Archive for the ‘ELECTRONIC JOURNALS’ Category

More belated posting, this time of another interview with CTC Sentinel of a senior UK counter-terrorism official, this time Jonathan Evans the former head of MI5. Previous ones have been with the current head of Counter-Terrorism Command and the former head of JTAC. Lots of interesting thoughts, insights and a few new details which might appeal to some.

A View from the CT Foxhole: Jonathan Evans, Former Director General, MI5

Lord-Jonathan-Evans-preferred-1-1200x800

March 2020, Volume 13, Issue 3

Authors: Raffaello Pantucci

Lord Evans of Weardale served as Director General of the U.K. Security Service MI5 between April 2007 and April 2013. He joined the Security Service in 1980, and he first worked on counter-espionage investigations. During the late 1980s and 1990s, he had various postings in Irish-related counterterrorism. From 1999 onward, Evans was directly involved in countering the threat from international terrorism. In 2001, he was appointed to the Security Service’s Management Board as Director of international counter terrorism, 10 days before the 9/11 attacks on the World Trade Center in New York. Evans became Deputy Director General in 2005. It was announced in October 2014 that he would become a Cross Bench life peer, after a personal nomination by the Prime Minister for his public service.

CTC: Your career in the Security Service, MI5, spanned a series of terrorist threats. Could you tell us which were the biggest evolutions you noted across ideologies and groups?

Evans: There were a number of key developments over the period I was in the Service [MI5]. First amongst them was the rise of Irish terrorism as a strategic threat rather than just something that was of concern in Northern Ireland. During my time in the Service, it became very central to London government concerns, and the Service was very involved in countering it. But it was very political terrorism, carefully calibrated to try to have a specific policy impact on the British government in contrast to the different focus of some other groups.

At the same time, we were also looking at a variety of other smaller—from the U.K. point of view—threats in terms of Palestinian terrorism in the late 70s and particularly into the 80s, and terrorism arriving from the various diaspora communities in the U.K. At one stage, we were putting a lot of focus on Sikh extremism, as there was quite a lot of support activity here which was important to the Sikh extremist activities in India. The same with the PKKa who were doing a lot of fundraising in the U.K. from Kurdish communities. A lot was done through intimidation, basically racketeering, by PKK elements in north London.

But the other really big development was the emergence of al-Qa`ida as an issue in the 1990s. From a U.K. point of view, this issue impacted us through the fact that quite a lot of the ideologues from whom groups sought fatwas were based in the U.K., like Abu Qatada, Abu Hamza, and so on. A number of people involved in the Algerian GIA—the early forerunners of what then became al-Qa`ida in the Islamic Maghreb [AQIM]—were based in the U.K., and so we were looking at al-Qa`ida from that point of view. Partly because the Americans were so focused on it, because of the attack on the USS Cole and the Africa embassy attacks, and then that transferring into the domestic threat in the period after 9/11. After then, it became by far the biggest terrorism threat that we were facing.

The initial turning point at which we took this seriously was in the second half of the 1990s, when we found that some of our European partners—in particular, the French—were very focused on the Algerian threat. Their view was that there were significant elements of this based in the U.K. This is the Londonistan period. They assessed that the Algerian elements in London were feeding into the threat that expressed themselves through the metro bombings in 1995 in Paris. So, in a sense, our initial response was in support of European friends, rather than on our own account.

There are various conspiracy theories about the Londonistan period including the notion that Her Majesty’s Government (HMG) in some way gave a free pass to the terrorist sympathizers in the U.K. on the basis that they would not attack us. This is a complete fabrication. The problem was that we didn’t actually know what was going on because we were not looking. There was all sorts of stuff going on that we just were not aware of. It was not that we were deliberately turning a blind eye, just that we had not noticed. With the creation of al-Qa`ida, the threats in the Middle East, and the problems in France particularly from the Algerians, we started to pay more attention, and once we started looking, the more we found. But at that stage, it was not actually plots to mount attacks in the U.K.

The first indication that we had an actual, live, real threat in the U.K. was in November 2000 with the arrest of Moinul Abedin and a co-conspirator in Birmingham.1 The co-conspirator was completely exonerated by the courts and subsequently rearrested on other charges. There was some precursor activity by them in Manchester some years before the attempt.

The lead that started the Birmingham investigation came to us from another European country, where, because they had come across an attempt to purchase terrorist equipment through criminal circles, they tipped us off and said “we came across this; you probably ought to look at these people.” That was the first time we’d come across them. We investigated and eventually realized that they were doing something which was immediately threatening. They were arrested on the 23rd of November [2000], which was the first arrest of anybody in the U.K. linked to al-Qa`ida who was planning an attack here. We knew they had to be planning an attack here because they had a large quantity of very volatile homemade explosive in their apartment, although we [still] don’t know the target.

At the time, we couldn’t directly link it into al-Qa`ida, although it looked as though it probably was. However, with the fall of the Taliban and the Afghan camps in 2001/2002, evidence came to light which demonstrated that this was an at least inspired al-Qa`ida plot of some sort. A few individuals such as Tariq Mahmood, known as T-Bone, who subsequently became very instrumental in fomenting terrorism out of Pakistan’s tribal areas into the West, appear to be have been involved in the margins of that operation.b

CTC: Having been involved in the investigation into the United Kingdom’s first al-Qa`ida-linked plot, you then watched as the threat evolved and matured through a whole series of plots including the July 7, 2005, attack on the London public transport system. Could you tell us about how that pre-9/11 investigation was similar or different to subsequent plot investigations?

Evans: That particular pre-9/11 investigation was the only one that appeared to have an element of direct threat to the U.K. in it. After 9/11, obviously, there was a lot of pressure on MI5 to provide assurance to HMG that if there were anything like a 9/11 being planned in the U.K., that that was identified. And in fact, there was not, as far as I recall, a huge amount of directly threatening activity that we could identify immediately after 9/11. We had a lot of resources given to us, but it was entirely proportionate to the threat we found. We were able to put the resources to good use. But in the immediate wake of 9/11, it was certainly not the sort of level of threat that developed later.

We started to see attempted attacks from 2002/2003 onwards, the most visible and probably the best known of which was the attack plan that we called Operation Crevice. It was a complex interlocking set of activities involving individuals in the U.K. home counties based out of Crawley and up into Luton. They were mostly likely planning to attack the Bluewater shopping center, but they had also talked in some detail about central London. They did not appear to have necessarily pinned down exactly what their target was going to be. But there was also a separate leg to the plot, which was an attempt to purchase what they thought was radiological material in Belgium. In fact, they were unable to source anything radiological, and it turned out to be a relatively common scam at the time, which was called Red Mercury.

The plot itself, however, appeared to be encouraged and fomented by al-Qa`ida in the tribal areas. It was one of the early ones we saw. It involved predominantly British citizens or British residents of Pakistani heritage, something which became something of a theme for this period.

One of the people who appeared in the margins of Operation Crevice was Mohammed Siddique Khan. At the time, we assessed him—probably rightly actually—as not being a terrorist himself but being a criminal who had some little scam going on at the edges of the Crevice group. He was noted and not prioritized because there was a lot going on and there were a whole series of investigations running at that point. We saw a very significant change in temperature between the second half of 2001 and the second half of 2003/2004. We saw a lot more apparent attack planning of various sorts, some of which was clear to us as a result of the questioning of American detainees who were giving information on networks in the U.K. Prioritization became very acute during this period, and unfortunately, one of the individuals who was prioritized out was Mohammed Siddique Khan, who went on to be the primary instigator of the 7 July [2005] bombings in London.

One notable thing about the July 7 bombings is that while they were an appalling and ambitious attack that killed many, the group of plotters did not fundamentally differ from all the other plans that failed to come to fruition. The only difference between the July 7 cell and all the others was that the police weren’t able to arrest them beforehand.

What you had that was different about the threat picture then versus now was the deliberate initiation or promulgation of plans from Pakistan, using intermediaries from al-Qa`ida Central into the U.K., using U.K. residents or citizens as the people who mounted the attack. Rashid Rauf is the most obvious of these intermediaries.2 Tariq Mahmood, T-Bone, became another of them, and there were one or two others. And that was characteristic of the period. From an intelligence point of view, this was a vulnerability because they were planning and trying to have an element of command and control over what was going on, which gives you some attack surface from an investigative perspective.

Whereas if you are merely facing the sort of terrorism that one has been seeing in the last few years involving low ambition and technology, without a command and control network, there is not nearly as much to investigate. On top of this all, the ‘flash to bang’ [in this more recent type of terrorism] can be very rapid.

After the July 7, 2005, attack, the next lowlight—so to speak—was the liquid bomb plot, Operation Overt, in 2006. With the police and the other agencies, we developed very good coverage of the plot as it matured. Again, it was fomented from Pakistan, there was command and control back into al-Qa`ida senior leadership in the tribal areas, and we were able to watch carefully and then move to intervene at the critical point in order to stop anything happening. That plot felt like some of the later-stage investigations into Irish terrorism that we had been doing. Because we had good intelligence coverage of what the Irish terrorist cells were doing, we could intervene at the relevant point, and we felt like we had a good insight into individual plots that were being prepared. Had that plot come to fruition, it would have possibly killed more people than were killed by 9/11 and would have been extremely difficult in terms of Anglo-U.S. relations. At the time, we were working extremely closely with the U.S., and we owe them a huge debt of gratitude for the support they were giving to us over that period. The U.S. have a quite extraordinary scale and spread of intelligence capabilities, and those were being used very regularly to help safeguard the U.K. There were some tensions in the run-up to the conclusion of Overt, but the fact of the matter is that actual arrest decision was triggered maybe just 24 hours earlier than might have been the case had we not had that American pressure. But it was a matter of judgment; I do not think it was a very critical issue.

CTC: To move to the present day, could we turn to the topic of resource allocation? If you think back to 2017, the volume of people being investigated for Islamist terrorism in the United Kingdom was around 3,000, and there was discussion of another 20,000 posing a residual risk.3 Could you talk through the capability to manage this kind of threat volume?

Evans: The question of managing the volume of threat intelligence, or potential threat intelligence, has been one of the continuing themes of the last 20 years. As you grow your intelligence capability, as the public become aware of the fact that they need to be alert and not alarmed, as the police are very focused on terrorism cases, then that does create a lot of incoming material that may indicate potential threats. But you cannot, despite the enormous investment in capacity that the British government has made over the past 15-20 years, follow up everything with equal speed and attention. So, you have to make judgments.

We developed quite a lot of resource into what one might call triage: looking at the whole flow of incoming intelligence, deciding what was most credible and most indicative of a threat, and focusing on that. This helped us decide how to deploy resources to deal with the most credible and threatening material in order to chase down any threats, which is the only logical way of dealing with it. During the time that I was involved in counterterrorism, I do not think we ever had a successful terrorist attack that came about from one of the top priority operations we were focused on. This was because we were able to put a lot of resources into priority investigations, get insight into what was going on, and make sure that the threat did not materialize. The problem was always with the material that had been assessed to be of a lesser priority, because it was in there that risks would suddenly eventuate. Because even though it was entirely logical and sensible to not focus on them on the basis of what you knew, actually you never have perfect insight.

As you grow the intelligence machinery, we started to know something about everybody who did something threatening on the streets of the U.K. And having this information but not acting upon it could be said to be a demonstration of the reach and effectiveness of the intelligence service or it could be interpreted as a blunder. But it is almost intrinsic to the nature of intelligence prioritization that the most important decision made is what not to do. And it is there that the risk lies. That is now well recognized, and post the 2017 attacks in the U.K., there was a review into this area, some work done on additional resources and further work into whether there are ways in which you can provide a degree of automation of this process. The idea being that it becomes an anomaly detection issue: you have normal activity taking place, then something changes, and this provides you with some direction about where in the potential target population you should look for a threat. Logically, this makes a lot of sense, as long as you’ve got good enough intelligence coverage to be able to detect anomalous or changed behavior. But again, if what you are looking for is a 9/11-sized plot, then you have quite a lot of opportunity to gather intelligence. If you’ve got somebody who’s been self-radicalized and whose weapon of choice is a hire [rental] car, then what is it that you’re going to spot? Hiring a car and driving to London does not necessarily suggest that there is a threat, but it does mean you could if you choose to kill people.

It is surprising to me it has taken so long for terrorist groups to get to this stage. I can remember talking 10 or 12 years ago and saying if al-Qa`ida stopped trying to outdo themselves with a plot that was even more dramatic than 9/11 and just got on with killing some people, that would be really difficult for us. Unfortunately, that’s exactly what happened. But what I would say—and this sounds rather a harsh point, but it is an important one—as a society, we can, if we choose to, continue with normal life relatively unaffected by occasional stabbings and vehicles being driven into the general public. Horrible and terrible as those events are, they are not a strategic threat to us. We are speaking soon after the atrocious events on London Bridge where [on November 29, 2019] two individuals were killed through stabbing by a known terrorist. I don’t know for certain, but I suspect if you look across London that week, there were probably other people killed in stabbings that have nothing to do with terrorism and do not get the publicity. We give the terrorists something of what they want in the way in which we react to their terrorism, which of course is classic terrorism theory from the 1960s. We need to think about how we respond to this and just not play up to what the terrorists are trying to get us to do.

CTC: Looking at the case of the November 2019 London Bridge attacker Usman Khan in particular, this raised a whole series of issues about people who have been in prison. A lot of those you were investigating are now coming toward the end of their prison sentences, if they have not already. How do you think HMG can manage or mitigate this problem, and do you think there are adequate measures in place to deal with it?

Evans: I do not think there are adequate measures in place to deal with this problem. I personally feel that we should have considerably longer sentences for terrorist aggravation where there are offenses. Deradicalization and the whole Prevent agenda is absolutely critical, but it is also by far the most difficult for government of the four pillars of the Contest strategy.c Because, from a government perspective, if you want more of the Pursue pillar, which is the part of the response which is following terrorists around and stopping them [from] doing nasty things, then you give more money to the Security Service, Police, and so on, and it happens. The Protect pillar, which focuses on hardening targets and building defenses, is similar: if you want to reduce vulnerability in the environment you allocate adequate resources, and it happens. But Prevent is about changing people’s minds. It is about arguing with them about their theology, something Western governments are peculiarly badly equipped to do. It is also very difficult to tell whether it’s working because how do you know whether somebody has genuinely repented or whether they are merely saying it because they want to be released from prison? There are clear successes in the Prevent strategy, but equally, there are some pretty spectacular failures.

