Tag Archive for: Counterterrorism

Nothing Found

Sorry, no posts matched your criteria

Tag Archive for: Counterterrorism

The Counterterrorism Yearbook 2018

Three key factors defined the terrorist threat landscape in 2017: the international coalition’s military dismantling of Islamic State’s (IS) caliphate, and their return to a nebulous insurgency structure; increased IS activity in South East Asia catalysed by the battle for Marawi; and the potential resurgence of al-Qaeda.

These developments have in turn shaped the evolution of international counterterrorism (CT) agendas at local, regional and international levels. The challenges include the prospect of returning foreign fighters, the sustained threat of lone actor attacks, and the capacity of ‘virtual attack planners’. There’s no single way to address these issues and different regions/countries have developed their own policy and operational responses that reflect local socio-political developments. In addition, factors such as proximity to conflict, porous borders, low-levels of governance and corrupt state regimes have a tangible impact on how CT policy and practice is implemented.

CT in 2017–2018 has clearly been defined by the threat posed by IS in a post-caliphate era. Two key challenges confronting governments revolve around what to do with the likely prospect of returning fighters or migrants, as well as the question of repatriation for individuals who have been captured overseas for travelling to the caliphate. Australia and the UK have successfully passed laws to strip dual nationals of British or Australian citizenship while abroad to bar them from returning. Khaled Sharrouf became the first Australian to lose his Australian citizenship in 2017.

Governments are simultaneously struggling with securing convictions for terrorist offences, as well as with implementing the most suitable and effective punitive measures of prosecution. While prison sentences are non-negotiable for those convicted of terrorist-related offences, there is no universally accepted policy on the most effective arrangements for incarceration, with some governments favouring separation policy over dispersal.

Given the youthful demographic of those who have been involved, as well as their varied motivations and objectives, the level of threat an individual poses to society remains ambiguous, and there are benefits and drawbacks to both approaches. Additionally, governments are trying to find the most effective measures to rehabilitate and reintegrate back into mainstream society those who no longer pose a threat. Tailor-made rehabilitation measures that emphasise social reform to positively reintegrate individuals are preferred.

Some notable shifts in CT strategy which will be interesting to monitor in the short and long term include a growing urgency—particularly in Western Europe, the UK, the US and Australia—to develop robust monitoring and evaluation measures to assess policies and programs for countering violent extremism (CVE). The difficulty has been in identifying best practice in this highly controversial field, in which no two paths into and out of violent extremism are the same.

Second, there’s been a conscious effort to change existing approaches to CVE in Australia, Morocco and Tunisia, with a key focus on addressing the sociocultural and political issues that create conditions conducive to radicalisation towards violent extremism. The analysis indicates that there has also been a visible move away from the practice of ‘deradicalisation’ and ‘counter-radicalisation’ towards a social policy focused approach to P/CVE (preventing and countering violent extremism) that values education, training and employment as effective routes towards facilitating engagement, belonging and integration.

On paper, this is a welcome change of direction, but whether or not governments have the appetite to invest in long-term social policy initiatives instead of security-focused approach to P/CVE remains to be seen. It will be of paramount importance to learn from mistakes if this shift is to be implemented successfully.

Third, noting the integral role played by the internet in radicalisation processes, as well as in facilitating and mobilising terrorism, the yearbook has included a chapter analysing the legislative challenges facing states in countering the online activities of terrorists. The challenges for both public and private sectors highlighted in this chapter will be interesting to monitor in the coming years, to assess the effectiveness of policy changes.

ASPI’s Counterterrorism Yearbook 2018 analyses how different countries and regions across the world are tackling the threats of terrorism and violent extremism against the backdrop of the contemporary terrorist threat environment. The almanac identifies developments across the terrorist landscape that are relevant to the year in review and discusses possible challenges to expect in the coming year.

The 2018 edition demonstrates that international CT remains fixated on the threat of Salafi-jihadi terrorism. Not nearly enough attention is being placed on other forms of violent extremism, or where emerging threats may emanate from. Governments need to be better prepared to meet a broader range of emerging challenges across the terrorist threat landscape.

Likely examples include the demands  posed by accelerating automation on society, tracking the trajectory of far-right extremism, and the impact of climate change and people movement on national security. Additionally, none of the chapters in the current yearbook have indicated that governments are appropriately integrating gender perspectives within CT policy and practice, despite the fact that terrorism and violent extremism are gendered experiences.

The objective of the Counterterrorism Yearbook is to document the performance of governments in the CT space, and to demonstrate that states need to develop more flexible and adaptable policies and strategies to meet the challenges thrown up by the continually evolving national and international security landscape.

After Barcelona

It’s slowly becoming clear that as horrific as the Barcelona attack was, it could have been much worse. The cell was planning to use a homemade explosive device to kill hundreds at landmarks across the city, including the historic Sagrada Familia cathedral. It seems that what led Younes Abouyaaqoub to drive a van down Las Ramblas with the aim of killing as many people as he could was the accidental explosion of the cell’s safe house in Alcanar, 200 kilometres south of Barcelona, where the group stored approximately 120 gas canisters. Abouyaaqoub, a qualified electrical engineer, was shot and killed in Subirats, which is 60 kilometres west of Barcelona, four days after he drove through Las Ramblas.

Hours after the attack, Spanish police foiled a second vehicle-led attack in Cambrils, a seaside resort 120 kilometres southwest of Barcelona. Police shot dead four members of the cell, one of whom was Abouyaaqoub’s younger brother, Houssaine (a fifth member survived).

Initially, four men were arrested in connection with the attack: Salah al-Karib, Mohammed Aallaa, Mohamed Houli Chemlal and Driss Oukabir. Aallaa has since been released on bail due to insufficient evidence to extend his detention (but his younger brother Said was killed by police and his other brother Youssef died in the Alcanar house). Chemlal has claimed that the cell was planning a much larger atrocity, although there’s no evidence to substantiate that claim. Driss Oukabir allegedly rented two vans, one of which was used in the Las Ramblas attack; he says he rented the vehicles to help his friends move house.

