Title: Visit Precis: SWEDUSA
Release Date: 2013-12-11
Description: This briefing document, produced ahead of the SWEDUSA Strategic Planning Conference of 24-26 April, outlines General Keith Alexander’s talking points for the event: see the SVT article FRA part of top-secret hacker project, 11 December 2013.
Document: TOP SECRET//COMINT//NOFORN
SWEDUSA 2013 STRATEGIC PLANNING CONFERENCE (SPC)
MR. INGVAR ÀKESSON
FORSVARETS RADIOANSTALT (FRA)
24-26 APRIL 2013
GEN A Opening Remarks: 24 April 2013//0800-0815
GEN A Hosted Discussions: 24 April 2013//1130-1200
EXDIR Hosted Lunch: 24 April 2013//1200-1245 - Canine Suite
GEN A Hosted Dinner: 25 April 2013//1830 - Quarters
Accompanying Senior: Mr. James M. Cusick, Director Foreign Affairs (D1RFA)
• (S//REL TO USA, SWE) Mr. Ingvar Âkesson (OH-kes-son) has been the FRA Director-
General since 2003. He was slated to retire last August, but was extended until August
2013. He will be accompanied by Ms. Christina Malm, D/D1R, FRA. The remainder of
the delegation includes:
Ms. Lena Nyberg, S1GINT Director, FRA
Mr. Mats Nordqvist, Technical Director, FRA
Mr. , Strategic Advisor Chief Studies and Development, FRA
Ms. , Chief Foreign Relations Officer, FRA
PURPOSE OF THE VISIT:
• (S//REL TO USA, SWE) Each year a high-level FRA delegation visits NSA/CSS to
attend the SWEDUSA SPC. Discussions will center on topics of mutual interest and
future areas of collaboration. It also presents an opportunity for NSA/CSS leadership to
reiterate their commitment to the Swedish partnership.
• (TS//REL USA, SWE) FRA requested a WINTERLIGHT (Quantum project) update and
asked to hear about our plans for sharing reports on Quantum tipping or intercepts from
the Quantum tipping. FRA plans to start the conference by giving an overview of its
S1GINT Roadmap, to include Russia,
. It will also provide a Cyber update—specifically
briefing NSA on its new cyber division, its active and passive sensors and tradecraft
collaboration with NSA/CSS Threat Operations Center (NTOC); updates on the special
Derived From: NSA/CSSM 1-52
Declassify On: 30320108
project and NAPA-3; and a discussion of how new legislation has helped improve the
FRA-Swedish Security Service (SAPO) relationship.
CDR/DCDR/DDIR GUIDANCE: (U) N/A
PREP SESSION GUIDANCE:
• (U) Due to the nature of the visit, no specific guidance has been conveyed to other
• (U//FOUO) Further Cyber Security/Defense Cooperation;
• (S//REL TO USA, SWE) Future CT cooperation (value of CT Deployed Analyst);
• (S//REL TO USA, SWE) Status of relationship between FRA and SAPO under the new
• (TS//REL TO USA, SWE) Computer Network Exploitation (CNE) Update;
• (TS//REL TO USA, SWE) Update on special project;
CYBERCOM REQUESTED: (U) N/A
• (S//REL TO USA, SWE) Emphasize the value of the NSA-FRA partnership.
(S//REL USA, SWE) Recommend General Alexander and D/DIR emphasize the following
• (TS//SI//REL TO USA, SWE) Acknowledge the success that NSA, FRA, and GCHQ
have had on WINTERLIGHT. Last month, we received a message from our Swedish
partner that GCHQ received FRA QUANTUM tips that led to 100 shots, five of which
were successfully redirected to the GCHQ server. The Foreign Affairs Directorate (FAD)
confirmed with Tailored Access Operations (TAO) that this validates the "proof of
concept" that was originally trying to be accomplished. Additionally, FAD, TAO, and
Enterprise Information Technology Services are still working through the technical
solution to have FRA tip directly to NSA. S3 Data Acquisitions’ goal is to have a
solution for a direct tip to FRA operational by this summer. The Quantum effort
motivated the recent XKEYSCORE installation. FRA is currently evaluating it for use to
support their SIGINT Development work.
Cable Access/Reporting and Analysis:
• (TS//SI//REL TO USA, SWE) Highlight that NSA/CSS would like to continue to
collaborate on FRA’s cable access program, which has resulted in unique SIGINT
reporting on a variety of high-priority SIGINT topics (123 reports thus far this fiscal
year). FRA continues to gain access to more data from additional telecommunications
companies, making the cable access potentially lucrative for NSA/CSS for targets beyond
• (TS//REL TO USA, SWE) Stress that NTOC is ready to seriously engage with FRA on
cyber defense. Mr. Akesson has reviewed the Memorandum of Understanding (MOU)
and has no changes; therefore, we would like to have an official signing during the
24 April 1130-1200 discussions.
• (TS//S1//NF) NTOC shared some information with FRA about a Swedish intrusion in
November 2012. FRA came in with questions in February 2013 that led NTOC to do
more analysis. Subsequently, NTOC reached the same conclusion as FRA, that it
involved the Israeli Embassy in Stockholm. FRA asked if it could alert Israel and NTOC
agreed that it could tell Israel about the intrusion. Israel’s identity was never
Secure VTC Capability
• (S//REL TO USA, FVEY) Encourage FRA to set up its equipment soonest to allow for
secure VTC capability. That capability already exists with Norway and Denmark and has
shown benefit in expanding analytic collaboration on a myriad of issues. FRA’s
technology directorate is just waiting on requirements from its SIGINT directorate to be
able to finalize the set-up and installation.
• (TS//SI//REL TO USA, SWE) NSA/CSS’ Counterterrorism (CT) analysts and FRA
continue to cooperate and collaborate on CT threat-related activities in Europe. Several
analyst-to-analyst meetings have taken place and European Cryptologic Center (ECC) in
Darmstadt, Germany, is formally coordinating a Staff Processing Form (SPF) to have
Sweden assist NSA/CSS with high-priority CT Swedish language traffic that ECC is
currently unable to fully analyze. In January 2013, CT established its first CT deployed
analyst position in Stockholm. Also in January, FRA and SAPO were legally allowed to
collaborate after a 4-year hiatus.
• (S//SI//REL TO USA, SWE) Encourage increased collaboration on CT threat streams.
• (S//SI//REL TO USA, SWE) Thank Sweden for its continued work on the Russian
target, and underscore the primary role that FRA plays as a leading partner to work the
Russian target, including Russian leadership, energy, and , and
counterintelligence. FRA’s cable access has resulted in unique SIGINT reporting on all
of these areas.
• (S//SI//REL TO USA, SWE) Encourage continued collaboration and sharing of reporting
on Russian topics.
• (S//REL TO USA, SWE) GEN Alexander’s opening remarks will set the tone for a
• (S//REL TO USA, SWE) FRA will provide briefings on FRA’s SIGrNT Roadmap; its
new cyber division; its relationship with the Swedish Internal Security Service, SAPO;
and updates on the special project and NAPA-3.
• (U//FOUO) NSA Participants: SID DIR, DIRFA, Associate D/DIR for CT, GCM, Russia
Production Center, GCM, Office of South Asia, GCM, Office of China/Korea, NTOC,
NCSC, SSO, Special Projects Office (LEGEND).
PREVIOUS VISITS AND RESPECTIVE TOPICS:
• (S//REL TO USA, SWE) Mr. Akesson last visited NSA/CSS for SWEDUSA in May
POTENTIAL LANDMINES: (U) None.
OTHER INFORMATION: (U) None.
RECENT PRESS INDICATIONS: (U) None.