We need to keep trying to find the best way of working on deradicalization [and] anti-radicalization. Anti-radicalization might be a bit easier than deradicalization, but it is always going to be something which is difficult for a secular Western government to engage with. I believe that there is a strong religious element in some of the Islamist terrorism. In the early days, [the U.K.] government was very uncomfortable about anything that had religion in it and did not want to talk about it and did not want to see it as a religious issue. They would much rather see it as an issue to do with politics, economic deprivation, or whatever. And while I am sure all those have a contributory element to them, religion does as well. However, having an argument about religion is something which government departments are not that great at. It is much easier for the Emiratis who used to be very puzzled as to why we didn’t do more about this. They would issue the sermons for mosques from their government to be read out in the mosques every Friday. I do not think the British government has many people who could write credible sermons for the mosques around the U.K. even if they had the ambition to do so.

There is also the question about what is the definition of success. The British government has been slightly in two minds about this over the years. Is the measure of success that people stop terrorism, or is it that they stop adopting what might be perceived as extremist views? Government has changed its mind periodically on that question. It is probably easier to stop people adhering to terrorism than it is stopping them adhering to views that be might be not aligned to what might be perceived as British values.

A number of the programs in the Middle East [that] seem to have had some success are successful in giving strong theological support to the idea that people should not be attacking the regime because it is an Islamic government and deserves at least their acquiescence. But this acceptance is (a) very different thing from saying that somebody necessarily signs up to what might be seen as mainstream British values on rights of women and so on. The government has chopped and changed a bit on where it stands. Some of what appeared to be fairly successful anti-radicalization measures that were being implemented at one stage were dependent upon support and engagement from some parts of the Muslim community that had extremely conservative views on issues such as women, and may have had views on Israel that diverged from the British government’s. But crucially, on the issue of whether Muslims have a moral and religious duty to attack the United Kingdom, they and the U.K. government had come to the same conclusion. All this complicated things: you are giving government support to a group who, in a number of their areas of their belief, are very far from the mainstream and whose views might be seen as extremist. As a result, I am always slightly skeptical of the viability in the U.K. of the counter-radicalization efforts some Arab countries have proclaimed to be successful, because it is not always clear to me that this is transferable to the U.K. And even if it was, it would probably be struck down by the courts in the U.K.

CTC: Turning to the question of foreign terrorist fighters [FTFs], what kind of a threat do you see from the contingent of people who went to Syria and Iraq, those who are still at large? And what do you think the government should be doing with the ones in SDF [Syrian Democratic Forces] custody?

Evans: I think there is a threat. I have considerable sympathy for the view that Ed Husain takes,d which is that if people have been involved in violent extremism and then decide that this actually has been an error and a mistake on their part, we could reasonably expect them to actively seek to counter extremism in this country rather than just saying “oh I made a mistake, I’m very sorry.” If there is genuine belief that they made an error and they have seen the error of their ways, then I do not know why you would not expect them to be giving evidence against people with whom they were cooperating and who took part in appalling crimes in Iraq and Syria. There has been a problem with getting evidence from those areas that could be accessible in the British courts. The question is why are the repentant members of that group not giving evidence and audibly reaching out to the community in saying that they want to help push back against extremism. Some people are contributing in this way, but many are not. I would like to see actions as well as words if we are going to accept that people have changed their minds.

CTC: On the FTF question, how does this compare to the earlier flows that you saw going? For example, those who went to Afghanistan.

Evans: There are some parallels. If you look at the history of radicalization in the U.K., there are similarities with earlier flows. The whole Kashmir dispute and conflict was very important in pushing people towards political, in fact relatively extreme political, positions and then across into more general extremism. Then there was the Balkans conflict, which radicalized a broader pool, where quite a lot of the grand old men of British Islamism were involved, and then went on to be very influential in bringing those sorts of messages back to the U.K. Then finally you had the same process in Afghanistan in 1999-2001 with the al-Qa`ida camps there [being] a sort of university of terrorism. From that, 9/11 was spawned alongside lots of the attacks that we saw in 2003-2010 period.

Syria has many of the same characteristics. There were people going out knowingly and actively taking extremist positions, others instead taking humanitarian positions to get out there. But once they are there and have the experience of being out there, the teaching they receive on the battlefield, the bonds of comradeship they form, the actual physical experience of battle, all work together to make them more radicalized and then ultimately bringing the threat back with them. It was absolutely clear during the post-9/11 period that this threat had been exported from Afghanistan and by those that had gone to Afghanistan, and I think that even from my slightly more distant position today, Iraq/Syria has many of the same characteristics.

The unique selling proposition for IS [the Islamic State] was the fact that it presented itself [as] a caliphate and it held territory. I always took the view that the very first thing you have to do in this particular case is take the territory away from them so as to demolish their claim to a status of a caliphate. But you needed a military process to take away some of their legitimacy. And now we will go, I guess, into a long period of threat from the [jihadi] alumni of Iraq/Syria.

CTC: I did want to pick up on your mention of the Kashmir issue and its capacity to be a push-factor toward radicalization in the United Kingdom, given the recent tensions in the region.

Evans: My main point there was that because of the particular shape of the Pakistan-Kashmiri diaspora in the U.K., Kashmir is a real hot-button issue. Inevitably, the recent actions of the Indians in Kashmir are likely to further have inflamed tempers. People care desperately about Kashmir in places like Bradford, and it is a radicalizing issue. So I would have thought that it is an exacerbating factor, although I don’t have a particular reason to believe that it will then turn itself against the U.K., given the fact this is an India-Pakistan conflict point. I can certainly see it as an intercommunal issue, although on the whole over the years, intercommunal issues haven’t really played out very heavily in the U.K. People have very strong views, but surprisingly, they don’t tend, for the most part, to play out on the streets of our cities.

CTC: An ideology that has increasingly worried people and has come under greater focus recently is the extreme right wing. Has its rise as a threat surprised you? Was it something you were focused on?

Evans: Yes, I was focused on right-wing extremism. I have always taken an interest in the far right, partly zoologically, because some of the individuals involved are so wacky that it is quite fascinating to watch them. I can remember back in the 1980s and 1990s, the saving grace of far-right extremists is that because they had such extreme and odd views, they tended to be extreme and odd people who did not tend to be very good at working with each other. You saw groups that tended to fragment and split like something out of a Monty Python film into smaller and purer groups. So, they never quite managed to get their act together into something more substantial. But from the early 2000s, and in those days it was mostly a police focus, from time to time individuals would come to light who were on the fringes of the far-right groups, who had been building bombs in their garden sheds, and who hated Muslims and so on. These cases were redolent of other earlier cases such as the London nail bomber, David Copeland, who went on a bombing campaign in London in 1999.4 He was on the fringes of the far right, not an active member of any particular organization, but took it upon himself to build bombs which he used to attack the ethnic and gay communities in London. Around the same time, there was a group called Combat 18, which was quite active and was itself a fragment of the far right. There were a few individuals in that group who started to espouse the idea of terrorism The [Security] Service worked closely with police to undertake some disruptions in the late 1990s of Combat 18 associated individuals who were consorting with people of similar cast of mind in Eastern Europe and the former Soviet bloc. These groups had explicitly decided that terrorism was part of the way forward in order to try to destabilize what they characterized as the Zionist Organized Government (ZOG).

We’re seeing similar sorts of actors again now in the far-right scene. Partly I suspect it is a reflection of the social pressures on communities as a result of austerity measures [in the U.K. in the years after the 2008 financial crisis]. There seems to be a constituency of disaffected males (for the most part, but not entirely) who find extreme right-wing beliefs attractive. And they have started to get their acts together to organize into groups and plot. And there is some evidence that they have been consciously and deliberately inspired by the perceived success of the violent Islamists in getting their grievances on the table as a result of violence and thought and thinking “well, we can do something like that.” Certainly during my time, it was the English Defence League (EDL) who had started to develop this narrative. The EDL was not quite the same as other extreme right-wing groups, but they were a reactionary group that fed off and were mutually symbiotic with [the British Islamist extremist grouping] Al Muhajiroun (ALM). The EDL emerged explicitly in response to ALM activity, though in fact they both needed each other ideologically to advance. ALM needed the EDL because they gave them justification for their position and vice versa. So, they were both mutually beneficial to each other. Looking at the threat picture now and how it is evolving, I am not surprised that we have an extreme right-wing threat. We have seen signs of it emerging for 10 years-plus, and the fact that it is now more organized with groups like National Action [a proscribed U.K. extreme right-wing group] was almost predictable.

CTC: Turning to the threat from Irish terrorism and its current state, you mentioned the importance of the threat when you joined the Service. Currently, the threat to Northern Ireland from Northern Ireland-related terrorism is assessed to be higher than the terrorist threat facing the United Kingdom as a whole from all forms of terrorism.e Could you give us some reflections on the current state of this threat?

Evans: MI5 took over primacy for national security in Northern Ireland when devolution took place in 2007, given national security cannot be devolved.f This led to greater responsibilities for MI5 in the region, and it became fairly evident quite quickly that despite the tremendous political success of the 1998 Good Friday Agreement, there was a rather fissiparous, but significant group of dissidents who did not accept the political settlement and wanted to foment terrorism. The solution, insofar as it was a solution, to IRA terrorism at the time was a political solution, which was to reach a negotiated accommodation between the different communities which both sides could just about manage to accept. There was a deliberate decision back then on the part of the republican groups to go down the political route because they saw that as a more effective way of achieving their aims, and as a result of that, there was also a diminution of support for terrorism for violence by the loyalist groups.

The current problem is that there is not a similar deal to be done with the dissidents that are left because they are irreconcilables and therefore the response to them over past 10 years has been a straight security response. During the time I was the Director General of MI5, we had more officers pro rata in Northern Ireland than we had in the rest of the U.K. because of the fact that there were many potentially lethal plots being fomented by the dissident groups. And from time to time, one of those would succeed. There has been a periodic drumbeat of terrorism for the last 10 or 15 years in Northern Ireland, with occasional attacks or attempted attacks on police or prison officers. There was a bomb outside our headquarters just outside Belfast in 20105 [and then subsequently another in 20156]. This hasn’t gone away. And there is the additional problem that because of the link between criminality and terrorism, various people have an interest in it not entirely going away.

The question of the moment is whether the political tensions in Northern Ireland around Brexit and the potential for a hard border with the Republic will mean terrorism will rebound? My view on this [is that] it will give probably a little twist and boost to the dissident groups. They will be able to say that the entire settlement that created the more stable current situation was based on the false premise of European unity. But I would be completely astonished if Sinn Fein [the political party that was closely associated with the IRA] decided to go back to terrorism because the Good Friday Agreement has worked well for them; they are the only political party which has got significant and substantial representation north and south of the border [in both Northern Ireland and Ireland]. If anything, the recent developments with regard [to] Brexit probably give them more hope that a future poll might lead to reunification through the ballot box, so why spoil that potential opportunity by going back to violence. So I would totally discount the idea that the IRA might decide to return to terrorism. The dissidents will probably get a boost, but they [would] struggle to get things back to where they stood in 1985. Partly because security capabilities have developed considerably over that period and [because] there is much greater investment, and therefore I think it would be harder for them. And also, I don’t think they have a core of community support which is sufficient to sustain a big, long-term terrorism threat in the way that Sinn Fein were able to do for the IRA during the 1970s, 80s, and 90s.

CTC: To talk briefly about Brexit, you’ve been vocal about the negative consequences on U.K. security. Could you comment on that more broadly than Ireland? And how it will impact the United Kingdom’s response to terrorism?

Evans: I think the narrow question of intelligence sharing in Europe will not be immediately impacted by Brexit because intelligence sharing and intelligence matters have never been within European Community (E.C.) competence, and therefore the structures for enabling that are not E.U. structures. Those relationships will continue. The U.K. has been an overall net contributor to those relationships, and it is valuable to both sides that those relationships continue. But when it comes to interventions [disruption operations], those are very often law enforcement interventions. And law enforcement, policing, is within E.C. competence, and therefore things like Europol will be impacted. Whilst I would imagine that we will be able to negotiate sensible engagement with Europol, we will not be part of the core Europol community because we will not be part of the European Union. So, remaining involved with Europol will, at the very least, require extensive negotiation; it is not simply a case of people saying, “well, we want them in, so we let them in.” It would be a legal question, and it is unlikely we will be in as advantageous a position in terms of law enforcement cooperation as when we were members. The net effect will be a less effective response, in my view.

Secondly, and very importantly, the U.K. has been for some time a voice in political discussions within Europe for the security dimension of problems to be given appropriate weight. On issues such as data sharing, data protection, and so on, the fact that the U.K. has very forcefully promoted the importance of national security, as well as data privacy, has meant that the overall policy positions that the E.U. have come to have tended to be ones which were different than would have been the case if the U.K. had not been there. The U.K. has had allies in achieving these outcomes, of course, but we have been very vocal and effective in lobbying to get these goals. Now we are not going to be at the table in the same way, and while we have a wonderful diplomatic service who will excellently represent our interests and seek to influence others, it will not be the same as being at the table with a vote. From that point of view, one of the dangers is that the E.U. will take policy positions which are less security-friendly than they would otherwise have been had the U.K. been there in the debate as a full member. And whilst we will not be a member of the European Union, we will still be deeply affected by the decisions they make because we are a close neighbor and we are still going to be closely connected. The danger is that we get a policy framework which is less facilitative of information sharing and security concerns than would otherwise have been the case, something that will be a net negative in national security terms.

CTC: Finally, a more future-looking question. You mentioned earlier the attention you historically paid to the PKK and Sikh extremism, and we have talked about the threat from extreme right-wing terrorism. Are there any other issues or ideologies out there which you see as brewing terrorist threats?

Evans: I do find that a very difficult question. I suppose the question is whether there is an unspoken-for political movement out there which could become the fuel for future terrorist threats. There was a kind of canary in the mineshaft in regard to what happened with Islamism in the U.K. in the Salman Rushdie affairg because it demonstrated that there was a very vigorously held strand of thought out there which was in tension with the assumptions of the way in which British society should work in the 1980s and 90s. And I’m not trying to overemphasize the linkage, but the protests and anger around the Rushdie Affair amongst Britain’s Muslims did show that there was an issue here, which, because of circumstances, grew. The problem is identifying similar issues in the future. Predicting the future is an unsatisfactory process, because the truth is you do not know what is going to happen and how things will develop. I cannot identify here and now what the next such issue might be, but the key to establishing what might emerge in the future is to look at the areas where there is political tension which is not being addressed as this is where problems are likely to emerge.

CTC: Some have, in the past, expressed concern that the radicalization of [elements of] the environmental movement might lead to violence. Do you think this is a possible risk?

Evans: I suspect it is not an area where terrorism would be the response. The truth is that non-violent activism by [environmental activists] has had an impact over the last few months and is changing people’s political minds. Within this context, terrorism would be counterproductive. It is like animal rights in many ways: there will always be a small group of people who will go for violence because they have a predilection for it. Animal rights was quite a concern 15 years ago, and there were moves in the late 1990s towards terrorism by some of the extremists amongst the movement. And you could maybe see something like that emerge amongst the more extreme environmental position, but that’s different to mainstream environmentalism. So you might see individuals going down the route of violence, but I doubt that it will develop into the major phenomenon that Irish terrorism was for a generation, that Islamist terrorism has been, or even the far right, because you need a particular set of issues to take place to it for it to mature to that point. Key to this is a large, unaddressed political issue.