According to police, the men were wearing suicide belts that were later found to be fake. The attackers drove to Cambrils in an Audi A3, which it is believed was owned by Aallaa. The men were shot after they rushed out of the car carrying knives, machetes and axes (it’s worth noting that they don’t appear to have had semi-automatic weapons). Abouyaaqoub and someone else allegedly drove the same Audi to Paris a few days before the Las Ramblas attack, though the purpose of trip remains unclear.

The leader of the cell was 42-year-old Moroccan-born Abdelbaki Es Satty. In April 2014, after serving two years for drug-smuggling in Spain, Es Satty faced an expulsion order. He successfully contested it, arguing that expelling him would breach Spain’s commitment to international law. In November 2014, Es Satty lodged an application for asylum with Spanish authorities. While that was being considered, the Moroccan-born imam could travel within the EU’s Schengen states. In 2016, he headed to Belgium, where he became an imam of a mosque in Diegem. He left after three months because the mosque’s leader, Soliman Akaychouh, had asked him to produce evidence that he hadn’t been involved in any criminal activity, which he was unable to do.

In March 2016, Es Satty took up residence in the Girona town of Ripoll, where he became an imam in one of the two mosques in the city. He lived in a small flat and has been described as ‘a loner’ and ‘perfectly normal imam’. It’s reported that the town had found it hard to find an imam. Es Satty was hired even though Belgian authorities, alerted earlier by Akaychouh, had informed the Catalan interior ministry that they had concerns about him. It now appears that the Catalan regional police had visited the mosque on several occasions, though they never advised the president of the mosque that Es Satty had a criminal record. It remains unclear how the cell was formed, and whether it had direct or even indirect ties to IS, though one would assume that Es Satty and Abouyaaqoub met at the mosque where Es Satty was working, as Abouyaaqoub was a resident of Ripoll.

When Es Satty was in prison he reportedly became close to Rachid Aglif, a Moroccan, who was one of the 2004 Madrid bombing ringleaders. Spanish authorities had a policy of dispersing ETA prisoners, but that hasn’t been done with Islamist prisoners. Questions need to be asked about why and how Aglif was able to interact with other prisoners and whether he managed to radicalise other inmates. Spain’s prison deradicalisation program centers on rehabilitation and reintegration, but it’s unknown what parameters are used to assess whether an individual has been rehabilitated.

As more information has come to light about Es Satty and the activities of the cell, a familiar criticism has been levelled at Spanish authorities: once again, human rights law has allowed a ‘bad’ person to stay in Europe. Critics are quick to point out that information obtained by security services doesn’t lead to criminal charges. That feeds into the narrative that the system allows people like Es Satty to exploit democratic institutions to commit acts of violence.

Detecting terror cells has become exceedingly difficult because they increasingly employ low-tech tools, such as cars and knives, and use everyday ingredients to develop explosive devices. This means that security services can’t rely on forensic systems such as the Integrated Ballistics Identification System, which was recently used in Pakistan to help dismantle terrorist cells linked with the Lashkar-i-Jhangvi and Tehreek-i-Taliban groups.

Terrorist cells in Europe are evolving to address the EU’s improved detection mechanisms and are increasingly turning to high-impact, low-cost operations. In the case of the Barcelona attack, the only cost was the renting of the vans. That’s not an expensive process, and it’s virtually impossible to stop, since anyone with a valid driver’s licence can meet the rental requirement. The Barcelona and Cambrils attacks have again highlighted the need for security services to constantly adapt, develop and evolve their counterterrorism strategies.

Timely focus as counterterror agencies feel the pressure

How Australia’s intelligence agencies contribute to counterterrorism (CT) efforts is a key focus of the 2017 Independent Intelligence Review at a time when the rapidly evolving threat underscores the need for the regular reassessments recommended by Phillip Flood in 2004.

Terrorism’s been a prominent feature of the security environment for over a decade and a half, and a significant focus of agencies since the last review in 2011. In that time, we’ve witnessed the Arab Spring and ensuing conflict in Iraq and Syria, the emergence of the Islamic State terrorist group, the threat level in Australia increasing in 2014 to ‘Probable: an attack is likely’, hundreds of Australians fighting abroad, five attacks at home and 12 disrupted plots.

Although Michael L’Estrange and Stephen Merchant were charged with examining the six agencies that comprise the Australian intelligence community (AIC), they followed the recent convention of including the intelligence functions of other agencies in a broader ‘national intelligence community’ (NIC). They stress that they limited consideration to the intelligence functions only of these non-AIC agencies. This appears to have been missed in some criticism that the newly announced Home Affairs portfolio was not recommended by the review. While the review was asked to examine new structural arrangements for the ‘intelligence enterprise’, it was beyond its scope to examine and recommend broader changes affecting security policy agencies.

The review says that ‘extremism with global reach’ will continue for the foreseeable future. It commends the agencies for stopping attacks and supporting CT activities at home and abroad but confirms the heavy toll this effort has taken on the agencies. Agencies are stretched by operational demands and have little scope to deal with terrorism and other challenges in a more strategic way, or to easily reprioritise targets.

The review identifies the need for a truly strategic intelligence capability to oversee and optimise coordination across these areas and agencies, in the form of an Office of National Intelligence (ONI). L’Estrange and Merchant note that this is a natural progression of the role originally envisaged by Justice Robert Hope for the Office of National Assessments (ONA). The agencies are working well, they say, but leadership and coordination could make Australia’s intelligence capability one of the world’s best.

To improve CT coordination, the review recommends placing a senior ONI officer into the Centre for Counter-Terrorism Coordination (CCTC), to better align activities. This useful initiative builds on existing arrangements in the CCTC while linking back into the larger ONI project.

