overall likelihood of domestic terrorism downplayed and jihadist threats over-emphasized within potential domestic terrorism scenarios, when it came to local right-wing terrorism the NZIC was not just looking the wrong way—it was not looking at all. Instead, for political and operational reasons the CT focus could and would not see terrorist threats beyond those rooted in Islam. Even though the domestic terrorist threat landscape changed in the years after 9/11, the NZIC was disinclined to move beyond threat assessment parameters that supported the anti-jihadist narrative. That is why the it failed to see the danger coming from the extreme Right.

More than “chance,” it was these institutional deficiencies, both in outlook and organization, that wound up costing people’s lives.

An earlier version of this essay was published in The Spinoff, December 15, 2020.

Ready to be let down.

datePosted on 15:32, November 30th, 2020 by Pablo

The Royal Commission of Inquiry (RCI) on the Christchurch terrorist attacks has tabled its report with the Governor General and Minister of Internal Affairs. The Report will be introduced to parliament and released to the public before Christmas. In the lead up to its release the office of the Department of Prime Minister and Cabinet consulted with a number of people, myself included, on how to go about managing the release. My advice was for the heads of the security agencies mentioned in the Report–the SIS and Police in particular–to front-foot the release because there was much skepticism that the Report would be anything but a whitewash and cover up. I mentioned that if systemic, institutional as well as individual failures, biases and blindness were not mentioned then the Report would be seen as exactly that. Other people suggested deeper engagement with immigrant ethnic groups, Maori, and being as transparent as possible.

Alas, the latter does not look like it will happen if early word about the Report is true. Remember, by its terms of reference the Report’s public findings and recommendations will not identify government officials mentioned in it. Nor will it contain information that is deemed sensitive on national security grounds. So, along with other limitations that I mentioned in an earlier post about it, the RCI was hamstrung from the start.

To be sure, I have not read either the findings or the recommendations so can do nothing other than speculate about them. But what I have read so far is this: the evidence from the killer as to how he planned the attack will be suppressed forever because it constitutes a “how to” primer for murderous copy-cats that identifies exploitable holes, flaws and deficiencies in NZ’s counter-terrorism defences and the advantages and opportunities presented to him by the wider context in which he planned and prepared the attacks. Moreover, the names of government officials mentioned in the Report will not only be redacted from the public version, but will be suppressed for thirty years, again on national security grounds.

Already, word has leaked that the Report will note how the firearms purchase and vetting regime failed in this instance due to legal loopholes and human folly. This was always going to be an easy way out for the State because after the attacks the government immediately pushed through law reforms governing certain types of firearms such as those used during the massacres (now being challenged by rightwing parties and groups), while blaming officers on the low end of the Police totem pole for not properly doing firearms license background checks absolves the higher-ups of any complicity in the matter. Nothing about systemic or institutional biases, failures or blindness is to be found in that sort of blame game.

Needless to say, some are not happy with these developments. Both the Federation of Islamic Associations of New Zealand (FIANZ) and Islamic Women’s Council of New Zealand (IWCNZ) have expressed serious concerns about the suppression order’s impact on issues of transparency and accountability by the agencies and individuals whose actions or inaction may have contributed to the events of March 15, 2019. This is notable because the RCI remit specified that the views of the NZ Muslim community should be given great consideration, to the point that a special Muslim Reference Group was set up to advise the Commission (although its advice was non-binding on the RCI).

Now, in the wake of the news about the selective long-term suppression of findings, both FIANZ and IWCNZ have released their submissions to the RCI. These include lengthy expositions about the myriad ways in which the Muslim community has been stigmatised, harassed, surveilled, vilified and attacked since 9/11 in the NZ media and society, and about how government agencies were indifferent at best and hostile at worst to the community as a whole, systematically ignoring the community’s very specific details of hate-based violence directed at them and repeated appeals for help. These submissions noted the government’s focus on Muslims as potential jihadis, including so-called “jihadi brides” and the infiltration of their houses of worship and community activity centres by agents of the State.

The submissions were extensive and well-documented, using everything from international to local human rights legislation and witness testimonies to provide proof that the global “War on Terror” had a very real, disproportionate and negative impact on NZ Muslims regardless of their affinity for extremism (it should be noted that no Muslim has been charged, much less convicted of an ideologically-motivated act of violence in NZ before or after 9/11. Two individuals have been jailed for having jihadist literature, a couple of converts have been killed in drone strikes abroad and the bumbling Pakeha jihadist remains imprisoned in Syria).

Meanwhile white supremacists in NZ organised, recruited, trained and encouraged each other on line, including threats against local Muslims. Yet they apparently were either not considered to be sufficient enough of a threat to warrant closer official scrutiny, or the security community had other priorities, or, as has been said repeatedly by various sources, the killer “flew under the radar” in the build up to the attacks because he had no association with local neo-Nazi communities (oh, and he was Australian). He had no enablers, no accomplices, no acquaintances–no one at all who, in spite of his travels to conflict zones and expressed hatreds, had a clue of what he was planning to do. There was no warning.

Yeah, right.

That NZ’s two leading Muslim organisations have now come out with what were originally non-public submissions detailing what in retrospect were obvious alarm bells is an indictment of the RCI and proof that fears of a whitewash may turn out to be justified.

Others are not as pessimistic. Some believe that the RCI will recommend throwing what amounts to “blood” money at the victims, their families and the Muslim community in general while engaging in a “whole of government approach” (the new bureaucratic buzzphrase, apparently) to the problem of ethnic, religious and/or race-based extremism and violence in Aotearoa. Some think that although names and evidence will be suppressed, behind closed doors action will be taken to hold decision-makers to account. There is a belief that the RCI will in fact fulfil its duty and detail the systemic and institutional failures that contributed by commission omission to the attacks. I am not so sure.

It could be that the pre-public release of selected aspects of the Report is being done by officials to prepare the ground for its full release (by lowering expectations from the non-Muslim community), or has been done by someone on the inside who is not happy with the Report. Either way, it has set up a situation where the truth will be obscured by official shading of what can be publicly known.

The bottom line is this. Long term evidence suppression is valid based on national security concerns about revelations involving sources, methods, evidence of capabilities/vulnerabilities and sensitive foreign relationships. Invalid reasons for suppressing names and evidence involve efforts at face-saving, whitewashing or cover ups of individual and/or institutional malpractice, incompetence, bias, blindness or negligence.

From what has been released so far, there is reason to presume that the Report will tilt more towards the latter than the former, and as a result New Zealand will have missed its moment of opportunity to address and remedy what were the “whole of government” failures that contributed to the darkest day in its modern history. Instead, it might well turn out to be the official equivalent of a lump of Xmas coal delivered to the cause of official transparency and accountability.

That would be a shame.