So whatever you think of the outcome of the recent election in the U.K., the fact that some of the legitimate concerns, that were being used as a pretext by English nationalists, have now been formally acknowledged at the ballot box might be a good outcome, even though it is sort of disconcerting for southern liberals. There was a significant alienated and disenfranchised group out there who didn’t think the system was taking any notice of them. And that’s where you need to be concerned about extremists exploiting legitimate concerns. Disaffected English nationalists were manifesting themselves at the extremes in things like the British National Party (BNP) and National Action, which fed the undertone that articulated itself as extreme right-wing terrorism. And attention still needs to be paid to this group, as it is not clear that they will feel entirely assuaged as a result of the fact that people are paying wider attention to them now. Terrorist problems emerge when you have a significant population who feel alienated and nobody takes notice of them, causing frustration and anger.     CTC

Substantive Notes
[a] Editor’s note: The PKK is the Kurdish Workers Party, a Kurdish militant group based in Turkey focused on creating a free Kurdish state. They have recently become known for their links to Kurdish groups fighting against the Islamic State, but are more prominently known for their decades-long terrorist campaign against the Turkish state.

[b] Editor’s note: Tariq Mahmood, a U.K. national from Birmingham, was announced arrested by Pakistani authorities in late 2003 and accused of links to al-Qa`ida. “Pakistan holds British al-Qa’eda suspect,” The Telegraph, November 17, 2003.

[c] Editor’s note: There are four pillars to CONTEST, the U.K. government’s counterterrorism strategy. These are: “Prevent: to stop people becoming terrorists or supporting terrorism; Pursue: to stop terrorist attacks; Protect: to strengthen our protection against a terrorist attack; Prepare: to mitigate the impact of a terrorist attacks.” See “CONTEST: The United Kingdom’s Strategy for Countering Terrorism June 2018,” p. 8.

[d] Editor’s note: See Ed Husain, “Take these claims of ‘rehabilitation’ with a bucket of salt,” Daily Telegraph, December 7, 2019. Ed Husain is a British commentator who rose to prominence in 2007 when he published The Islamist, an account of his experiences as a member of Hizb ut Tahrir in the United Kingdom. Having left the group and repudiated extremism, he rose to prominence as a commentator, author, and activist speaking, writing, and advising on Islam around the world.

[e] At the time of publication, the assessed threat to the United Kingdom from terrorism is “substantial” and the threat to Northern Ireland from Northern Ireland-related terrorism is “severe.” See “Threat Levels,” Security Service MI5.

[f] Editor’s note: The United Kingdom is made up of England, Wales, Scotland, and Northern Ireland but administered from London. Devolution has occurred over time and meant that greater powers have passed to regional assemblies like the Scottish Parliament, the National Assembly for Wales, the London Assembly, and the Northern Ireland executive. This grants these regional legislatures and their executives powers over certain legislation. National security sits outside this system, however, and is controlled and implemented centrally across the entire country.

[g] Editor’s note: Salman Rushdie’s 1988 novel Satanic Verses resulted in anger among a significant number of Muslims around the world, including inside the United Kingdom. In 1989, Iran’s Ayatollah Khomeini issued a fatwa against Rushdie. In 1998, the Iranian government declared that it no longer sought Rushdie’s death. For more, see “Satanic Verses, Novel by Rushdie,” Encyclopaedia Britannica.

Citations
[1] Editor’s note: For more on this case, see Phil Mackie, “Moinul Abedin: UK’s first al-Qaeda inspired bomber,” BBC, March 2, 2012.

[2] Editor’s note: Rauf’s involvement in al-Qa`ida plots against the United Kingdom is outlined in detail in Raffaello Pantucci, “A Biography of Rashid Rauf: Al-Qa’ida’s British Operative,” CTC Sentinel 5:7 (2012).

[3] Andrew Parker, “Director General Andrew Parker – 2017 Speech,” Security Service MI5, October 17, 2017.

[4] Editor’s note: For more on this case, see Sarah Lee, “London nail bombings remembered 20 years on,” BBC, April 30, 2019.

[5] Editor’s note: “Bomb explodes outside MI5 headquarters in Northern Ireland,” Reuters, April 12, 2010.

[6] Editor’s note: Henry McDonald, “Police investigate explosion at MI5 headquarters in Northern Ireland,” Guardian, August 14, 2015.

More delayed catch up posting, this time a short piece for an excellent website called East Asia Forum, which is a platform for a very interesting discussion about Asian affairs drawing on a wide variety of authors and topics. Some very interesting stuff covered, well worth checking. Mine draws on a well-worn topic for me which is only going to build up further as time goes on.

China’s complicated relationship with Central Asia

2019-09-04T093820Z_1563111202_RC11D584FDF0_RTRMADP_3_KAZAKHSTAN-CHINA-PROTESTS-400x262

Author: Raffaello Pantucci, RUSI

The closure of a mine in Kyrgyzstan, protests on the streets in Kazakhstan. The grand guignol of menacing Chinese investment into Central Asia appears to be rearing its head in public discourse. Both fearful and grateful, the region is a paradox for China at the beginning of its Belt and Road. Hardly a week goes by without a senior Chinese visitor appearing somewhere in Central Asia, revealing a long-term influence game that Beijing is winning.

But the situation in Central Asia goes beyond foreign investment. People want to connect with China. In Ashgabat, queues of eager young Turkmen wait outside the Chinese Embassy seeking visas. For the young in Dushanbe, learning Mandarin is in vogue. In Uzbekistan, Chinese investment is the talk of the town, as the city celebrates the Chinese autumn festival and the China Expo showcases Uzbekistan as key to China’s Central Asia vision. And while Kazakhstan and Kyrgyzstan may have protests, Kazakh leader Kassym-Jomart Tokayev has just visited Beijing talking of strategic partnerships and Kyrgyzstan awarded Chinese President Xi Jinping their highest national award when he visited earlier in the year.

We have seen anti-Chinese protests in Kazakhstan and Kyrgyzstan before. Back in 2009 and 2016 there were large-scale protests focused on reports that the government was going to allow China to rent land for agricultural purposes. In 2011, fighting broke out between oil workers and the Kazakh state in Zhanaozen leading to a number of deaths — Chinese company CITIC was among the investors and received some blame for the bad pay which appeared to underpin the protests. Smaller scale brawls between Kazakh and Chinese workers are frequent. As seen currently in Kazakhstan, protests are usually linked to bad working conditions, clashes between workers or environmental damage. There is also usually a strong undertone of local politics.

Central Asians have watched as Chinese money, workers and influence have shaped the regional economic geography with the open support of local authorities. This is a lever that political opponents can sometimes use. Building on an elemental sort of racism towards Han Chinese that can often be found in the region, the protests can actually often be complaints aimed at local authorities. People are often protesting against their own government, with China becoming a target by proxy. This confluence was most clearly on display recently in Kazakhstan where protestors’ public anger was targeted at the Chinese, but the protests were clearly instigated by governmental political opponents.

In Kyrgyzstan, paranoia towards foreign mining investors has repeatedly led to locals scaring away foreign investment. The massive Kumtor mine in Kyrgyzstan has faced environmental issues and other problems for its Canadian owner. Chinese projects are smaller, but beset with similar problems. Stories of pollution, bad pay and local corruption blend with a general fear of Chinese investment which is sometimes stirred up by local potentates seeking to extract more money or score points against political rivals.

And there have been some dramatic failures by Chinese firms in the region. In January 2018, Bishkek lost powerfrom its main power station after refurbishment by Chinese firm TBEA failed at exactly the wrong moment. There are questions surrounding corrupt and pollutive practices of Chinese companies working in the region. Chinese firms tend to lower their standards in the region, ignoring requirements they usually adhere to back home.

What is less visible are the expressions of sympathy and concern about the plight of Uighurs in Xinjiang. US State Secretary Pompeo may have heard polite noises during his comments to Central Asian foreign ministers in New York but there is little public sympathy for their plight. Concerns tend to focus on co-ethnics and family members caught up in China’s camps system and fears that their governments might seek to purchase similar technology to use against them. When people do express fear about how events in Xinjiang might impact them, it is at a very personal level focussed on their own personal safety, rather than the broader cause of abuse of Muslims in China.

But very little of this matters to Beijing. Central Asian leaders remain eager for Chinese investment. The once closed Uzbekistan is the most obvious example of this, where the surge of Chinese investment is openly welcomed. Beijing is increasingly holding large portions of debt and becoming the main trading partner across the region.

China, in the meantime, is increasingly focusing on its security equities in Central Asia. Stories of Chinese private security emerging in the region sit alongside more overt displays of strength through the building of bases, the conduct of joint training exercises and the provision of equipment for Tajik forces along the Chinese border with Afghanistan. Already this year, there have been reports of joint training exercises with Tajik, Kyrgyz and Uzbekforces.

It would also be unfair to not point out the positive side of China’s presence in the region. In Badakhshan, Tajikistan locals may have conspiracy theories about China’s long-term intentions in the back of their minds, but they will admit that the Chinese-built roads have changed their communities for the better. Chinese companies and projects are often seen as more credible than locals — who often show up, make a lot of noise and fail to deliver. And while Confucius Institutes are regularly talked about in the public debate as centres focussed on brainwashing the young to be Xi acolytes, visit them on the ground and they are full of eager young Central Asians chasing the opportunities that China offers.

The story of China in Central Asia is a complicated and nuanced one of an emergent region which is being swallowed up by a neighbour who cares little about it, focussed instead on its geopolitical clash with Washington. Locals at an individual level do not care about these broader issues and are instead trying to navigate their way to prosperity among the economic boom they see in China. As the world watches the US–China confrontation play out on the international stage, few are paying attention to the heart of Eurasia where a sea change is happening. China’s natural borders mean it will always have a strategic interest in Central Asia, but helping the region develop other options should be the focus of western policymakers.

Raffaello Pantucci is Director of International Security Studies at the Royal United Services Institute for Defence and Security Studies (RUSI), London.

And finally in this catch up blast, a longer piece in the form of an interview with the former head of the UK’s JTAC Suzanne Raine for the excellent CTC Sentinel. Not the first of this form, and more longer pieces for CTC Sentinel to come soon. Thanks to Paul and his superb team for their support and work on these interviews.

Beyond this writing, spoke to the Telegraph about Hamza bin Laden’s death (which was picked up in the Canadian press), to the Daily Mail about British Airways suspension of flights from Cairo, an older interview with the Mail on Sunday was re-used to talk about the ISIS threat to the west, to the National about a network of heavily armed right wingers in Italy, while my recent Telegraph piece about Kashmir was picked up by Pakistani outlets. On the other side of the coin, spoke to the Economist about China in Central Asia which ran in a much bigger piece about China-Russia relations more broadly.

A View from the CT Foxhole: Suzanne Raine, Former Head of the United Kingdom’s Joint Terrorism Analysis Centre

Suzanne-Raine-1200x800

August 2019, Volume 12, Issue 7

Authors: Raffaello Pantucci

Suzanne Raine worked for the U.K. Foreign & Commonwealth Office from 1995 until 2019, specializing in counterterrorism. Between January 2015 and September 2017, she was head of the United Kingdom’s Joint Terrorism Analysis Centre.

CTC: What role does JTAC play in U.K. counterterrorism efforts?

Raine: JTAC stands for the Joint Terrorism Analysis Centre. It was established in response to the 2002 Bali bombings, with the aim of having one central place within the U.K.’s system where terrorism threat assessments are made. It is staffed by analysts from about 16 different government departments who are brought together in a single place. These individuals are linked back into their own systems, reading all of the information available from all of their respective departments and feeding it into their assessments. This makes [for] a system which is greater than the sum of its parts and provides a way of pushing information in both directions. This helps support the threat assessment both in immediate tactical terms in the U.K. and abroad, but also the strategic development of the threat picture and trends within it. Its closest equivalent in the American system is NCTC [National Counterterrorism Center]. JTAC is also responsible for operating the U.K.’s national threat level system. It makes independent judgments free of any political influence, which informs the response posture either in advance of or after a terrorist attack.

CTC: What is your current evaluation of the threat from the Islamic State, especially in the wake of the Easter 2019 attacks in Sri Lanka? Did those particular attacks change your general assessment of the group’s trajectory?

Raine: It is a good time to ask that question because it is now five years since the declaration of the caliphate, and that should give us a moment to pause. It is quite a startling fact that the territorial caliphate survived that long. Not many things last five years. At the end of it all, just at the point where we were declaring territorial defeat, up pops Abu Bakr al-Baghdadi in a video to say, ‘I’m still here, guys.’1 It is an uncomfortable reminder that there still is a strategic mind at the heart of the group. It is not just a group engaged in a war in the desert, but it is an organization with leadership, structure, and organizational goals, however disrupted they have been.

Territory is nice for a terrorist group to have but is not a prerequisite. The establishment of the caliphate enabled them to become a massive global phenomenon, but territory brings with itself its own problems. It requires governance, policing, and defense, all of which requires lots of resource. The challenge for ISIS will be how they manage the transition away from (a) guerrilla state without disintegrating. Al-Baghdadi turning up five years later is their way of starting to think that through.

In terms of the threat from ISIS, the U.K. had a horrible year in 2017, and 2018 was much better. But this is sometimes an illusion. The question if we look at this five-year period and analyze it properly is, what does that show? To do this, we need to go back to the first three years of the group’s caliphate, which were a significant challenge for those of us whose job it was to counter it because it was growing so quickly; they had the impetus and the initiative. It is not true to say that the scale of the problem in 2015-17 took us by surprise, because we had watched it develop in 2013-14, but it is true to say that the way it changed, mobilized young people, generated spontaneity and common cause were exceptionally challenging to deal with. That put real demands on the instruments that we had at our disposal. A lot of things subsequently happened in response, but it took time and finally the coalition efforts in Syria and Iraq have pushed them back and kept them firmly on the back foot over the last couple of years. But it has been at significant cost to the coalition, and there is a huge debt of gratitude to the Syrian Kurds without whom it would not have been possible to push ISIS from their territory in Syria. Now ISIS is on the back foot; their media machine has been significantly disrupted; they’ve lost a lot of operational planners and have been substantially degraded.

In addition to this, we started to get on top of their networks in the West, leading to a lot of disruptions. This makes it much more difficult for them to conduct the kind of attacks they were conducting earlier on.

But there is a long legacy that the group has left behind. It can be categorized in two ways: their media and their network of foreign fighters. They have had more than five years as a group of living and fighting together, and we are talking about an unprecedented number of nationals from an unprecedented number of countries, including both men and women. The women are equally significant in this regard because I reject any suggestion that the women are less responsible for their decisions and actions than the men are. Foreign fighters are going to continue to pose a huge problem for the international security community because we are going to have to track them as well as find ways to monitor the effect that the inspirational ideas have on our domestic populations.