This role will likely gain even greater importance as the Home Affairs portfolio takes shape, as the CT coordinator and CCTC should play a key part in forming and transitioning to the new arrangements. The ONI secondee should be at least at SES Band 2 level, as they’ll report to an ONI deputy. The position should be maintained at this level rather than downgraded as has occurred with some initiatives.

Another role to watch will be that of the new director-general of national intelligence as the key adviser on intelligence to the prime minister and Cabinet. The review makes it very clear that this role is to focus firmly on strategic direction, prioritisation and resourcing of the NIC.

But it will be challenging for both the incumbent and members of Cabinet to maintain the strategic focus of the role and not to succumb to treating this director as a tactical intelligence briefer on the evolving situation. In times of crisis, there can be great pressure to revert to the tactical, but it’s then that calm and strategic intelligence leadership is needed. The review affirms the ongoing role of the director-general of security in directly advising the PM and Cabinet on CT and foreign interference, and the roles of other statutory heads in providing expert advice on their areas of responsibility.

The report’s message of collaboration and coordination extends to improved NIC engagement with policy agencies through enhanced ICT linkages and beyond government to business and academia across the range of threat and technical areas. This aligns with state, territory and local governments, business and academia being seen as CT partners in protecting mass gatherings from terrorism, countering online extremism and terrorist use of encrypted communications, and countering terrorist financing. The National Threat Assessment Centre will benefit from additional focus and technology to ensure threat advice reaches all who need it.

The capability impact of the review has received less attention but will be a game changer. Coordinating the technical requirements, procurement, sustainment and use of key data analytics and ICT systems will not only enhance the NIC’s overall capability but will improve the quality of information and systems available to its partners, in Australia and overseas.

While there are many software and hardware capability overlaps between agencies, including data analytics, surveillance, communications, technical interception and supporting ICT, technical collaboration has not previously had a strategic home. Establishing an NIC science and technology board will target research to support the broad intelligence capability in a way not previously seen. A dedicated innovation fund and hub should provide the tools for collaborating with industry and academia and for quickly mounting projects to address new threats. Agencies will continue to have some differing requirements, but a shared hub for research and capability development will be of enormous benefit.

This is particularly important for CT, which has had substantial and disparate investment not only by NIC members, but also by state and territory police. And the high rate of threat change requires, at times, innovative and rapid acquisition capability.

Much has been said about terrorism stretching agencies as never before. A strategic understanding of both the intelligence and policy aspects of countering terrorism is essential if Australia is to stay ahead of this threat—and be alert to others. It’s in refocusing the NIC to a strategic level that the review provides the greatest impact.

It’s timely that the review was released, and endorsed, at the same time as the announcement of the new Home Affairs portfolio, complementing the rejuvenation and refocusing of intelligence with similar efforts to coordinate security policy and operations. Now comes implementation.

ARABIZI: another hurdle for counterterrorism efforts

 

The wave of terrorist attacks in Europe, North America and Australia in the last two years brought to the open many intelligence and operational shortcomings of the local and international response to it. Among them one may point out the absence of coherent mechanisms of intelligence sharing, an absence of a consolidated suspects index built on an agreed principles and spelling, inter-agency rivalries, severe manpower shortages and legal problems in the human rights and privacy domains.

Despite the sincere and intensified efforts to improve this state of affairs by all the actors involved, there remain several obstacles with no prospect of a quick fix in the foreseeable future. This paper aims to shed a light on just one of them-the use of Latin alphabet to write Arabic which is popular among young Arabs and which is nick-named ARABIZI.

Arab youngsters both in the Arab world and abroad are using their smartphones extensively; they’re too lazy to switch frequently between Arabic and Latin keyboards prefer to type their Arabic correspondence in Latin alphabet. In terms of counterterrorism it means that special tools have to be developed to tackle the huge volume of traffic in the social media and the blogosphere, not to mention other clandestine means, to detect and flag troublesome indicators. The complexity of the Arabic transliteration i.e. the variety of possibilities to spell an Arabic word in Latin alphabet makes those efforts very tricky and exhausting.

Many people both in the academia and the tech industry are working hard to develop solutions based, among others, on machine learning and artificial intelligence to produce an effective and user friendly tool to do that. The sheer volume of the traffic coupled with the chronic shortage of linguists with security clearance leaves no choice but to run the texts through automatic translation programs based on similar principles as “Google Translate” and the like. The major problem is to define key words or sequences of words in the text to be translated either to English, French, German or other languages. But even then the automatic translator may miss meaningful parts.

The alternative is to widen the scope of the key words or chain of words taking the risk of being over flooded with amounts of material beyond the capacity of analysts. Most of the solutions produced so far may look not bad in laboratory tests but don’t quite deliver in reality. Painstaking efforts are continuously made to fine tune the results and to teach the machines to reach further precision.

Another problem is that most of Arabic given names and surnames have linguistic meaning and the automatic translation machines failing to recognize them as such translate them literarily as nouns and adjectives. Moreover, some of these Arabizi texts are written in colloquial Arabic which differs from the modern standard Arabic both in grammar and vocabulary and is frequently dotted with abbreviations, icons and exaggerated use of letters and vowels such as (in English) “you are greaaaat”. A person of North African background where French is common will write the same word in Arabizi in a different spelling than a person who hails from a country where English is more common like Saudi Arabia, Libya or Iraq.

All these problems result in a considerable amount of material not being properly dealt with or even lost. To avoid this there is no alternative but to employ people who are familiar with the different dialects and who will dig out the vital data. The problem in Europe, North America and to an extent also in Australia is that they face chronic shortage of them. There are of course quite a number of individuals who possess the skills to deal with the various forms and dialects of Arabizi but it’s questionable whether, given the present state of affairs, they will be granted a security  clearance and access to deal with those materials.

One shouldn’t envy the contemporary leaders and politicians who are reaping long years of negligence in developing proper linguistic tools and capabilities. What we hear instead are complaints about the Internet or encryption. The public and private sector need to get much better at tackling the many challenges to counterterrorism efforts, and they need to do it fast. With such huge money flowing into intelligence, policing and security apparatuses around the world, we really should be doing a better job.

