Michael V. Hayden’s NSA/CIA Work Algorithms

1. What decision will this intelligence actually support?
2. Which communications change makes the old method insufficient?
3. What legal, technical, and minimization boundary governs the requirement?

Define the intelligence need first, then constrain technical ambition by authority, auditability, and mission relevance.

SIGINT requirement memo; authority map; minimization note

cryptologic strategy; requirements discipline

Technical reach can become mission creep if the decision question is vague.

1. Which system failure threatens mission continuity?
2. Which modernization bet is reversible, testable, and governed?
3. Who audits the contractor, integration, and privacy risks?

Break modernization into scoped programs with decision gates, independent review, and fallback capacity.

portfolio dashboard; program-gate review; technical debt ledger

technical management; acquisition governance

Transformation rhetoric can mask weak acquisition controls.

1. What can metadata legitimately show and what can it not show?
2. What corroboration is necessary before action?
3. What U.S.-person, minimization, or privacy issue arises?

Keep analytic inference, legal authority, and operational consequence visibly separated.

metadata inference caveat; corroboration table; privacy review note

analytic caveating; privacy engineering

Pattern-finding can create false certainty and social-map overreach.

1. Which mission function failed?
2. Was the cause technical, managerial, procurement, or cultural?
3. What resilience investment prevents recurrence?

Convert failures into architecture, staffing, and governance fixes rather than isolated blame.

root-cause review; resilience plan; continuity metric

systems diagnosis; continuity planning

A crisis can justify spending without learning.

1. What must remain government-resident?
2. What interface lets the agency verify performance?
3. How are cost, schedule, privacy, and security audited?

Use outside expertise only with government-retained architecture, test rights, and accountability.

build-buy memo; contractor risk register; acceptance tests

program governance; institutional design

Outsourcing core judgment hollows out the institution.

1. Which legacy expertise remains essential?
2. Which new skill must be recruited or trained?
3. What culture blocks modernization?

Align mission, skill, promotion, training, and morale rather than treating modernization as software alone.

skill map; training plan; morale-risk note

workforce strategy; change management

Cultural reform can become coercive if experienced professionals are treated as obsolete.

1. Which fragment changes the threat picture?
2. Who needs the warning now?
3. What confidence band and caveat must travel with it?

Create decision-ready warning products that retain analytic humility.

I&W brief; uncertainty note; dissemination log

warning analysis; executive briefing

Compression may erase dissent or overstate coherence.

1. Which link is operationally meaningful rather than incidental?
2. What independent evidence supports intent?
3. What civil-liberties boundary constrains the inference?

Build threat hypotheses that can be falsified and reviewed.

network hypothesis; confidence grade; review checklist

network analysis; evidentiary discipline

Network logic can expand suspicion faster than evidence.

1. What is the time window?
2. Which lawful path is fastest?
3. What record proves the emergency rationale later?

Find the fastest authorized path and write down the emergency logic before action hardens into precedent.

emergency authority memo; decision log; sunset condition

crisis law; command discipline

Emergency exception can become permanent governance.

1. Which center owns the mission question?
2. What information must move and what should not?
3. How is duplication, overcollection, or analytic crowding prevented?

Define lanes, access rules, and output standards across CIA, NSA, NCTC, ODNI, FBI, and military consumers.

lane map; dissemination rule; fusion brief standard

interagency architecture; information-sharing design

Fusion can become bureaucratic fog if ownership is undefined.

1. Which data is actually needed?
2. How will irrelevant U.S.-person information be minimized?
3. Who can verify compliance?

Pair collection proposals with minimization, retention, access, and audit limits from the beginning.

privacy impact note; minimization plan; retention rule

privacy governance; legal compliance

Safeguards can be too secret to reassure the public.

1. What did the institution know before the event?
2. Which assumption blocked action?
3. Which structural fix is measurable?

Convert inquiry, testimony, and document production into concrete changes in collection, sharing, and analysis.

after-action matrix; reform tracker; testimony binder

organizational learning; accountability

After-action work becomes public relations if reform metrics are absent.

1. What constitutional, statutory, and executive-order basis is being claimed?
2. Who disagrees and why?
3. Where is the boundary between collection, analysis, and policy?

Build an authority map that includes objections, not just enabling language.

authority matrix; dissent note; approval record

public-law reasoning; oversight literacy

A map can become rationalization if only favorable interpretations are included.

1. Where does the communication, data, or person intersect U.S. law?
2. What court, statute, or minimization rule applies?
3. What later reviewer would question?

Flag domestic legal touchpoints early and route unresolved issues to authoritative review.

FISA boundary memo; domestic-touchpoint log; review request

surveillance law; issue spotting

Boundary ambiguity can be exploited until it damages public trust.

1. Who must be notified?
2. What facts can be briefed without exposing sources and methods?
3. What questions should Congress be able to ask later?

Prepare accurate, non-evasive oversight briefings with caveats and update triggers.

notification packet; question log; update calendar

congressional affairs; controlled transparency

Limited briefings can become symbolic oversight rather than real accountability.

1. What can be explained without harming security?
2. Which public fear is legitimate?
3. What principle limits the agency even when it could do more?

Translate classified practice into public principles, oversight structures, and accountable language.

public speech; legitimacy brief; transparency note

strategic communication; civic trust

Public explanation can sound like advocacy if it omits costs and mistakes.

1. What record will survive classification, memory, and turnover?
2. What independent reviewer can test it?
3. Which gaps would look like concealment?