However weakened ISIS may now be, they are still a truly global movement, and we are globally vulnerable. Paradoxically, nothing should surprise us about what happens next, but we need to be prepared to be surprised. Sri Lanka is a good example of that, because whatever their exact connections, they were clearly inspired and connected to ISIS’ ideology at the very least. What Sri Lanka also showed was the difference between a lone-actor and a multiple-actor attack. There is no straightforward equation that says a lone actor will cause lower casualties and do less physical damage, but you can see from Sri Lanka that an attack with multiple actors who conduct their attack simultaneously is very effective. This is something that we see with alarming regularity in places like Afghanistan. We are going to continue to face both the lone-actor inspired attacks, as well as multiple-actor. The threat picture continues to contain almost every sort of threat within it.

CTC: Given the Islamic State is a globalized threat as you describe, are there any places that are of greater or lesser concern? Where might the next Sri Lanka come from?

Raine: There are multiple different factors at play. One is how many of the foreign fighters are left and whether they get home. And we still don’t really know the answer to how many we are talking about in total when it comes to those who left or survived, nor where they are. Local conditions are going to be a determining factor in how they settle. North Africa is clearly of concern, not least because of the numbers of foreign fighters from North Africa, but also as historically the region has tended to produce amongst the most committed and battle-hardened fighters. The environment is one into which they are able to return—either to continue the fight they started in Syria and Iraq, fit into existing groups, or start up something new. This is very concerning. I also continue to worry about Afghanistan, where returning fighters are an additional dimension to the political quagmire. It is possible that a deal done with the Taliban becomes not actually very useful anymore because, in fact, the problem is a whole new generation of people who have been radicalized by a different kind of extremist group. This might lead to new fighting and new groups. It is not a given that this is what is going to happen, but it has to be a concern. And then clearly there are a large number of fighters from Southeast Asia who are going to return somewhere and pose a threat. And finally, I worry about Syria and Iraq because once they cease to pose an international threat, the interest and resource will shift elsewhere while the internal problems remain as complex as they were before the war.

CTC: Part of the threat spectrum facing Western countries has been instigated or inspired attacks. The Islamic State’s use of this methodology was not new. Al-Qa`ida used to use it. But how was the Islamic State able to weaponize it so effectively?

Raine: As you point out, it is not new. AQAP [al-Qa`ida in the Arabian Peninsula] ideologue Anwar al-Awlaki was brilliant at it. He was an incredibly powerful voice in the British community and beyond because of his ability to speak in English about modern things. ISIS has upgraded this approach for the modern generation. They’ve been exceptionally innovative at exploiting the explosion of new ways of using social media that we use in society today. They had an army of young, dextrous, tech-savvy people who spoke multiple languages and who knew how to speak to people in their home countries. This was a major advantage they had over Anwar al-Awlaki since he only had a very small group of people supporting him. They were able to communicate directly, sitting together building a critical mass in the media center where they would learn from each other and experiment. A fascinating aspect was that they were communicating with us all the time as well. We were not always attentive to what was being said. I was often struck by the amount of humor and mischief they would use in their messaging. One well known example which resonated with a British audience was the Islamic State Health Service, for example, when the group took the National Health Service (NHS) logo and turned it into their own. It was creative and appealed to people.

The genius of what they did with the inspired attack was to elevate it into a sort of art form, so that anyone who did anything anywhere in the world that fitted their paradigm could be claimed by them. This created an idea of a mass movement without them actually needing to have one. And once you have this fictive mass movement, it gives greater appeal to the group. You create the impression of an organization that is bigger than it is. For those potential recruits sitting at home living their ‘boring’ lives, seeking ‘meaning,’ wanting to be part of something bigger and better, this provides them with a substantial organization to join.

At its height, ISIS had a media machine that was able to publish in 10 languages simultaneously. It has been significantly damaged through a concerted effort in both military and disruptive online terms by multiple actors. But it still exists, and one of the problems we have is that whenever an attack is conducted and a claim is issued, it is rebroadcast all over conventional media. All the group needs to do is get the claim out to create a sense of responsibility around the act without having to have done much work themselves. Sri Lanka was notable in this regard.

The other difference with al-Qa`ida was that ISIS was not afraid to use their media machine and to broadcast rapidly. During the first three years of the caliphate, they took particular advantage of this, as their media broadcasters were in far less danger than al-Qa`ida’s. Al-Qa`ida’s messengers learned that if you stand there with a telephone, somebody is going to bomb you. Anwar al-Awlaki had to go to enormous lengths to get Inspire magazine out there because he had to hide his identity and hide his location. The chaos in Syria meant that ISIS broadcasters were able to hide much more easily. For as long as they were not afraid, they could do it with real confidence, and they were able to maintain a strong voice in the public domain. This helped them create an identity online which they still take advantage of today. It is obviously not the same now, but it was an element of their game plan which took us a little bit of time to adapt and respond to.

CTC: Do you think the group’s brand was degraded because of spurious attack claims? For example, they claimed Stephen Paddock’s October 2017 Las Vegas massacre, an attack that clearly had no link to the group. How long can you claim such random things without people losing belief in you?

Raine: It is certainly true that in the early years, they did not make false claims. They put effort into making sure and verifying that attacks were conducted by their adherents. And then they became a bit sloppier. The only explanation I can offer is that while we may have noticed that their claims are no longer very accurate, the people who support them did not notice. All their claim does, however spurious, is create a hook into the public conversation. An ISIS claim reminds people about the organization’s presence and existence, even if they didn’t actually do it. And by the time everyone has proved that the claim was indeed spurious and the incident had nothing to do with them, everyone has forgotten and moved on to the next thing. The group, however, still gets some brief resonance in the public space.

CTC: There are some indications of a possible al-Qa`ida resurgence.a How is that materializing in terms of threats to the West? Where is the actual threat that we see from al-Qa`ida? And to tie into a bigger question, how do we ever know when a terrorist campaign is over?

Raine: This is a problem. One of the biggest difficulties we have with al-Qa`ida is latency—the ability of the group to exist without necessarily being constantly active and visible. We know al-Qa`ida is a thoughtful organization that has demonstrated strategic patience. The leadership has been absolutely consistent about its objectives for a very long time. And although they have been significantly degraded over the last nearly 20 years by a very persistent campaign against them, some of the key leaders are still around and hidden in very difficult to get to places like Yemen, Syria, Iran, Afghanistan, Pakistan, and North Africa. We cannot be sure that we know what they are doing or even what their new generation looks like. We are aware of the group’s continued ability to exist, its committed leadership, but we are not clear on what the new generations are like or what they think.

Their experience in Syria has been a real roller coaster ride. On the one hand, it has given them a new purpose at various stages of the conflict and, of course, a lot of new recruits, including a lot of Britons who were always al-Qa`ida supporters, as well as other nationalities, like Chechens. And just as the ISIS foreign fighters have been with the group for around five years now, the al-Qa`ida ones have as well. On the other hand, al-Qa`ida is now completely bogged down with factional in-fighting about who is governing Idlib. This is just indicative of the difficulties of being in Syria. It has given al-Qa`ida a platform, and it has given them a massive headache. And we have insights into what is going on with the group with infighting and governance challenges, but we just don’t understand the whole picture.

This highlights the really big challenge for those working in counterterrorism, which is that we know they are there, we know their intent has not changed, we know they have got capability, and the underlying conditions in many parts of the world where they operate are no different now to how they were pre-9/11. In fact, in some parts of the world, they are worse. We know that we cannot get the kind of information that we would want around the group, so how do we interpret the lack of information? How will we know when the absence of information means that an attack is not being planned, or whether it is just that we are not good enough at collecting information on attack plans? And for me, this is the difficulty that we have got ourselves into with the War on Terror because the phrase implies at some point there is going to be a winner and a loser, closure and an end, a treaty. And I just do not see and cannot imagine the point where we are going to be confident enough to say: ‘they are still there, but we are confident that they do not mean us any harm.’

CTC: Is al-Qa`ida or the Islamic State the greater long-term threat to the United Kingdom?

Raine: Rather than one group or another being the long-term threat, the danger comes from the likelihood that they persist and expand—by which I mean, how receptive their target audience is in the long term to the alternative form of governance or ideology that they offer, which is based on a higher belief system and justification for action that is very different to that which secular Western governments offer. Rather than our political system, built on gradual change and reform, they offer a violent and rapid answer, which will consistently be a challenge for us because it is an alternative that will appeal to some people.

We also need to recognize how long some of the participants on their side, be it AQ or ISIL or whomever, have been involved in this fight already. Abu Bakr al-Baghdadi is my age, as is Abdulmalek Droukdel. Ayman al-Zawahiri and Saif al-`Adl are even older. Qasim al-Raymi is relatively young at the age of 41. And if we think about it at a rational human level, very few of us have fundamentally changed our core beliefs in decades, so why should we expect individuals involved in ideologically motivated groups to? And their children and grandchildren are being brought up with this mentality and ideology around them.

I absolutely agree with the need to prevent, de-radicalize, and counter the narrative that these groups espouse in whatever way we can. But I also feel very strongly that this is a very difficult thing to do, and I still can’t think of any significant examples where de-radicalization has been successful in serious numbers. Because we are trying to tell people to believe something other than that which they believe. And that’s really hard.

In terms of al-Qa`ida or ISIS posing the longer-term threat, it is not so much the groups but the conditions in the world at the moment which pose the threat. Syria, in particular, has created an environment where a whole new generation of threat can emerge. And that will ultimately express itself differently in different places. It may be for the moment that the individuals linked to ISIS or al-Qa`ida stay aligned to the local groups that already exist in the various contexts that they are operating in. It may be that returnees or off-shoots of these groups end up being subsumed into more local conflicts on the ground. Or it may be that they end up becoming part of groups which play a role in proxy conflicts in different parts of the world—for example, the Kashmiri groups that we have long seen active in South Asia, but there are plenty of others. We are likely entering a phase of everything been thrown up into the air. It will eventually settle down again, and we will have to adjust to whatever form that takes.

There are clearly going to be tactical problems dotted around. Somalia is an example of a tactical problem which is a long-term headache because of al-Shabaab, but also because there are ISIS supporters there. North Africa is really interesting because there is a lot of fluidity between groups across the entire region. While I am not a North African specialist, what is striking is the commitment to the ideology in that particular context, and then the pragmatic decision-making about how to act, which is hugely effective. I think we will see tactical, pragmatic, local reshaping, and then we have to bear in mind something that was noted in Ed Fitton-Brown’s recent interview with this publication,2 which is that it does not take very many people to come up with the big plot. The question for us is where they will be located when they decide that they want to launch an attack and where it will ultimately be that they find the time and space to plan something on that scale, rather than simply become subsumed into a local conflict.

CTC: You touched briefly on state-sponsored threats. Do you think they are going to become more significant than al-Qa`ida or Islamic State threats? Or will they merge? How will that relationship develop, and what is your assessment of what will become a greater threat going forward?

Raine: The two types of threat have co-existed for a long time. For example, LeT [Lashkar-e-Taiba], the Kashmiri group behind the Mumbai attack, grew out of the jihad in Afghanistan and was linked initially more with Abdullah Azzam and UBL [Usama bin Ladin] before it became more focused on state-supported jihad in Kashmir. The dangerous bit is the overlap between the local and the global. For the U.K., the fusion that was seen in Kashmir was a particular problem, as the struggle in Kashmir provided a strong, local call to action that resonated deeply with Kashmiri diaspora communities in the U.K. At the same time, on the ground in South Asia, these groups were close to al-Qa`ida and ultimately became the connection that produced a series of terrorist plots in the U.K. It is entirely possible that the development of this sort of link could be a product of what emerges from what we have been observing in Syria.

The danger of these sorts of threats, and the many flashpoints in which they exist, is that if they become much more active conflicts, they can become places that draw more people in. The Kashmiri one is the obvious flashpoint that could really draw people in if the violence and conflict were to escalate. The Middle East is another source of potential danger in this regard and has numerous proxy groups and conflicts. In a way, the Syria war is a massive proxy group war, and the war in Yemen is another proxy group war. At the same time, the conflicts become a draw for outsiders and create an environment in which terrorist groups can fight, learn, and plot. States use terrorist groups for their own ends, but don’t forget that terrorist groups also use states for their own ends.

CTC: In a recent issue of this publication, Edmund Fitton-Brown, the Coordinator of the ISIL (Daesh)/Al-Qaida/Taliban Monitoring Team at the United Nations, highlighted the large numbers of foreign terrorist fighters (FTFs) that are still around.b Young and old, they all pose a potential risk. How do you manage a generational struggle of this scale?

Raine: This is a time bomb problem. To start with, none of us really know the exact figures of people who have gone out there and might still be there. It is difficult to know, as I mentioned earlier, the degree to which the threat they pose is something that is blended into a local threat picture or something new and different. What we do know is that there is nothing to suggest that many of them have changed their minds, and there is nothing to suggest that if we do nothing, they will change their mindset. So, we have got to do something. The big challenge for the global counterterrorism community is how do we create a globally coordinated response when we have all got our own domestic considerations and our own legal systems. In Western-allied countries, we have ended up managing this problem largely through defense and security, with the closest possible collaboration we can have. This means sharing data, which enables us to identify potential terrorists who can be disrupted before they do anything, and doing this according to our liberal values, which limits the amount of intrusion into people’s privacy or the length of time that people can be locked up.

There are other countries with different values that are applying different solutions to the problem of both foreign terrorist fighters and the broader problem of radicalization at home. The Chinese are locking up, if we believe the reports, around a million Uighurs.3 The Russians have taken some quite punitive measures in the Caucasus. Then there is a serious question about places which just remain completely lawless—though if we are honest, there is no such thing as an ungoverned space; rather it is governed by someone we do not like. Libya is an example of a place where Western governments have to cooperate with a confusing group of actors on the ground to ensure that the ungoverned spaces are not exploited by Islamist extremists. Then there are countries which are themselves making a complicated series of calculations about how to deal with terrorist problems which have deep local roots, as well as external links. Pakistan and Turkey would fall into that category. The West needs them to be a partner to deal with threats that we are worried about, but they are also trying to manage their own local dynamics. And then finally, there are the countries which cannot cope with these threats, need international support, and need to be part of a global counterterror coalition but are not. We are far from having a unified international response.

The problem is further complicated by the inevitability that the different sets of responses going on around the world will create different sets of unintended consequences. For example, it is not clear what effect repression of the Uighurs will have in terms of the globalist narrative that extremist groups use. It may well be that China’s response suppresses the problem to the extent that they are unable to respond, but it may well be that they then fight back in different ways. Or it may be that other groups will take up their banner. This highlights how there is a particular context in which we have to work together, but at the same time, this is rendered almost impossible nowadays because of the geopolitical environment in which we are operating.