Counterterrorism: acting without thinking?

While Australia faces complex prickly national security challenges, our Prime Minister, Premiers and Chief Ministers continue to paradoxically announce quick fix policy measures in response to terrorism and crime. From cement bollards in Sydney and Melbourne, new bail arrangements for terrorists across the Commonwealth, legislating social media censorship in the cyber world, and greater access to assault rifles for NSW police, our politicians seek to regulate the minutia of domestic security rather than deal with the root causes of these prickly problems.

The problem with these kinds of quick fixes is that getting tough with security measures has more to do with addressing Australians’ lack of trust in governments than addressing today’s complex security problems. And this needs to change.

On face value, the Victorian government’s decision to construct bollards to prevent vehicle attacks in Melbourne makes perfect sense. Nevertheless, it’s not clear that there is any strategic logic to their deployment. Arguably, the erection of cement bollards in places like Melbourne’s Federation Square will only send would-be attackers elsewhere: and block first responder vehicles during an emergency. The return on investment from these measures, in terms of security, is arguably low. Moreover, this money could perhaps be better spent on intelligence, investigation and early intervention counter-terrorism strategies.

Earlier this month, Victorian Premier, Daniel Andrews, showed he was getting tough on terrorism when he stated that Melbourne airport should have ‘a dedicated 24/7 tactical response provided by the Australian Federal Police’. Interestingly, this statement seems to be at odds with the experience from the recent MH 128 incident. This incident was resolved without casualties, and showed, despite delays, that the current arrangements work. Wouldn’t it be more prudent to diagnose if, and what, the security shortfalls are at our airports and identify cost-effective solutions to them before prescribing a costly ‘quick fix’? Let’s not forget that the last independent review of Australian airport policing is now 12 years old.

At June’s meeting of the Council of Australian Governments (COAG), leaders agreed with Prime Minister Malcolm Turnbull when he stated that ‘there will be a presumption that neither bail nor parole will be granted to those who have demonstrated support for, or have links to, terrorist activity’. While this is a solid counter-terrorism measure, it doesn’t deal with the multifaceted problems with parole and bail in Australia’s legal system more generally. High profile cases, such as the September 2012 Jill Meagher murder, have consistently illustrated that some criminal offenders and alleged offenders present an unacceptable risk to our community if they are released from prison on bail or parole. If Turnbull is trying to protect the community from individuals who present an unacceptable risk, he needs to tackle the broad problems with our bail and parole arrangements: not one of its symptoms.

There should be little doubt that criminals, including terrorists, regularly use social media as a means of communication. Similarly, the anonymity and protection offered to social media users allows those with extremist beliefs to spread their messages far and wide. Little surprise then that our federal government is seeking to pierce social media’s encryption veil, and pressure its operators to censor their platforms. While on the one hand, such developments are certainly a step in the right direction, on the other hand, given the complexity of the encryption debate, and the widespread use of social media, such demands are rather hollow in terms of implementing meaningful policy.

On the 7th of June, NSW Premier Gladys Berejiklian, not to be left behind on the getting tough bandwagon, announced that officers of the state’s Public Order and Riot Squad will have access to semi-automatic assault rifles. While this will provide NSW police with additional capability, it’s not clear how such a decision fits with, or provides any advantage over, existing capabilities.

For governments across the western world the argument is that in times of uncertainty, people expect and value steadfast resolve when it comes to terrorism. Let’s not forget that the ‘security theatre’ associated with getting tough on terrorism also has some deterrent effects. In 2015, Anthony Bergin argued that outcomes from such thinking creates another paradox: ‘the more we’re spending on national security, the more our community seems to feel apprehensive about its safety’.

In the face of recent terrorism tragedies, both at home and abroad, it’s understandable that our leaders want to appear tough on security. Nevertheless, they need to resist the urge to deploy reactive security measures in response to complex and emerging threats. Instead, our governments, and their bureaucrats, need to focus on delivering better long-term security policy and strategy.

The first step in meeting this requirement is for our COAG leaders to focus their domestic security thinking in terms of how their decisions will support the detection, disruption and/or mitigation of risks. This kind of thinking needs to be underpinned by high quality intelligence and evidence based policy that examines the root causes of threats and risks as well as their symptoms. Specific security measures need to be examined from a range of perspectives including their opportunity costs and return on investment.

Some might consider it politically naïve to recommend that Australia’s politicians play a more reserved role in our national security theatre. It would appear many politicians fear the fact that their electorates have a zero tolerance for terrorism attacks. No one is suggesting that we should downplay our terror threat. However, if polls are anything to go by, the current round of decisive security announcements are having limited impact on threat fatigued Australian’s sense of security and voting preferences.

Degrees of affiliation in the global al-Qaeda franchise

Image courtesy of Pixabay user 422737.

10 years ago, al-Qaeda (AQ) was in shambles. Thanks to American and Pakistani-led operations, they had no training camps, limited money and few adherents. They also faced increasing challenges to their position as the inspirational leader of the global terrorist movement—in 2014, their local franchise in Iraq (which later rebranded to Islamic State) went off the rails, becoming so barbaric that AQ’s own supporters turned against it. Looking at the landscape today, however, reveals that AQ has managed to turn its fortunes around, expanding in both scale and threat.

Their most recent expansion occurred on 2 March this year, when various extremist groups operating out of the Sahel–Sahara region in North Africa announced their official unification under the banner of al-Qaeda in the Islamic Maghreb (AQIM). In a statement released online, it was revealed that three groups—Ansar Dine (AQIM’s Sahara branch), Al Murabitoon and Katibat Macina—had merged to form Jama’at Nusrat al-Islam wal-Muslimin (Nusrat al-Islam hereafter), which translates to ‘The Group for the Support of Islam and Muslims’. Ansar Dine’s longtime leader, Iyad Ag Ghaly, stated that this new group would fall under the banner of AQIM and form part of AQ’s international network. However, questions swirl around how much direct control AQ Core (AQC) maintains over their so-called affiliates—both in a general sense but also specifically for the case of Nusrat al-Islam.