Build audit trails as a normal part of high-risk intelligence governance.

decision chronology; audit file; source-of-authority chain

records discipline; IG readiness

A paper trail can be accurate yet still too restricted to build public confidence.

1. What changed in the legal environment?
2. Which process, retention rule, or approval path must change?
3. How is compliance verified?

Redesign programs to match new law, court expectations, and public legitimacy constraints.

redesign plan; compliance metric; training update

institutional adaptation; compliance engineering

Nominal compliance can preserve old assumptions under new labels.

1. Which power belongs to the DNI and which remains departmental?
2. What incentive aligns agencies?
3. What information should be common enterprise infrastructure?

Use enterprise rules, budget leverage, and mission alignment while respecting agency-specific expertise.

enterprise governance map; mission alignment note; budget linkage

IC governance; federal bureaucracy

Federation can become paralysis if no one can decide.

1. Who owns the mission outcome?
2. Which agencies must contribute?
3. What metric shows improvement?

Frame cross-agency problems as mission portfolios with owners, deliverables, and review rhythm.

mission-manager charter; performance metric; review cadence

mission architecture; performance management

Mission managers can duplicate agency chains if authority is unclear.

1. Which risk is under-resourced?
2. Which capability is duplicative?
3. What can be stopped to fund what matters?

Tie spending choices to threat priority, capability gaps, and measurable outcomes.

capability budget map; tradeoff memo; stop-doing list

resource strategy; portfolio management

Budget power can create compliance without conviction.

1. Which cultural barrier blocks sharing?
2. What joint experience builds trust?
3. How does career incentive reinforce collaboration?

Promote rotational service, common standards, and shared mission language.

joint-duty plan; career incentive model; culture note

culture change; talent system design

Rotation can become box-checking if it lacks real responsibility.

1. Which unresolved issue is draining morale?
2. Who owns the lane?
3. What can be decided quickly to restore focus?

Clarify authority, settle disputes, and signal that the agency can return to mission execution.

lane memo; leadership note; morale pulse

executive leadership; institutional repair

Decisive clarity can feel authoritarian if dissent is ignored.

1. Which role belongs to CIA after the DNI reform?
2. How should HUMINT and open-source collection serve the community?
3. Where does analysis need protected independence?

Reframe CIA as a mission agency within a larger intelligence enterprise.

role statement; collection lane map; analytic independence note

institutional strategy; collection governance

Lane clarity can narrow imagination if it becomes bureaucratic defensiveness.

1. Which tool produces which intelligence or disruption value?
2. What is the legitimacy cost?
3. What review cadence prevents drift?

Review the whole counterterrorism portfolio rather than optimizing single programs in isolation.

CT portfolio review; risk ledger; sunset trigger

portfolio risk; counterterrorism governance

Portfolio success metrics may hide individual-rights costs.

1. What alternative hypothesis explains the same facts?
2. Who disagrees and what evidence would prove them right?
3. How is dissent shown to the decision-maker?

Build red-team and dissent mechanisms into high-stakes estimates.

alternative analysis; red-team memo; dissent appendix

analytic standards; structured thinking

Dissent can be formalized but not influential.

1. What does the partner want?
2. What part of the report can be independently checked?
3. What caveat follows the intelligence into policy?

Use liaison reporting with explicit confidence bands and incentive analysis.

liaison reliability note; confidence caveat; validation tasking

liaison analysis; source criticism

Partner narratives can launder policy preferences as intelligence.

1. What was claimed, what was documented, and what was later disputed?
2. Who was informed and when?
3. What institutional safeguards failed?

Turn the episode into a transparent accountability file rather than a tactical template.

legacy audit; claim-evidence table; accountability chronology

ethical audit; source comparison

Defensive memoir can crowd out victim, legal, and oversight evidence.

1. Who controls the person?
2. What law, treaty, or policy applies?
3. What risk does partner behavior create?

Demand custody-chain clarity and review before accepting policy convenience.

custody boundary memo; partner-risk note; oversight file

law-of-war issue spotting; partner governance

Outsourcing custody can become outsourcing responsibility.

1. What must remain secret?
2. What principle or statistic can be disclosed?
3. What secrecy is covering embarrassment rather than security?

Separate legitimate classification from avoidable opacity and explain the governing principle.

classification review; transparency plan; public trust memo

classification governance; public accountability

Disclosure without context can mislead as much as secrecy.

1. What is the substance of the concern?
2. Is there a protected channel for review?
3. What retaliation or chilling effect might follow?

Convert dissent into reviewable claims, protecting both mission and lawful whistleblowing.

concern log; protected review path; corrective-action memo

organizational ethics; whistleblower governance

Labeling dissent as disloyal can suppress early warnings.

1. How will citizens experience the power?
2. What happens if the program is exposed tomorrow?
3. Which narrower alternative preserves mission value?

Run a pre-mortem that weighs efficacy against civil-liberties, constitutional, and legitimacy cost.

blowback ledger; least-intrusive-alternative memo; sunset review

risk foresight; constitutional prudence

Pre-mortems fail if leaders treat them as paperwork.

1. Is the action merely legal or also wise?
2. What norm is being bent?
3. What rule would we want applied by a future adversarial administration?

Pair edge-seeking effectiveness with self-restraint, sunset clauses, and independent review.

restraint memo; sunset clause; adversarial-administration test

prudential judgment; democratic restraint

Edge-seeking can normalize maximalist government power.