A second question for us as liberal democracies is how we do this while also staying true to our values. So, for example, we struggle to convict those we suspect of terrorism-related crimes at home because we cannot collect evidence to the standards we would require in a war zone. At the same time, we expect other countries to manage them without the evidence. We end up asking more of other countries than we ask of ourselves. Additionally, we are rightly prohibited from sharing information with countries where there is too great a misalignment of our legal systems—which could be construed as lack of due process—or where there is a possibility that mistreatment will occur. We cannot cooperate with another state if the outcome might be an act which we would consider unlawful. How do we forge safe partnerships with countries whose approach to human rights is very different from our own without creating legal jeopardy for ourselves? We have not had the kind of conversation we need to about that.

The other big issue these longer-term threats throw up is predictability, something particularly illustrated by the Easter attack in Sri Lanka. People want to know what is safe and what is not. Sri Lanka demonstrated that it is impossible to have certainty. And this is a perennial problem. For example, it is very difficult to say that the conditions which allowed the October 2002 Bali bombings to happen in Indonesia have completely gone away or not been exacerbated by current conflicts in the region or elsewhere. But we cannot tell everybody not to go to Indonesia on holiday just because something bad might happen. This means that the strain of mitigating these risks is taken by protective security measures, and this requires increasing resources to manage these issues in a broad range of places, like North Africa, Turkey, or Southeast Asia to ensure that people are safe when they go there. But the result is that changes the way we live.

CTC: Looking into the future, what terrorist ideologies are of greatest concern to you?

Raine: Islamist terrorism is not going to go away. It might change and become more local, fueled by proxy wars, but the underlying causes that drive these groups and ideologies have not changed and indeed go back a long way.

In addition to this, over the last few years, we have seen—certainly across the English-speaking and Western world—an increase in seriousness and coherence of extreme right-wing groups. It used to look like the extreme right was made up of political movements, and when they conducted violent acts, it was often a lone actor. What we are seeing now is groups of likeminded individuals coming together and talking in a type of language and approach that is used by violent Islamists, using words such as “embracing martyrdom.” In part, this is a response to the broader political context. The far-right parties and movements now have an increasingly coherent narrative, and stronger links to a shared philosophy. Books which espouse this extreme right-wing philosophy are readily available on Amazon, where they have multiple five-star reviews, very few negative reviews, and through algorithms lead the reader to other similarly extreme material. We have not yet worked out, as we did previously with violent Islamist material, what is and is not acceptable on the extreme right-wing side of the ideological equation. The New Zealand attack demonstrated this very clearly when he titled his manifesto “The Great Replacement,” drawing on a French right-wing philosophical tract of the same name.

But in many ways, my biggest concern with the future of terrorism is what we do in response to it. I am concerned that there is an expectation that this can be stopped, but we’re a long way from working out what the tools are that will enable us to deliver that outcome. Instead, we go through very predictable cycles of intervention and non-intervention overseas, with unclear results. We are committed to liberal values, but then how do we deal with people who we can’t lock up and whose minds we can’t change? In many ways, the challenge of getting our response right is as big as the problem itself.

CTC: Are there terrorist tactics that you’ve seen develop over your time in government and since that seem to be growing into more worrying problems?

Raine: There have been big changes in the threat picture. The inspired threat is a change that has already happened and is still happening. Then there are things which have not changed—for example, the determination to conduct a spectacular attack against aviation, something that is just a huge challenge for governments and the aviation industry. You don’t want to put people off flying by being overly protective. But global coordination of effective aviation security has been very slow. The recent conviction in relation to the 2017 Sydney passenger jet plot is a good example of the persistent nature of this threat.4

The two new things that everybody talks about are drones and chemical/biological weapons. The likelihood of their use has increased as a result of the war in Syria and as technology develops, because in Syria a significant amount of people have been able to experiment with both types of weapons on the battlefield. We saw in the United Kingdom what disruption drones could do to airports earlier in the year. But at the same time, while we can sometimes get carried away with our creativity about what terrorists might do, they still seem to revert to type. While the panic and disruption caused by the drones at Gatwick airport were hugely damaging,5 terrorists seem to continue to prefer incidents that cause horrible deaths and injuries. Notwithstanding the availability of new technology, they still continue to like to focus on trying to blow things up.     CTC

Substantive Notes
[a] Editor’s note: See, for example, Tim Shipman, “Al-Qaeda terror group returns to target airliners and airports,” Sunday Times (U.K.), December 23, 2018, and Jami Forbes, “Does al-Qa`ida’s Increasing Media Outreach Signal Revitalization?” CTC Sentinel 12:1 (2019).

[b] Editor’s note: According to Fitton-Brown, out of the over 40,000 foreign terrorist fighters who joined the so-called caliphate, “We could have anything up to nearly 30,000 who remain alive, but nobody knows the true figure.” See Paul Cruickshank, “A View from the CT Foxhole: Edmund Fitton-Brown, Coordinator, ISIL (Daesh)/Al-Qaida/Taliban Monitoring Team, United Nations,” CTC Sentinel 12:4 (2019).

Citations
[1] “Abu Bakr al-Baghdadi: IS leader appears in first video in five years,” BBC, April 30, 2019.

[2] See Paul Cruickshank, “A View from the CT Foxhole: Edmund Fitton-Brown, Coordinator, ISIL (Daesh)/Al-Qaida/Taliban Monitoring Team, United Nations,” CTC Sentinel 12:4 (2019).

[3] Stephanie Nebehay, “U.N. says it has credible reports that China holds million Uighurs in secret camps,” Reuters, August 10, 2018.

[4] “Australian guilty of plane bomb plot involving meat grinder,” BBC, May 1, 2019.

[5] Hallie Detrick, “Gatwick’s December Drone Closure Cost Airlines $64.5 million,” Fortune, January 22, 2019.

A new piece for an excellent outlet that I occasionally contribute to, the CTC Sentinel, which is an interview with Neil Basu, the Senior National Coordinator for Counterterrorism Policing in the UK. It is quite a wide-ranging discussion around the current threat picture, recent problems, and future threats that might mature. It got a bit of a bounce getting picked up by The Times, Daily Mail, The Sun, Asharq al Awsat, and some other local UK outlets. It was also suitably spun by RT. Thanks to editor Paul for all his hard work on it! Separately, spoke to Vice about the Jihadi Beatles, and Arab News about foreigners fighting with Kurds.

A View from the CT Foxhole: Neil Basu, Senior National Coordinator for Counterterrorism Policing in the United Kingdom

DAC-Neil-Basu-06-600x429

February 2018, Volume 11, Issue 2

Authors: Raffaello Pantucci

Deputy Assistant Commissioner Neil Basu is Senior National Coordinator for Counterterrorism Policing in the United Kingdom, a role he was appointed to in October 2016. He is responsible for delivering the police response to the Pursue and Prevent elements of the Government’s CONTEST strategy. In this role, he coordinates the policing response to threats arising from terrorism and domestic extremism nationally and also manages the Metropolitan Police Service’s Counter Terrorism Command (SO15). In his career, Basu has worked as a detective in all ranks to Detective Superintendent, served as the Area commander for South East London, and headed London’s Armed Policing within Specialist Crime & Operation.

CTC: How has U.K. counterterrorism policing evolved to confront the changing threat?

Basu: 9/11 was the contemporary game changer. In the U.K., it started off with some plotting between 2002 and 2004, which wasn’t just concentrated in London. It was also regional. Then you get to 2005, and in the worst way possible, we were taught that this was actually embedded in local communities: domestic home-grown terrorism with some direction from abroad. So there was a need to build regional capability, and that was the start of the network that we have today. Now we have nine counterterrorism units—embedded regionally, collocated with MI5, building intelligence in local communities, [and] connected into local community policing.

Given the nature of the threat we now face, we need to be even more focused on communities and more focused on getting local information. While the ambition is still there for the mass spectacular—and the July 2017 airline plot in Sydney, Australia, was a recent example of that—IS [the Islamic State] has been encouraging supporters living in the West to carry out high-impact/low-complexity attacks. Because of the military push on the ground in Syria and Iraq and the effective eradication of IS’ geographical territory and their ability to project that abroad, it is much harder for them to send trained people back. Borders have closed. Turkey has done well with their border.

The big threat for us now is the ideology that’s been diffused onto the internet and the calls for attacks by its followers in the West by IS online. The caliphate may have been defeated militarily, but it has now become a virtual network. What we’re not seeing is a reduction in people’s willingness to align themselves with this ideology. So even though there is no caliphate to go and fight for, in the minds of some British extremists, the fight carries on because they can aspire to go to Libya or another ‘province.’

In confronting this evolving threat, we have to be more ‘fleet of foot’ at a time when ‘going dark,’ due to the widespread availability of encrypted apps, has become the new norm. We can no longer depend upon all the usual intelligence-gathering apparatus.

CTC: Has the locus of the threat abroad shifted? Syria and Iraq was where the threat was, but would you now look to Libya as a place where you could see the same sort of a threat emanating from?

Basu: You would be completely foolish not to worry about Libya. All of the coalition thinks that that is going to be a tremendous problem in years to come. Anywhere there is ungoverned space, anywhere there is fragile political governance is a potential source of threat. But it is not clear that it is going to be easy for terrorists to move from location to location. We already know of eight or nine IS affiliates around the world that have claimed allegiance, with [fighters in] Libya being one example. Libya is very close to home for Europe and our allies, but for a long time, it was not the focus for our attention. For us in the U.K., what happened in Manchester was a big wake-up call to the fact that there were people who had traveled back and forth to Libya doing much the same thing we were preventing people from doing in Iraq and Syria and who had a similar hatred for this country. And oddly enough, these travelers were second or third generation [immigrants], not necessarily the generation you would assume.

CTC: The Manchester attack and its links to Libya were particularly striking given the similarities with other networks and plots seen previously in the U.K., in particular historical networks linked back to terrorist groups in Pakistan.

Basu: You would have to take a huge leap of faith to say Salman Abedi [the Manchester suicide bomber] was not traveling to and from Libya with some malicious intent and that it was all just about family and socializing and not about training. We’ve long known that training overseas can battle-harden people. It’s not just being able to fire a gun; it’s the psychological bar that you overcome by being brutalized in theater. Once you get a taste for violence, the second time is much easier. And cops know that from dealing with violent criminals.

CTC: A year after the cluster of plots in the first half of 2017, do we have any more clarity on what precipitated all of that terrorist activity in the U.K.? 

Basu: JTAC [Joint Terrorism Analysis Centre] was very good at saying something is coming. Security analysts understood that once there was a military push on the ground against them [Islamic State fighters] in Syria and Iraq, they were going to start lashing out. Leaders like [Abu Bakr] al-Baghdadi and [Abu Muhammad] al-Adnani, before he was killed, were telling followers in the West they didn’t need to ask permission from an emir; they could just go ahead and launch attacks.

This was the backdrop that was making security forces nervous. Then, and this is a personal view, Khalid Masood [the March 2017 Westminster bridge attacker] launched his attack. He had no clear and obvious connection to either IS or al-Qa`ida. He was clearly someone who cherry-picked the bits of Islam that he believed justified what he did. Whether his particular religious interpretations was the actual driver for what he did, I am of two minds, but his motivation died with him. There is no concrete information that it was for the glory of the caliphate or for the glory of IS or for the glory of AQ. But what he did achieve was that he gave fellow violent extremists the understanding that the U.K. was not such a hostile place to launch attacks and that by using this simple methodology you could succeed. Some violent extremists admired him for actually going ahead and doing it. Some criticized him for not doing a very ‘good job.’ But at the end of the day, what it did say to them was that ‘my plot could work. What I have been thinking of doing, I could actually do.’

CTC: Have you seen much of a change in the threat picture since Raqqa has fallen? Or has it had no effect?

Basu: What we’ve seen is a lot more chatter, a lot more people thinking that they have a chance of successfully carrying out attacks. So the pace and tempo, the number of leads that we think are concerning, the pace has gone up. Whether or not this is linked to the push in Raqqa is hard to tell.

In terms of plots, the trend is towards less sophistication, more amateurism. We’ve not seen a growth of extremists. We’ve seen more conversations among extremists expressing the belief they can launch successful attacks here. So definitely the pace of plotting activity we’re looking at has gone up. But then that was predictable as well. I don’t think anyone thought the military defeat of the group in Syria and Iraq was going to be the end of this. We are dealing with an ideology, which is being spread online and has global reach, and we to need to confront this by clamping down on what’s being spread through the internet and better engaging with people who are vulnerable to the extremist message.

CTC: Earlier this year, Minister of State for Security Ben Wallace stated a significant number of British nationals who signed up to fight with extremist groups in Syria and Iraq had gone missing somewhere in the region.1 What do we think has happened to those who are unaccounted for? Where have they ended up? 

Basu: I think there’s probably more in detention overseas, including in YPG or Kurdish or SDF detention, than we currently know. We obviously won’t know everyone who’s died. It’s a warzone and difficult to be definitively accurate. We estimate that 15 percent of the 850 foreign fighters that have traveled from the U.K. to Syria and Iraq have died. There are some we absolutely know died, and there are ones we guess are deceased because, for example, they are no longer communicating. Establishing the fate of the others is going to be very difficult.

I think we have made it very clear how hostile it would be for foreign fighters if they return here. The policy is very clear. You do not get to come back here if you did manage to get over there and you are a fighter.

About half of the 850 who traveled to Syria and Iraq since the onset of the Syrian civil war have returned to the UK. The large majority of these came back very quickly and early on. Some of those were genuine aid workers. Some were people who thought they were going to build a caliphate, not necessarily be immersed in a war. Generally speaking, the people who came back quickly are not where the bigger threat lies.

The larger threat is posed by the return of committed recruits who went there to be trained. When it comes to people who we know are back in the U.K. that we suspect fall into this category, we have either tried to build a case or we’ve monitored them or we have talked to people who know them. As far as those who are still overseas are concerned, we have been making it very clear that this will be a very hostile place to come back to, and I do not think most of these foreign fighters will want to come back. They will want to fight on, and that’s why they have been so committed to being in theater for this length of time.

We are still not seeing what many predicted was going to be a large reverse flow as the so-called ‘caliphate’ disintegrated. Instead, we are seeing just the odd person come back.

When it comes to those still unaccounted for—and who are not being held in detention in the region—I have no doubt a number might be trying to reach other IS strongholds. It is almost impossible to say what has happened to these people. I think we overestimated the stand-and-fight-until-you-die attitude. Some of these foreign fighters will want to fight another day. It is also too early to say where they will coalesce. Could it be the Philippines? Could it be Libya? But it is worth thinking about how practically easy it would be for somebody who is not Arab-speaking, doesn’t necessarily ‘look the part,’ to meld into society in a place like Libya. Very difficult, I would think.