Evaluating AQIM’s history offers some valuable clues as to how Nusrat al-Islam might navigate its relationship with AQC. AQIM has its origins in the fight against Algeria’s secular government in the 1990s, after the cancellation of elections that seemed likely to bring Islamists to power. In 1998, certain members of Algeria’s Armed Islamic Group expressed concern that their use of tactics such as beheadings were alienating their Algerian support base. They subsequently broke away from the group to form the Salafist Group for Preaching and Combat (GSPC). Initially, GSPC garnered support by promising to continue the rebellion (against the secular government) without killing civilians. In the early 2000s however, a government amnesty and counterterrorism campaign drove the group into disarray. After formally establishing itself as AQIM in 2007, the group expanded to parts of Mali, Mauritania and Niger, incorporating more localised groups along the way.

To mark its debut as AQIM, the group strategically changed tactics to reflect Osama Bin Laden’s concentration on the ‘far enemy’—the West in general and the US in particular—while also retaining their local and regional activities. The group began focusing on UN, Israeli and American targets in the region, and went after Algeria’s energy infrastructure, none of which had been a priority in the past. The group also expanded its primary focus to include France, as well as the Algerian regime, and began using suicide bombings and car bombs more strategically by targeting aid workers, tourists, diplomats, and employees of multinational or foreign companies.

Historically, the partnership between AQIM and AQC has been mutually beneficial. An endorsement from AQC allowed AQIM to attract greater funding from donors with deep pockets, particularly those in the Gulf. Moreover, in 2007, when AQIM was attempting to replace their more local, Algerian-focused brand with a regional one, acknowledgement by AQC ensured publicity for the group beyond its traditional borders whilst simultaneously facilitating recruitment. On the other hand, incorporating these new groups into the global AQ franchise allowed AQC to demonstrate its continued relevance and to continue to fulfill its mission of global jihad while gaining greater access to a region geographically close to Europe. Despite this mutually-beneficial history, AQIM is seen today as retaining a high-degree of independence—working with AQC ‘more as partners than as proxies’.

In a similar pattern to AQIM, the traditional focus for many of the groups within the newly-formed Nusrat al-Islam has been local, even tribal, in nature. While partnering with AQIM (and by extension AQC) will help solve some problems related to logistics, branding and recruitment; partnering with such a globally-inclined group will also change the nature of their struggle, thereby decreasing Nusrat al-Islam’s chances of appealing to their local/regional support base and achieving their local objectives i.e. control of territory. In order to control actual territory—which Daniel Byman from The Brookings Institution argues is one of the biggest transformational changes to occur amongst terrorist organisations in the 21st century—groups must now effectively run a government of their own. This includes enforcing law and order and providing certain services, all of which tether their cause to a certain region or locality.

Where Nusrat al-Islam will sit alongside AQC in the long-term remains unclear. Looking at the history of AQIM, as well as realities on the ground, suggests that, as it’s currently constituted, AQC won’t hold direct authority over this new group. Similarly, while Nusrat al-Islam may opportunistically change their tactics to reflect AQ’s more global agenda—perhaps by mounting attacks on US and French interests in the region as a means of demonstrating their usefulness to the AQ franchise—they’re ultimately more than likely to retain their local and regional focus. While we can’t be certain as to how the AQ franchise will develop following this recent addition, its evident ability to adapt to changing environments and cultivate relationships with local extremist organisations, mean it will no-doubt remain a point of interest for analysts of the region well into the future.

The age of blowback terror

World powers have often been known to intervene, overtly and covertly, to overthrow other countries’ governments, install pliant regimes, and then prop up those regimes, even with military action. But, more often than not, what seems like a good idea in the short term often brings about disastrous unintended consequences, with intervention causing countries to dissolve into conflict, and intervening powers emerging as targets of violence. That sequence is starkly apparent today, as countries that have meddled in the Middle East face a surge in terrorist attacks.

Last month, Salman Ramadan Abedi—a 22-year-old British-born son of Libyan immigrants—carried out a suicide bombing at the concert of the American pop star Ariana Grande in Manchester, England. The bombing—the worst terrorist attack in the United Kingdom in more than a decade—can be described only as blowback from the activities of the UK and its allies in Libya, where external intervention has given rise to a battle-worn terrorist haven.

The UK has not just actively aided jihadists in Libya; it encouraged foreign fighters, including British Libyans, to get involved in the NATO-led operation that toppled Colonel Muammar el-Qaddafi’s regime in 2011. Among those fighters were Abedi’s father, a longtime member of the al-Qaeda-linked Libyan Islamic Fighting Group, whose functionaries were imprisoned or forced into exile during Qaddafi’s rule. The elder Abedi returned to Libya six years ago to fight alongside a new Western-backed Islamist militia known as the Tripoli Brigade. His son had recently returned from a visit to Libya when he carried out the Manchester Arena attack.

This was not the first time a former ‘Islamic holy warrior’ passed jihadism to his Western-born son. Omar Saddiqui Mateen, who carried out last June’s Pulse nightclub shooting in Orlando, Florida—the deadliest single-day mass shooting in US history—also drew inspiration from his father, who fought with the US-backed mujahedeen forces that drove the Soviet Union out of Afghanistan in the 1980s.

In fact, the United States’ activities in Afghanistan at that time may be the single biggest source of blowback terrorism today. With the help of Pakistan’s Inter-Services Intelligence agency and Saudi Arabia’s money, the CIA staged what remains the largest covert operation in its history, training and arming thousands of anti-Soviet insurgents. The US also spent $50 million on a ‘jihad literacy’ project to inspire Afghans to fight the Soviet ‘infidels’ and to portray the CIA-trained guerrillas as ‘holy warriors.’

After the Soviets left, however, many of those holy warriors ended up forming al-Qaeda, the Taliban, and other terrorist groups. Some, such as Osama bin Laden, remained in the Afghanistan-Pakistan belt, turning it into a base for organising international terrorism, like the September 11, 2001, attacks in the US. Others returned to their home countries—from Egypt to the Philippines—to wage terror campaigns against what they viewed as Western-tainted governments. ‘We helped to create the problem that we are now fighting,’ then-Secretary of State Hillary Clinton admitted in 2010.

Yet the US—indeed, the entire West—seems not to have learned its lesson. Clinton herself was instrumental in coaxing a hesitant President Barack Obama to back military action to depose Qaddafi in Libya. As a result, just as President George W. Bush will be remembered for the unraveling of Iraq, one of Obama’s central legacies is the mayhem in Libya.

In Syria, the CIA is again supporting supposedly ‘moderate’ jihadist rebel factions, many of which have links to groups like al-Qaeda. Russia, for its part, has been propping up its client, President Bashar al-Assad—and experiencing blowback of its own, exemplified by the 2015 downing of a Russian airliner over the Sinai Peninsula. Russia has also been seeking to use the Taliban to tie down the US militarily in Afghanistan.

As for Europe, two jihadist citadels—Syria and Libya—now sit on its doorstep, and the blowback from its past interventions, exemplified by terrorist attacks in France, Germany, and the UK, is intensifying. Meanwhile, Bin Laden’s favorite son, Hamza bin Laden, is seeking to revive al-Qaeda’s global network.

Of course, regional powers, too, have had plenty to do with perpetuating the cycle of chaos and conflict in the Middle East. Saudi Arabia may have fallen out with a fellow jihad-bankrolling state, Qatar, but it continues to engage in a brutal proxy war with Iran in Yemen, which has brought that country, like Iraq and Libya, to the brink of state failure.

Moreover, Saudi Arabia has been the chief exporter of intolerant and extremist Wahhabi Islam since the second half of the Cold War. Western powers, which viewed Wahhabism as an antidote to communism and the 1979 Shia ‘revolution’ in Iran, tacitly encouraged it.

Ultimately, Wahhabi fanaticism became the basis of modern Sunni Islamist terror, and Saudi Arabia itself is now threatened by its own creation. Pakistan—another major state sponsor of terrorism—is also seeing its chickens coming home to roost, with a spate of terrorist attacks.

It is high time for a new approach. Recognizing that arming or supporting Islamist radicals anywhere ultimately fuels international terrorism, such alliances of convenience should be avoided. In general, Western powers should resist the temptation to intervene at all. Instead, they should work systematically to discredit what British Prime Minister Theresa May has called ‘the evil ideology of Islamist extremism.’

On this front, US President Donald Trump has already sent the wrong message. On his first foreign trip, he visited Saudi Arabia, a decadent theocracy where, ironically, he opened the Global Center for Combating Extremist Ideology. As the US and its allies continue to face terrorist blowback, one hopes that Trump comes to his senses, and helps to turn the seemingly interminable War on Terror that Bush launched in 2001 into a battle that can actually be won.

The Lindt Café siege: lessons from the coronial inquest (part one)

Image courtesy of Wikimedia Commons.

In a tragic twist of timing, the report on Australia’s worst terrorist incident in recent years was handed down only hours after the suicide bombing in Manchester Arena, the first mass-casualty jihadist terrorist attack in the UK for a decade and a half.

The lessons from the coronial inquest which followed the Lindt Café siege are extremely important to Australia, and we need to reflect and learn from them. This first in a series of articles on the siege and the inquest’s findings will examine what the process and the findings tell us about how best to review terrorism incidents.

NSW Coroner Michael Barnes’ 472-page report is a comprehensive, considered and weighty tome. While the role of an inquest is limited to determining cause of death, the coroner may seek to examine other matters that help to shed light on how the deaths occurred. The NSW Coroner has done just that.

Media attention has focussed on Man Haron Monis’ propensity for violence, the negotiation process and whether the police should have taken action earlier. But the report’s richness comes from the surprising array of other areas that it examined. Policy for bail application and concession, file management, handling of ‘triple 0’ calls, how to track and record what occurs during an incident, the impact of transition of a situation to a terrorist incident and the practicalities of applying CT policies and plans to handle a terrorist event are just some of the areas that the report unpacks.

Barnes has examined the process of dealing with a terrorist incident in a way that Australians haven’t seen in recent times, and he’s tracked it across the full range of the intelligence, legal and operational processes. That’s cause for both reassurance and concern.

It’s reassuring that the report provides a valuable insight into many aspects of Australia’s counterterrorism machinery, with judgements on how well they worked and where they might be improved.

But it’s concerning that it’s only in a Coroner’s report we see such a comprehensive review of the end-to-end operation of counterterrorism machinery in a major incident. And it’s vitally important that the coronial process doesn’t take the place of such reviews. The Coroner’s role is to determine cause of death, not to comprehensively assess CT arrangements. The report is an extremely valuable artefact, but should be used as one input to broader reviews.

The Commonwealth has commissioned a number of reviews of CT capability, notably the 2015 Review of Australia’s Counter-Terrorism Machinery for a Safer Australia—delayed to incorporate consideration of the Lindt siege—and former Defence Secretary Ric Smith’s 2008 Review of homeland and border security. CT has featured in various reviews of the intelligence community. COAG also reviewed national CT laws, leading to the wide-ranging program of commonwealth and state legislation that continues to hold Australia in good stead. The 2015 ‘CT machinery’ review led to the appointment of the CT Coordinator, who’s tasked with giving the government a clear picture of the nation’s combined CT efforts.

Immediately after the siege, the Commonwealth and NSW governments undertook a joint review published in February 2015. That provided the opportunity to quickly learn lessons and apply them to CT capability. It’s a great model for reviews.