If you crunch the figures: about 850 foreign fighters who went, about half who came back, 15 percent who died, you’re probably looking at a cohort of about 300 that we know traveled who are still out there. Not all of those are mono-Brits; a lot of those are dual nationals. Like other countries, we operate on the principle that we don’t want you back, and therefore we will deprive you of your British passport. And the government has done that. Because of this, the ones who could come back are about a third of this 300 number. And for those among these who end up coming back, we are absolutely waiting for them. That’s the bottom line.

CTC: British officials have said a residual risk is posed by about 20,000 individuals who were previously the subject of counterterrorism investigations. This is a very large number. How is it possible to manage the risk from such a large community of people? Who is going be responsible for managing this? Is this a job for the security services?

Basu: It’s impossible for any country to allocate resources for that kind of number. And every country will have a similar issue. That number will always grow. Because there will always be people who have been considered a national security threat but are no longer considered a national security threat. There is no way the security services or policing can manage all of those on their own. What we have to make sure is that there are ways of assessing whether the risks still exist or not in specific cases, and that’s going to involve something that the security agencies have never done before, which is sharing information from the secret space into multi-agency partners who may be able to help assess that risk. This is not a new concept. Multi-agency public protection arrangements for serious and violent offenders already exist. These individuals live in communities, and there are all kinds of measures in place to manage them. Local authorities need to be informed in a similar way as when people convicted of TACT [terrorism legislation] offenses return to their communities.

People get hung up on the full 20,000 number that is circulated, but what we need to be focused on is what the actual risk in that group is. The bigger risk to us are the additional 3,000 open cases that U.K. security minister Ben Wallace has talked about. That’s where the larger risk lies. A lot of the nervousness has come from the fact that we had two people come out of the 20,000 pot and attack us last year—Khalid Masood and Salman Abedi—while London Bridge attacker Khurram Butt was in the 3,000 who were being looked at. But we would be making a terrible mathematical mistake if we said that we need to swivel all of our guns onto the 20,000, when the 3,000 is where the big risk is.

What exists in that 20,000 is the possibility of people reengaging, like Abedi and Masood. How do you spot that reengagement? Do we have the right triggers in place so that when somebody who has previously shown signs of violent extremism reengages or does something or contacts someone of concern, it comes onto our radar screen?

The only way we are ever going to significantly improve coverage of this is by alerting a broader number of U.K. agencies about who is in the 20,000 pot. David Anderson [former Independent Reviewer of Terrorism Legislation in the United Kingdom] has stated this is something we are going to have to get much better at. We have already learned a great deal from the Operational Improvement Review in the wake of the attacks, and Mr. Anderson praised the work that had been done. But clearly more needs to be undertaken to tighten up our processes to prevent such attacks from taking place.

We are going to run pilot programs and see where we get to on this larger group, to see whether there are issues around reengagement. As a result in some of those cases, we will end up moving them deeper into the safeguarding space: they don’t want to be engaged in extremist activity, they might choose to volunteer, and they might want assistance in all kinds of ways, whether that’s mental health, education, or intervention providers providing religious instruction. There might be people who genuinely want to get off this extremism carousel. And there might be others who are reengaging who become a risk again, and we need to look at them from a law enforcement and security perspective. We are only going to be able to know this is the case if more people are helping us, and that includes my core policing colleagues outside of the specialism of counterterrorism policing. They will be used to the principles; they just need to learn to apply them to terrorism offenders. The key is information sharing and spreading the risk, but because we work in a top-secret world, that’s a cultural change, which is easy to call for out loud like this but really difficult to achieve.

CTC: We keep seeing TATP showing up in terrorist plotting. Is there more that could be done to stop that? 

Basu: A few very obvious things need to be done. We need much more help from the private sector. Anyone who sells materials that could be used in this process needs to be engaged with, and we need to be much quicker at spotting suspicious purchasing activity. Same with the banking sector and suspicious transactions—all of which has been in place for some time, but we need to be much better at it. And we need to make sure that we remove anything that looks like bomb-making instruction from anywhere on the internet. The difficulty is that some of this stuff is O-level [type] chemistry experimentationa that is available online and aimed at children and students. So some of it is not IS appearing online saying ‘this is how to blow people up.’ And so there is a danger is being disproportionate in what we take down and what we don’t. TATP is still dangerous, volatile, and difficult to make, but it is probably not as difficult as we thought it was. So you don’t need to be a chemical engineer to be able to do this kind of stuff.

CTC: When it comes to social media and its role in encouraging or directing terrorism, is there more, from the policing perspective, that you can do? 

Basu: This is principally a role for intelligence agencies rather than police. What it does require, however, is close cooperation from social media companies. And where there isn’t cooperation, we need to consider coercive measures. Governments need to consider legislation. In reality, 2017 was a wake-up for the U.K. and for a lot of companies, not just in the CSP [communication service provider] space. It is about corporate social responsibility [for] how they protect their clients. I do not think it is acceptable anymore to say, “I’m defending free speech” if free speech involves blowing people up. The companies need to be in that space. There are positive signs that they are in that space. They’ve been in front of various hearings and political leaders. I’ve no doubt that they are listening, but they need to make sure their business models are effective in dealing with this now. They’ve got the brainpower, and they’ve got the resources, and they need to help.

CTC: Turning to the threat posed by the Extreme Right Wing (XRW) in the U.K. It has been discussed as an escalating problem for some time. Has it now crossed the threshold of being a national security threat?

Basu: It is too early to see how much it should be escalated. The threat assessment should be looked at by JTAC, and where we think there is a national security threat, then the security services should be involved. The far-right group National Action was the first time we saw anybody who was organized in the XRW space in a way that would represent a national security threat. Thankfully, it is nowhere near the same scale or problem as we’ve had from the IS-inspired or -directed [threat] or the AQ [threat] prior to that or the IRA threat prior to that. That is really something to be proud of in the U.K. culture and tradition that we don’t have this mass wave of extreme right wing. So far, we have seen people try to get on the back of that and not be incredibly successful. They are still relatively small, relatively disconnected, relatively disorganized groups.

My biggest concern about the extreme right wing, which is not a national security threat, is the Darren Osbornesb of the world, the Thomas Mairs of the world [the murderer of Member of Parliament Jo Cox], and the lone actor with the mental health problems, depression, drugs, and the personal grievance who is acting alone. It is spotting people doing something like that which is very difficult.

The biggest concern for the country should [be] that violent Islamist extremism and violent right wing extremism will feed off each other. Islamophobia is something we have to be really clear about in policing: hate is hate. And we should be very, very robust and have a zero tolerance towards hate crime. And if we don’t do that, and Muslim communities are being stigmatized and attacked because of things a tiny minority of people are doing, I think we will create problems for ourselves. The Muslim community is going to be thinking that it is unfair and unjust. I think we don’t have parity at the moment in the way that we look at things. But we don’t have parity because at the moment, the scale of the threat is not the same. I do not want to wait for the scale of the threat to get to a point that something has to be done about it. You have seen a lot of the robust action we’ve taken against National Action, and that was because we were determined to stop this [from] becoming the next problem.

CTC: What about the policy side? The latest iteration of CONTEST [the U.K. counterterrorism strategy] is due out in a few months. What is your particular view on the “Prevent”c pillar of the strategy? 

Basu: Prevent is the hugely controversial part of the strategy. Government will not thank me for saying this, but an independent reviewer of Prevent, as suggested by David Anderson, would be a healthy thing. In fact, he would be excellent in the role. Prevent is, as a Prevent officer who used to work for me said, five percent of the budget but 85 percent of the conversation. Prevent is the most important pillar of the four pillar strategy.d There is no doubt in my mind about it. We’re pretty good at Pursue; we’re pretty good at Prepare, as people have seen in our response. What needs to be better in Protect is the private sector, and I think there’s a big willingness, like there is with CSPs, to understand that they need to protect their customer base better. And whether that’s insider threats, cyber threats, or security guards [in] crowded places, there is an understanding that they need to invest more in that. But Prevent is the key.

There is still this hangover of toxicity around the Prevent campaign that we need to stop, because people need to understand that this about stopping people in the pre-criminal space ever getting anywhere near criminality. And Prevent needs to concentrate on how it does that. That cannot be a job for the police and security services. That has got to be a wider societal pillar. The more that policing and security service could withdraw from Prevent in order to focus Prevent work on problem solving within communities and getting communities to deal with it, the better in the long-term. There will always be a role for policing because we are a frontline. And here I don’t mean counterterrorism policing but the other 115,000 or so police officers who are in the frontline working together with communities. But actually the big responsibility is how do we get everyone else interested and involved and talking positively about some of the brilliant work that is going on.

Prevent, at the moment, is owned by the government, but I think it should be outside central government altogether. I think people who are running their local communities should be taking the lead. Local leaders around the country should be standing up and talking about this, not central government, security services, and counterterrorism police. Communities should be talking about protecting themselves from the grassroots up. When you see Prevent working on the ground brilliantly, that’s where it’s working, and largely unsung and un-talked about. Substantial community resilience is produced by that sort of work, and giving people that resilience is important and communities have to help each other do that. I would love to see a professional communications company say, as part of their social responsibility programming, “I’ll give free training to anybody from youth or whoever who wants to start a conversation around this.” That would be great. Rather than the government handing over a sum of money and then it becoming state sponsored with accusations of demonizing communities, it should be locally generated. We have gotten all of that messaging the wrong way around, it should be grassroots up.

Previously, this was not being done. But there are increasingly some phenomenal voices who’ve got real gravitas in their communities who are beginning to talk about the issues. The mayor of London, Sadiq Khan, is a really good example of that. He is not central government, he runs a city, and the protection of the city is his concern, he should be doing that, not MI5. Not the Cabinet, and the National Security Council and New Scotland Yard.

CTC: The threat picture we talked about is about a scattering of diffuse, random, isolated loners who latch onto ideologies, launching lone actor-style attacks. Have you seen any evidence in the attack planning of anything more substantial than that? Or is that really where the heart of the threat now sits? And is that where the threat picture going forward is going to be?

Basu: We will never eradicate the ambition [of extremists] to put a complicated network together to do a big, spectacular attack. The difficulty with that for a terrorist is that all that planning and all that preparation makes you very vulnerable. Where people aren’t vulnerable is when they are sitting in their bedrooms, using encrypted apps or not using any technology at all, and not having any contact with the outside world. Thomas Mair was a good example of that: no one spotted that happening because he was just a bit of an odd, loner, social misfit. No one saw any triggers that would be interpreted as leading him to that extreme level of violence. That is the bit that concerns me. We are seeing people who are vulnerable to suggestion, who have low-level mental health challenges, which probably don’t hit any clinical threshold. So even if they presented to the National Health Service, they would not look like they were someone of concern. It might be a low-level mental illness, but it’s a low-level mental illness with a lot of other red flag markers around it—for example a propensity towards violence. You can be seriously mentally ill and not violent. Nobody should ever stigmatize people with mental health, or put the two things together. But it is that kind of thing that concerns me most, and we are seeing more of that. And most disturbingly, very young and more female interest in violence.

That disturbs me and has got to have come from social media, if you think where kids get all of their information and how fast that they get it … and then how easy it is to go from—it’s a horrible expression—‘flash-to-bang,’ from having no understanding [of] what they are dealing with to a tiny, partial, ridiculous kind of notion of what religion or what violence, or what freedom of expression, or what these things mean because they picked it up in six-second soundbites on their phone. That malleability worries me a lot, and that concern seems to be being replayed around the world in my conversations with partner agencies across the European continent. So how we influence that younger, very vulnerable generation is going to be a key question. A revamped Prevent strategy is going to be a large part of the answer.     CTC

Substantive Notes
[a] O-levels are exams students in the United Kingdom used to take at age 16.

[b] Darren Osborne is the recently convicted extreme right-wing terrorist who drove into a crowd outside the Finsbury Park mosque in June 2017.

[c] “Prevent” is the forward-looking aspect of the strategy that focuses on preventing individuals from being drawn to extremist ideas.

[d] The other three pillars are “Pursue,” “Prepare,” and “Protect.”

Citations
[1] Roger Baird, “Government has lost track of hundreds of British jihadi fighters,” International Business Times, January 5, 2018.

Bit of a departure from usual activity, this is an animated interpretation for the website The Conversation of some of the lone actor work that I have been involved in. The numbers and detail of the work comes from the Countering Lone Actor Terrorism (CLAT) project that involved a range of excellent research institutions and colleagues (who are captured in one of the images). A HUGE thanks and applause is due to Wes Mountain who did the animation and was immensely patient with me in producing it.

This aside, spoke to Sky News for a special about a terror case in Manchester with links to the Manchester bomber, and the broader question of the terrorist threat to the UK linked to Libya, and for Canada’s Perspectives with Alison Smith on CPAC about what to do about returning foreign terrorist fighters.

Comic explainer: what is lone-actor terrorism?

Wes Mountain/The ConversationCC BY-ND

Security services and governments around the world remain vigilant to the threat of lone-actor terrorists in our cities.

But when there’s often no indication of an explicit intention or ideology, questions about mental health and with groups like Islamic State willing to encourage and claim responsibility for almost any attack, how do we define lone-actor terrorism?

In this comic explainer, Raffaello Pantucci, Associate Fellow at the International Centre for the Study of Radicalisation and Director of International Security Studies at RUSI, explains the theory behind lone-actor terrorism and what we know about lone actors’ effectiveness, motives and behaviours that could help us to better understand and disrupt future attacks.


 

 

 

 

 

 

 


Rachid Kassim is quoted from an interview with Jihadology.

Junaid Hussain’s quote is from court documents.


 


The full Countering Lone-Actor Terrorism Series is available at the Royal United Services Institute’s website.

Illustrations by Wes Mountain for The Conversation.

It has been a busy day. Events in Barcelona are still a bit unclear, but it sounds like we are moving towards some resolution. In the meantime, catching up on posting latest contribution for the excellent West Point Combating Terrorism Center’s journal CTC Sentinel. Thanks to Paul for his excellent and patient editing. More to come on this topic invariably, and some more catch up to do after this week’s atrocities in Spain.

Britain on Alert: The Attacks in London and Manchester and the Evolving Threat

Abstract: After a respite from mass-casualty terrorism for more than a decade, thus far in 2017 the United Kingdom has suffered three such attacks and a higher tempo of jihadi terrorist plotting than ever before. Absent from the threat picture so far are any Paris-style plots in which the Islamic State has dispatched operatives to launch attacks in the United Kingdom. At this early stage of the investigations, it appears that the Westminster attacker had no contact with the Islamic State and that the Manchester and London Bridge attackers were at most loosely connected to the group. The current threat environment is mostly made up of individuals and smaller scattered cells planning lower-tech attacks with very short planning and operational cycles—sometimes remotely guided by the Islamic State—rather than cells trained and dispatched by the group. But this could change as more British Islamic State recruits return home. With over 20,000 British nationals and residents subject to counterterrorism investigations since 9/11, a growing number of ‘frustrated travelers,’ and a complex and unpredictable set of threats, the United Kingdom faces an unprecedented security challenge. 