But we don’t have a standing regime to regularly review and publicly report on the state of CT arrangements. Since the 2015 government report on Lindt, there hasn’t been another process comprehensively reviewing how CT capabilities and arrangements are tracking and how they work together across the jurisdictions, alongside business and the broader community. In a time of a quickly evolving terrorist threats and significant effort into developing and adapting Australia’s CT capability, that will be essential.

After the Lindt Café siege, the public was left wondering how well-placed Australia is to counter the highly likely threat of a major terrorist attack. We have a standing body which oversees CT arrangements—the Australia-New Zealand Counter-Terrorism Committee (ANZCTC)—which reports to COAG and the New Zealand government. The committee also links into the business community through its Business Advisory Group. The ANZCTC would be well placed to institute regular and comprehensive reviews.

An annual review would provide an active and critical look at capabilities, informed by analysis of CT-related events including investigations, disruptions and attacks, as well as the training and exercise regime. In addition to the various interagency exercises held by tactical units, such the police and the ADF, the decision-making of all relevant authorities also needs testing.

ASPI’s Anthony Bergin and Paul Barnes recently highlighted the need for health first responders’ involvement in those exercises. There’s an urgent need for exercises to truly test the abilities of all those likely to be involved—from state and territory leaders, Commonwealth officials and emergency teams to tactical units—to prepare them for the ambiguity of a real terrorist incident. The Coroner’s finding, that there appeared to be misunderstandings at Lindt about how NSW should engage with the Commonwealth, reinforces that.

Australia does have very strong CT capabilities and arrangements, and the institution of an annual National Security Statement by the Prime Minister has been an important addition to public understanding of the terrorist and CT environments. But it needs to be enhanced through regular reviews of evolving capability, with both classified and public reports.

That will encourage development of effective CT arrangements and ensure the public is regularly updated. Should a mass-casualty attack succeed, such reviews will play a vital role in ensuring that the public is clearly informed about what happened and what’s being done to deal with the aftermath.

Budget 2017: tell me what you really think

Image courtesy of Pixabay user eak_kkk.

As is my habit when preparing for the Federal Budget, I’ve been going through public polling on attitudes to defence spending and other issues. Here’s a quick summary of what I found.

The importance that people attach to defence compared with other issues continues to decline. According to a Ray Morgan poll from late last year, only 4% of people said that terrorism/war/security issues were the most important facing Australia, compared with 37% who identified economic issues. Things were very different back in 2005, when 21% of people chose terrorism/war/security issues and only 14% economic issues. (Curiously, Australians rated terrorism/war/security issues as the most important issues facing the world in the 2016 survey.)

A similar result emerged from a March 2017 Ipsos poll, which asked people to identify the three most important issues facing Australia. Defence ranked 12th out of 19 possibilities, with only 9% of people including it. The top five responses were healthcare (35%), crime (28%), cost of living (27%), unemployment (26%) and housing (26%).

With a federal election completed last year, there was also another installment of the long-running Australian Election Study (AES) to digest. Consistent with the declining perception of the importance of defence, support for increased defence spending fell for the fifth election in a row. Back in 2001, more than 60% of respondents favoured higher defence spending, compared with fewer than 24% today. In terms of alternative areas for increased spending, defence fell behind health (67%), education (61%), old age pensions (53%), police and law enforcement (45%) and business and industry (27%).

In more positive news, the 2016 AES found that the number of people who agreed that Australia would be able to defend itself continued to trend upwards, from 15% in 1996 to 31% today. Similarly, the number of people who agree that Australia’s defence is stronger now than it was 10 years ago has grown from 39% in 2013 to 45% in 2016 (though significantly higher figures were recorded in 2004, 2007 and 2010). Perhaps the declining willingness to invest in Australia’s defence reflects, at least in part, growing confidence in the Australian Defence Force.

Despite the Morgan poll result, terrorism remains an issue in many people’s minds. Consider the ANU poll from July 2016 on attitudes to national security. When asked: ‘How concerned are you personally about yourself or a family member being the victim of a future terrorist attack in Australia?’, 16% of people said that they were very concerned, 29% somewhat concerned, 35% not very concerned, and 20% not at all concerned. That’s a 45–55% split between those expressing higher as opposed to lower levels of concern. In contrast, when asked ‘How concerned, if at all, are you about the possible rise of Islamic extremism in Australia?’, 71% said that they were somewhat or very concerned, and only 29% said that they weren’t too concerned or not at all concerned.

A series of Essential Media polls from 2014 to 2016 found that between 57% (September 2014) and 76% (November 2015) of respondents said that the risk of terrorism in Australia has increased. The most recent figure, from October 2016, was 73%. Not surprisingly, polls around that time by Essential Media and the ANU found consistent support for strong counterterrorism measures. For example, the ANU poll found that 67% of respondents supported data retention laws as justifiable measure to combat terrorism, while only 33% said those laws weren’t justified on privacy grounds.

Public support for Australia’s contribution to US-led operations in Iraq and Syria has varied since 2014. An Essential Media poll from late 2015 found that 32% of people favoured increased Australian military involvement and 19% favoured decreased involvement. By April 2017, the figures had effectively switched, to 18% favouring an increase and 32% a decrease. In each case, around 30% wanted no change and 20% didn’t know.

With the budget less than a week away, what might recent polling on defence and security issues say about the prospects for defence spending? Despite its hand-on-heart promise to boost spending to 2% of GDP, the relatively low priority accorded defence in public perception might create a temptation for the government. While that’s surely true, I think that there are also deeper and more crucial factors at play.

The government was returned in 2016 with a single seat majority. And recent state and federal elections have shown that the electorate is willing to turn on a dime if a government incurs its displeasure. What’s more, as the table below shows, the electorate has been steadily deserting the mainstream parties over the past decade.

Percent of votes cast to minor parties and independents in recent federal elections

2007 2010 2013 2017
House of Representatives (non-Labor/Coalition/Green) 6.74 6.93 12.42 12.91
House of Representatives (non-Labor/Coalition) 14.53 18.69 21.07 23.23
Senate (non-Labor/Coalition/Green) 10.72 13.46 23.54 26.29
Senate (non-Labor/Coalition) 19.76 26.57 32.19 34.94

Source: Australian Electoral Commission

Voter’s disenchantment with mainstream politics is a global trend. A January 2017 Ipsos poll across 23 advanced economies found that, on average, 81% of respondents had either ‘no confidence’ or ‘not very much confidence’ in their country’s political parties. Australia scored 79%. And cynicism is rife: an average of 63% of respondents agreed that their country ‘needs a strong leader to take the country back from the rich and powerful’. In Australia, the figure was an alarming 71%. Finally, an average of 64% of respondents agreed that ‘traditional parties and politicians [in their country] don’t care about people like me’. The figure for Australia was a sobering 61%.

The risk is that the Federal government’s ability to resist populist demands will be diminished by its precarious electoral position—especially given the electorate’s demonstrated volatility and deepening dissatisfaction with mainstream politics. It’s no longer a question of whose turn it is to enjoy the perks of office. The major parties are fighting for their very survival. As a result, in the longer term the government may struggle to simultaneously placate a restive electorate and boost defence spending, let alone return the budget to surplus.

The Counterterrorism Yearbook 2017: Europe

Image courtesy of Flickr user Keno Photography - Kenan Šabanović.

2016 proved to be a busy year for CT in Europe as the number of jihadi-related attacks increased and the nature of the threat evolved, with most plots involving ‘home grown’ radicalised individuals, as opposed to foreign fighters.

While EU member states have CT strategies in place, the attacks in 2015 and 2016 created a new sense of urgency. France adopted its Action Plan against Terrorism and Radicalisation in May—six months after the Paris attacks and six weeks after the Brussels attacks. Belgium’s 2015 ‘30 measures’ action plan was largely implemented, and complemented in 2016 by new measures to improve interagency coordination necessary for a federal state. German Chancellor Merkel announced her ‘nine-point security plan’ a few days after the attacks in Würzburg and Ansbach, and Germany adopted a new strategy in to prevent violent extremism. Other countries such as Sweden and Denmark had already adopted similar action plans.

The unprecedented demands on law enforcement and security services led some governments to announce additional CT resources. France hired 7,500 new justice and home affairs staff in 2015–16 as part of around €900 million committed to CT, and 650 additional domestic intelligence positions were announced for 2016–17. Belgium similarly pledged an additional €400 million for CT after the Paris attacks and committed to recruiting 1,000 new staff. Germany announced similar measures following the summer attacks.

New CT laws were progressed in the most affected countries. The French and German judicial frameworks were amended to reinforce security services’ operational capability, including expanding the use of special investigation techniques such as wiretapping. France also introduced longer prison sentences for terrorists—including possible imprisonment in perpetuity—while Belgium is seeking to revise its constitution to lengthen administrative detention from 24 to 72 hours for terrorism. More stringent measures were taken against hate speech, with Belgium outlawing websites preaching hate and France criminalising the consultation of jihadi websites.

At the EU, the unprecedented threat level enabled some major breakthroughs, particularly in police and intelligence cooperation. The G11 group of most affected countries played a key role in CT coordination. Initiated by Belgium in 2013, the G11 now meets informally before meetings of the 28 EU ministers of justice and home affairs.

EU priorities included encouraging effective information sharing among members supported by enhanced data collection, improving cooperation between the European Agendas on Security and  Immigration and reinforcing the EU’s external borders by establishing the European Border and Coast Guard Agency.

Members agreed to enhance intelligence cooperation through the informal Counter Terrorism Group (CTG), which brings together the heads of European intelligence services. Under Dutch leadership, the group agreed to further standardise and systematise the exchange of information.

The most notable operational development was the launch of the European Counter Terrorism Centre (ECTC)  bringing together representatives from Europol and EU member states to enhance CT cooperation. The support for this significant development was enhanced by the perceived added value of Europol’s Task Force Fraternité, established to investigate international aspects of the jihadist network behind the Paris and Brussels attacks.

In April 2016 the European Parliament adopted the Passenger Name Record (PNR) regime after more than five years of negotiations. The regime allows member states to collect and retain details of passengers on  flights in and out of Europe. While member states have two years to implement the new rules, Belgium and France anticipated the EU decision by commencing work on national PNR arrangements, including extending the measure to maritime travel and, in Belgium, to high-speed trains. Questions remain, however, about the real value of this tool, and specifically how it will be used by intelligence services.

A number of countries implemented laws based on UN Security Council Resolution (UNSCR) 2178 (2014), which makes it  a criminal offence to travel, or attempt to travel, to another country for terrorist purposes, to provide or receive terrorist training, or to finance travel for terrorist purposes. While some states had already taken legal measures to restrict the travel of foreign fighters, countering terrorist financing became a real priority in 2016, particularly in Belgium, France and Germany. A new European Commission directive to combat terrorism was negotiated through 2016 and is expected to be adopted in early 2017. It will replace those from 2002 and 2008, and put into EU law the UNSCR 2178 elements and Financial Action Task Force recommendations.

Member states and institutions also worked to develop CT partnerships with countries such as Turkey, Morocco and Tunisia. They took part in diplomatic and military initiatives, notably with the US-led anti-IS coalition. France, Belgium, Germany, Italy, Denmark and the Netherlands participate in military operations in Iraq and Syria.

Home grown plots will continue in 2017, while intelligence services also fear the return of foreign fighters to Europe as IS loses its safe havens in Syria, although it’s unclear how many will come back and with what intentions. Governments understand the need for an effective strategy to deal with potential returnees and home grown terrorists, but at this stage most countries are still experimenting with different approaches to deradicalisation and disengagement.