It has been a difficult year so far in the United Kingdom. After a period of relative stability, the United Kingdom has abruptly faced a period of deep political turmoil and a series of terrorist strikes that killed 36 people. While the full story around the terrorist plots that rocked the country during the first half of the year is not yet entirely clear—with multiple public and confidential reviews currently underway—the series of cases has led to deep introspection about how the United Kingdom manages the risk posed by the growing number of radicalized individuals at home. In July, Commissioner of the Metropolitan Police Cressida Dick stated that “since March this year, the [threat] tempo has changed. What we are seeing is now being described by the experts as a ‘shift’ in threat, not a spike.”1

This article argues this shift has to be understood as a permanent adjustment in the threat. There has been significant continuity in recent years in the nature of the threat faced by the United Kingdom, with a noticeable move away from large-scale plots to smaller scattered cells, with the tempo of plotting increasing noticeably. The article builds on a previous article in this publication in March 2016, which laid out the United Kingdom’s threat picture through analysis of a series of disrupted terror plots.2 The conclusion then was that “the public threat picture has been dominated by lone-actor plots”3 rather than more ambitious plots directed by the Islamic State like the Paris and Brussels attacks, an assessment that has not been challenged by the attacks in London and Manchester this year. Although only tentative conclusions can be made at this stage, the information that has come to light suggests these plots were significantly less ambitious and complex than some of the conspiracies seen in continental Europe and were carried out by men with at most loose connections to the Islamic State.

This article first outlines what is now known about the March 2017 Westminster Bridge attack, the May 2017 Manchester bombing, and the June 2017 attack on London Bridge and Borough Market. It then assesses what these attacks and other thwarted plots reveal about the broader threat picture in the United Kingdom and the challenges faced by security services.

The return of terrorism to the headlines in the United Kingdom this year was all too predictable. After a period of almost three years with the threat level at the second-highest level of ‘severe,’ British authorities had long warned that an attack was highly likely. Disruptions took place regularly. In early March 2017, the Metropolitan Police Service’s Assistant Commissioner for Specialist Operations Mark Rowley, who is also the National Police Chiefs’ Council (NPCC) lead for counterterrorism, stated that since the murder of Lee Rigby in May 2013, authorities had disrupted 13 terrorist plots. In defining the nature of the plots, Rowley stated “some of them have been more sophisticated [in their] planning looking to attack public spaces, or police offices or the military, not that dissimilar to some of the attacks we have seen in Belgium and France and elsewhere. There is a whole range from the simple to the complicated.”4 This built on comments by then-Prime Minister David Cameron in the wake of the Paris attacks of 2015 in which he stated that agencies had disrupted at least seven plots in the previous six months, “albeit attacks planned on a smaller scale.”5

The Westminster Bridge Attack
Notwithstanding this tempo of disruptions and public statements about the terrorist menace, Khalid Masood’s attack on Parliament on March 22, 2017, still shocked the British public. Using a Hyundai Tucson SUV rented in Birmingham a day earlier,6 Masood drove through the crowds of mostly tourists crossing Westminster Bridge at 2.40 PM. Hitting numerous pedestrians and knocking some into the river, he drove into the gates in front of the Houses of Parliament and then ran at a police officer standing guard, stabbing him with a knife. Masood was then shot dead by the close protection team of Defence Secretary Michael Fallon, who happened to be leaving Parliament at that moment.7

In the wake of the attack, which killed five people, authorities undertook a number of arrests near locations where Masood had lived, detaining 12 people in total. All were subsequently released.8 Born Adrian Russell Elms, Masood was a troubled 52-year-old who had lived an itinerant life, married three times, and had four children by two different women. He appears to have converted in prison while serving time for assault.9 He was twice incarcerated and arrested numerous other times for incidents involving attacking others. His case was of such concern to Sussex Police that in 2009, they filed a report highlighting the escalating nature of his violent behavior.10

In addition, Masood had featured in counterterrorism investigations. Prime Minister Theresa May confirmed that he had surfaced on the fringes of previous cases, stating “he was once investigated by MI5 in relation to concerns about violent extremism. He was a peripheral figure. The case is historic. He is not part of the current intelligence picture.”11 He was investigated after his telephone number was found among the contacts of a member of a cell of individuals from Luton who were jailed in 2013 for planning to bomb an Army barracks.12But he was not a priority of the investigation, and greater attention has been placed on his further radicalization more recently in Birmingham.13

Nevertheless, there has been little evidence produced that Masood was linked to any other co-conspirators or that he had conducted his assault with any external direction. He sent a WhatsApp message shortly before his assault reportedly stating his attack was a response to Western interventions in the Middle East, but the person he sent it to was cleared by authorities of any prior knowledge of the attack or culpability.14 A claim issued by the Islamic State in the wake of the attack was also dismissed as it showed no evidence of being anything but opportunistic. The group has praised Masood in subsequent publications, including quite specific incitement to people to emulate his attack, but the group has never demonstrated any access to information pertaining to him that was not already in the public domain. Authorities have concluded that Masood most likely acted alone and that the full extent of his motivations may never be known.15 As Neil Basu, NPCC’s senior national coordinator for counterterrorism, put it, while the police “found no evidence of an association with Islamic State or al-Qa`ida, there is clearly an interest in jihad.”16 While it is unlikely that Masood was completely isolated, the lack of any subsequent arrests or any charges issued as well as some fairly telling statements by police that his motivations may never be known highlights that, for authorities, the case is largely closed.

The Manchester Bombing 
The contrast between the Westminster attack and the bombing exactly two months later on May 22 in Manchester by Salman Abedi is stark. Using a device that he appears to have constructed himself in Manchester using tools that are publicly available,17 Salman Abedi, a 22-year-old British national of Libyan descent, walked into a crowd of families and children as they left an Ariana Grande concert and detonated a well-built bomb made of TATP and packed with shrapnel.18 Killing himself and 22 others, Abedi’s attack immediately sparked something of a panic among U.K. authorities. Concerned about the sophisticated nature of the device and the fact that Abedi was a known figure with deep extremist contacts, counterterrorism agencies immediately feared that a bomb maker might be on the loose. A wide net was cast, and the terrorist threat level was raised by the Joint Terrorism Analysis Center (JTAC) to its highest level, ‘critical,’ meaning an “attack is expected imminently.”19


Emergency response vehicles parked outside the scene of the terror attack in Manchester, England, on May 23, 2017. (Paul Ellis/AFP/Getty Images)

Nevertheless, while over 20 arrests were carried out, no charges have been issued. In early July, Greater Manchester Police held a press conference at which they highlighted that while they believed Abedi may not have acted alone, he was not part of a larger network. “We don’t have evidence of a large network. We do, however, suspect others were either aware [of] or complicit in the knowledge of this attack … We do believe that there are other people potentially involved in this … further arrests are possible,” Detective Chief Superintendent Russ Jackson, head of the North-West Counter Terrorism Unit (NWCTU), stated. 20

Abedi is reported to have had significant connections in radical circles in Manchester. Many of Abedi’s links tie back to the community of young men from the city going to fight in Syria. He reportedly visited wheelchair-bound (following injuries sustained during his involvement in the 2011 uprising in Libya) Abdal Raouf Abdallah, another Libyan-British national, in jail a number of times in early 2017. Abdallah had been jailed for his role in facilitating the travel of others to Syria.21 He was also reportedly in close contact with Raphael Hostey, a prominent British Islamic State fighter from nearby in Manchester, who used the kunya Abu Qaqaa and was the sponsor for numerous Britons who joined the group.22

It is, however, Abedi’s links in Libya that have raised the most scrutiny. His father, Ramadan Abedi, a prominent onetime member of the now-defunct Libyan Islamic Fighting Group (LIFG), reportedly returned to fight—bringing his son Salman with him—in the revolution that overtook the country in 2011.23 A long-time and committed member of the LIFG, he was well-connected in the community around the jihadi group and was also reportedly seen in Bosnia a number of times during the civil war in that country in the 1990s.24

British authorities have made clear they wish to question Abedi’s brother Hashem.25 On May 24, 2017, the Special Deterrence Force, a Tripoli-based militia under the nominal control of the Interior Ministry, released a statement saying it had detained Abedi’s father and brother Hashem. The militia claimed that Hashem had confessed while in detention that both he and Salman were members of the Islamic State and that Hashem had admitted he had been in the United Kingdom during the planning phase of the attack, had been aware of the plot, and had been “constantly in touch” with his brother. Hashem also reportedly admitted to helping to purchase the bomb components. On May 25, a spokesperson for the militia stated on Libyan television that the two brothers had been in contact by phone just 15 minutes before the bombing.26 Questions remain over these confessions, including over whether they were made under duress. Hashem is still in Libya and has not been charged in the United Kingdom. Analysis of his social media accounts show he was in contact with Hostey’s brother.27

According to the Greater Manchester Police, the two Abedi brothers both left for Libya on April 15, with Salman returning to the United Kingdom on May 18, just four days before the bombing. It was the latest in a number of trips Abedi had made back and forth to Libya. Investigators believe bomb-making materials were obtained before the trip to Libya and stored in a car and that when Salman Abedi returned to Manchester, he purchased other materials for the device including nuts as shrapnel and quickly assembled the bomb.28 The high volatility of TATP—the quick speed at which it evaporates or sublimes and thus becomes useless as an explosive—meant he almost certainly made the explosive substance in the days between his return from Libya and the attack, sources told CNN.29

It remains unclear whether Abedi received training while in Libya. Abedi appeared to be single-mindedly focused on building the bomb when he returned to the United Kingdom, suggesting it is possible he received training or final instructions on his last trip.

Similar to Masood’s attack, the Islamic State issued a statement praising Abedi’s act, but it demonstrated no proof of any prior knowledge.30 Notwithstanding the alleged declarations by his brother to the Tripoli militia, had Salman been closely linked to the Islamic State in Libya, it would be surprising that he would not have recorded a martyrdom video and left it with the group, or least some photographic evidence showing his connections. At the same time, investigators continue to believe that he had some greater degree of links to terrorist groups abroad than Masood. However, the exact nature of these links remains unclear.

The London Bridge and Borough Market Attack 
On June 3, 2017, less than two weeks after the Manchester bombing, London was struck once again. On a balmy evening, Khuram Butt, Rachid Redouane, and Youssef Zaghba drove a van they had rented earlier in the afternoon into the Saturday night crowds gathered near London Bridge. Ramming the van into a fence adjacent to the pavement near the end of the bridge, the trio then leapt out of the vehicle and started attacking passersby in the adjoining Borough Market area with long knives they had bound to their wrists with leather straps. They wore plastic bottles covered in black tape wrapped around their bodies to give the impression of wearing suicide vests and had a number of Molotov cocktails made up in the van.31 Within eight minutes of police receiving the call, armed response officers arrived and shot and killed the three men, though not before eight revelers had been killed and 48 injured.32

One of the attackers was almost immediately identified as a figure well-known to the security services. Butt, who authorities believe was the ringleader of the group, was a prominent and active member of the al Muhajiroun network of extremists that has been at the center of the United Kingdom’s violent Islamist terrorist threat for the past two decades. Butt himself had been repeatedly featured at the center of investigations and was most recently on bail for ‘low-level’ fraud for which he was not ultimately going to be prosecuted.33 More embarrassingly for British authorities, he had been featured in a widely viewed documentary called The Jihadis Next Door, which followed a number of prominent al Muhajiroun members, including Siddartha Dhar, also known as Abu Rumaysah (who fled to Syria with his family soon after filming and was believed to have become a new “Jihadi John” figure in Islamic State films34), as well as others who have been convicted of a variety of terrorism and extremism charges.35

The other two were less well known to British investigators, though it rapidly emerged that the Moroccan-Italian Zaghba had been flagged to British authorities through a European intelligence sharing system as someone of concern to Italian authorities after he was stopped at Bologna airport in March 2016 on his way to Turkey. Carrying a small bag, little money, a telephone with Islamic State videos on it, and a one-way ticket, he raised suspicions by telling authorities that he wanted to head to Syria.36 Nevertheless, he was released after being turned back. He subsequently traveled onto his native Morocco and then ultimately London, where he took on part-time work in the services industry.37 The third attacker, Redouane, appears to have led an equally peripatetic life, alternatively claiming to be Moroccan or Libyan and stating his birthdate was in 1986 and 1991 on different documents.38 He had married an Irish woman and had a child with her, who he appears to have visited at his estranged partner’s home in Barking the night prior to the attack after a lengthy hiatus.39

Planning for the event appears to have taken place over a two- to three-week period prior to the attack.40Police believe Redouane’s bedsit in Barking was the location where plotting occurred,41 though the men appear to have also congregated in a number of sporting locations, including an outdoor pool42 and a gym that was established by a pair of brothers who had previously been identified as being involved in al Muhajiroun activity.43

It remains unclear the degree to which the London Bridge attackers may have been directed by the Islamic State or any other extremist group, though the Islamic State did again claim the attack.44 Given Butt’s known association with individuals who have gone on to become prominent figures within the Islamic State, like Abu Rumaysah (who is still suspected to be at large and was featured in the same British television documentary), he would have had ample opportunities to establish contact with the group. Senior leadership figures within al Muhajiroun, like Anjem Choudary and Mizanur Rahman, have been prosecuted for supporting the Islamic State.45 Others like Abu Rahin Aziz,46 Shahan Choudhury,47 Mohammed Reza Haque,48 and Hamza Yaqub49have been publicly identified as having fled to join the group. Many others have tried going to Syria and been caught at various stages of their journeys. Given the close contact the group’s members maintain with those back in the United Kingdom even after they have gone over to Syria, it seems likely that Butt would have had at least some contact at some point with Islamic State operatives in Syria.

While the Islamic State’s immediate claim contained no information that was not already in the public domain, the group’s subsequent mention of the attack in the 10th edition of its magazine Rumiyah did offer battlefield names (kunyas) for the fighters, which had not been discussed in the public domain, identifying them as Abu Sadiq al-Britani, Abu Mujahid al-Britani, and Abu Yusuf al-Britani.50 The accuracy of this information is unclear, however, with it contrasting with Butt’s known kunya of Abu Zeitoun.

Observations on the Three Attacks 
One key question for authorities is the degree to which the three cases were connected.51 Thus far, no evidence has been made public to show any level of connectivity, beyond the potential that the three plotters were somehow inspired in their timing by each other’s actions.a The available evidence suggests the attacks were carried out by individuals or small cells who, though possibly inspired by the Islamic State’s ideology, were either not connected to the group (Westminster) or only loosely connected (Manchester and London Bridge). There is no indication that the Westminster and London Bridge attackers trained overseas. In the London Bridge plot, at least two of the attackers, Butt52 and Zaghba, were frustrated travelers to Syria. In the Manchester plot, Abedi is known to have traveled to Libya a number of times (though the exact nature of these trips is complicated by his Libyan heritage). Abedi’s single-minded focus in constructing a device just a few days after returning from Libya suggests it is possible he traveled to Libya for the purpose of learning how to build a device.53 The New York Times, citing U.S. and European intelligence sources, reported Abedi met with members of Katiba al-Battar, a Libyan Islamic State brigade, at some point while in Libya and kept in touch with the group on trips back to the United Kingdom, but this has not been confirmed by British authorities.54Given that Abedi reportedly participated in fighting against Muammar Qaddafi, one possibility is he received bomb-making training while spending time with a militia group in Libya. There was some public speculation Abedi may have traveled to Syria as well, but this has not been substantiated.55 No evidence has yet surfaced of external direction, and it cannot be ruled out that Abedi learned to build the bomb off the internet given there is evidence he viewed various online videos on bomb making.56 But the relative sophistication and effectiveness of the device, and the trickiness of making TATP, points to the possibility of at least some bomb-making training or practice overseas.

Increased Tempo
In the wake of the Westminster attack, there was a noticeable uptick in the tempo of arrests being conducted by police disrupting active attack planning. In June, Commissioner Dick said about one person a day was being arrested in counterterrorism investigations.57 The reasons for this increase are not totally clear, but it is likely the result of both lower tolerance of risk by British authorities and a growing threat. In the first instance, a successful attack highlighting a failure in intelligence would change counterterrorism agencies’ perspectives on ongoing investigations, making them reconsider various subjects of concern. Second, police concerns of copycat attacks likely sped up arrests of subjects of interest who had been under surveillance for some time. A third likely reason is the increasing push and resonance of Islamic State messaging about individuals staying home to launch attacks. This is a phenomenon that has been obvious since Abu Muhammad al-Adnani’s speech in May 2016 in which he stated, “The smallest action you do in the heart of their land is dearer to us than the largest action by us, and more effective and more damaging to them … And if one of you wishes and tries hard to reach the Islamic State, then one of us wishes to be in your place to hurt the Crusaders.”58 As it has become harder to travel to Syria and the group has been losing territory, more supporters of the group in the United Kingdom are becoming frustrated travelers who are responding to this messaging.

British police thwarted five plots in between the Westminster Bridge and Manchester attacks.59 Just over a week after Masood’s attack, police in Birmingham arrested brother and sister Ummariyat Mirza and Zainub Mirza, who were accused of planning a beheading attack.60 Two weeks later, Ummariyat Mirza’s wife, Madihah Taheer, was arrested and charged with supporting her husband in his plot.61 At around the same time, police arrested a 17-year-old girl of Moroccan origin from London for allegedly plotting to launch some sort of attack under direction of a fighter from Coventry who was killed in April by a drone strike in Syria. The teenager, who cannot be named for legal reasons, was apparently married to the fighter through Skype and had sought to obtain guns and grenades to launch an attack in the United Kingdom under explicit direction from the Islamic State.62

Even more alarmingly, 27-year-old Khalid Ali was detained in Whitehall, a short month after Khalid Masood’s attack on Westminster, in a dramatic mid-afternoon swoop as he walked around with a bag full of knives and shortly after throwing his phone into the river. He was charged with bomb making linked to activity he undertook in Afghanistan years before, as well as the alleged plan he was in the midst of when he was arrested in Whitehall.63

The same day that Ali was detained along Whitehall, police in Willesden in northwest London and Kent undertook a series of raids, detaining six people in what they believed was another cell actively plotting attacks. The case was deemed of such concern that authorities stormed the premises using CS gas and guns. One woman was shot during the entry.64 The initial reporting indicated a cell of six were involved, including an individual who had been stopped in Turkey alongside two teenagers who were reportedly en route to Syria.65 In the end, however, the failed traveler was not charged, and three women (including a mother and daughter) were presented in court for allegedly planning an unspecified knife attack.66 Finally, five days prior to Abedi’s attack, police in East London arrested four men for planning an alleged car bomb and knife attack in central London reportedly inspired by Masood’s actions.67 The four men were arrested on May 17.b

This intense spate of arrests presaged the Manchester and London Bridge attacks and reflected a changed threat assessment by authorities as they sought to roll up a number of cells that had been under surveillance for some time. As noted above, in many cases, authorities feared that Masood’s abrupt success might stimulate others to emulate him—something that had been seen historically after successful attacks. The murder of Lee Rigby in May 2013 by two extremists linked to al Muhajiroun helped stimulate others to attack, including an extremist who the very next day attacked a French soldier patrolling in the La Defence area of Paris. More generally, the attack model deployed against Rigby is one that has become a template many British extremists seek to emulate, often themselves making direct reference to that 2013 attack.

Arrests have continued at a high rate in recent weeks. Three men were picked up on the day of the general election, June 8, with one charged on an unspecified plot. The 33-year-old man in question, Irfan Khan, was allegedly a long-time consumer of online radical material and had allegedly recently viewed material linked to the London Bridge attack when he was arrested, demonstrating the potential inspirational effect of that attack.68 Later in June, police in Birmingham arrested Tarik Chadlioui, a 43-year-old Moroccan cleric who was wanted on terrorism charges in Spain for being the spiritual leader of a cell supporting the Islamic State.69 One of his followers in Majorca is accused of planning a stabbing attack of pedestrians on the island.70

A Constant Threat 
None of this, however, points to large-scale attack planning in the United Kingdom. While a number of the disruptions suggest plots approaching the scale of the London Bridge or Manchester attacks, there was little evidence presented in court of conspiracies with the capability to launch larger Paris-style assaults. Unlike disruptions on the continent in Europe, where cells in possession of automatic weapons and with clear evidence of individuals who have been to foreign battlefields are regularly disrupted, so far there is no evidence that has been made public of this model of plot in the United Kingdom.

More typical have been plots similar to that mounted by a cell of individuals from Birmingham who were planning a knife and bomb attack in the United Kingdom before their arrest in late 2016. Although the so-called “three Musketeers” behind this plot were potentially dangerous, and two had, five years previously, very briefly made it to a training camp in Pakistan, there was no evidence presented at the trial that their plot was directed from overseas; it emerged at trial that the conspirators joked about their inadequate skills, with one likened to one of the useless extremist characters from the film Four Lions, a satirical movie that pokes fun at some of more inept practices of British jihadis.c

The earliest disrupted plot linked to Syria, that of Erol Incedal, included accusations of a planned marauding gunman scenario with some direction from overseas.71 Incedal was cleared of these charges and ultimately convicted of possession of a bomb-making manual.72 But beyond this, the attack planning seen in the United Kingdom has been fairly consistently small cells or isolated individuals seeking to launch low-grade attacks on soft targets around the country. While there are often links to known extremists or networks, where there has been direction, it has been in the form of remote guidance by extremists based in Syria and Iraq.73

None of this is to say that authorities do not continue to see aspiration and intent by terrorist groups to launch more sophisticated plots in the United Kingdom. Thus far, however, the threat has mainly consisted of small-scale unsophisticated plots. While this suggests terrorist groups like the Islamic State have been facing difficulties in infiltrating directed cells into the United Kingdom, authorities are still confronted by a challenging threat picture and one that is in many ways more complicated with these scattered and disparate cells, which are difficult to track. Adding to the challenge is the unpredictability of individuals or small cells autonomously deciding to act using very low-tech methods and weapons, which makes it a very difficult to manage and prioritize threats accurately.

Managing Risk 
The question of prioritization is the key issue at the heart of considerations about how to manage the current U.K. threat picture.d In all three of the cases featured in this article, attackers were known and had been investigated—to varying degrees—by authorities. In at least two cases, Abedi and Butt, they had been a focus of investigations, but no prosecutable case had materialized, leading investigators to move on to other cases that appeared to be of higher priority. With limited resources, such choices have to be made.

The volume of activity that U.K. security services are currently focused on was illustrated most clearly in the wake of the Manchester bombing when Security Minister Ben Wallace revealed on the BBC’s flagship Today program that authorities had 500 investigations underway, involving some 3,000 subjects of interest. In addition, he revealed, there were a further 20,000 former subjects of interest (i.e. former targets of counterterrorism investigations in the post-9/11 period) who remained of peripheral interest to the security services. The numbers have since grown even higher, according to British police. Butt, the London Bridge ringleader, was among the 3,000 current subjects of interest. But it was from the 20,000 considered to be only a residual risk that the Manchester and Westminster attackers had come.74 This larger pool includes individuals who have featured in investigations over the past almost two decades of counterterrorism cases in the United Kingdom. Some are individuals who were on the fringes of plots; others are those who have been charged, convicted, served their sentences, and are now free once again. However, due to their observed activity, they are not deemed to be current priorities and have therefore been relegated by security services who instead focus their attention on those who have been demonstrating a higher level of alarming activity or potential attack planning. Given limitations in security services resources, only about 3,000 individuals can be focused on, and while the others are not forgotten, they are allocated a lower prioritization.75

In the wake of the two London and Manchester attacks, questions are being raised about whether this prioritization has been accurately calibrated.76 After the London Bridge attack, Prime Minister May stressed police and the Security Service MI5 would be reviewing their methods and more generally “how the terror threat is evolving, the way that terrorism is breeding terrorism and the increased tempo of attacks … in a way we haven’t seen before.”77 It has been reported that after the Manchester bombings, Britain’s security services began reevaluating the risk level of individuals categorized as former subjects of interest. One idea reportedly under consideration is to create systems for counterterrorism agencies to share information about former subjects of interest with the broader police force, taking advantage of the general police’s greater numbers of eyes and ears inside local communities. “It’s that wider cohort [of 20,000] that we have to keep an eye on as well; to see if any of them that reactivate, so to speak, and become dangerous again,” Mark Rowley, head of National Counter Terrorism Policing, stated in an interview earlier this month. “We’re going to have to improve what we do, but it is going to take a whole system effect—not simply counter terrorist specialists and MI5, but local policing, councils, and the public—to be able to deal with something which is becoming more of a cultish movement and less of a small terrorist organisation.”78

The U.K. threat picture is populated with seemingly disparate cells of individuals or clusters who are in some cases receiving direction from abroad through encrypted applications or social media, but in many cases are made up of perpetrators, as Prime Minister May stated, “inspired to attack not only on the basis of carefully constructed plots after years of planning and training—and not even as lone attackers radicalized online—but by copying one another and often using the crudest of means of attack.”79 The fact that the United Kingdom is also grappling with a threat from right-wing and anti-Muslim extremism risks provoking the sort of social tensions the Islamic State has long hoped would boost its appeal in the West.

It is, of course, still early days in the investigations into the London Bridge and Manchester attacks. It is possible more will be uncovered to show their connectivity to wider networks and plots. The plotting activity observed so far in 2017 points to a deeply diffuse and complicated threat picture in the United Kingdom, which is causing security services to revisit their methodologies and leading to arrests at increasingly early stages of the attack cycle. This can complicate subsequent convictions, but it is an imperative at a time when many plots are being carried out through low-tech means already in most citizens’ possession—cars and knives—and at a time when the flash-to-bang in plots can be counted in days rather than years.

Atop this complex domestic picture is the potential threat posed by the growing number of British jihadis who are expected to be returning home from Syria and Iraq. Exact numbers are impossible to know, but with hundreds already back,e authorities are already bracing themselves for an even more challenging threat environment when these battle-hardened veterans and their families return.     CTC

Raffaello Pantucci is Director of International Security Studies at the Royal United Services Institute (RUSI) and the author of We Love Death As You Love Life: Britain’s Suburban Terrorists. Follow @raffpantucci

Substantive Notes
[a] This certainly seems to have been the case in the subsequent anti-Muslim terrorist attack launched by Darren Osborne, a 47-year-old who drove a van into the crowd outside Finsbury Park mosque on the morning of June 19, killing one. A long-troubled individual, Osborne was reported by neighbors to have been incensed by the London Bridge attack. No evidence has publicly surfaced that he was linked to extreme right groups. And it is suspected that Osborne may have intended to strike an al-Quds, pro-Palestine march through central London earlier in the day, but had been too late and chose the mosque instead. Osborne was reported to have been raving drunkenly at a local pub the night before the attack and to have been flagged to police as drunk and asleep in his vehicle later the same evening. Martin Evans, Ben Farmer, Hayley Dixon, and Hannah Furness, “Finsbury Park terror suspect ‘planned to attack’ Muslim march in London but was too late, it is claimed,” Telegraph, June 20, 2017.

[b] The four were charged on May 25. One was not charged with terror offenses but instead for seeking to “possess any firearm or imitation firearm with intent to cause fear of violence.” “Update: Four charged following Counter Terrorism investigation,” Metropolitan Police press release, May 25, 2017.

[c] The most disturbing aspect of the plot was that three of the plotters had been convicted and served time for previous terrorism offenses. Two of those convicted, Naweed Ali and Khobaib Hussain, had been previously arrested for going to training camps in Pakistan. They were also linked to a cell arrested in 2011 in Birmingham that was seeking to launch an al-Qa`ida-directed attack in the United Kingdom and helping others get to training camps in Pakistan. Mohibur Rahman, the third convicted “Musketeer,” had been previously convicted for possession of extremist material. He was initially arrested as part of a cell that pleaded guilty of plotting in 2010 to bomb the London Stock Exchange. The three “Musketeers” had met and re-radicalized during their prison sentences, raising questions around prison radicalization. “Operation Pitsford: The 11 men,” BBC News, April 26, 2013; “Terrorism gang jailed for plotting to blow up London Stock Exchange,” Telegraph, February 9, 2012; “Three Musketeers’ guilty of planning UK terror plot,” BBC News, August 2, 2017; Dominic Casciani, “Birmingham terror plot: Inside the sting that caught four jihadis,” BBC News, August 2, 2017.

[d] The issue of prioritization is also key in several other Western countries facing a significant threat, including the United States. For example, Orlando nightclub shooter Omar Mateen had been the subject of an FBI counterterrorism investigation, but the case was closed before he carried out the attack. Matt Apuzzo and Eric Lichtblau, “After FBI’s Enquiry into Omar Mateen, A Focus on What Else Could Be Done,” New York Times,June 14, 2016.

[e] While there are no official figures, most reports say that some half of the 850 U.K. nationals reported to have gone to Syria and Iraq have returned home. Martin Chulov, Jamie Grierson, and Jon Swaine, “ISIS faces exodus of foreign fighters as its ‘caliphate’ crumbles,” Guardian, April 26, 2017.

Citations
[1] Cressida Dick, “Commissioner gives key note speech at Mansion House,” MetPolice Blog, July 20, 2017.

[2] Raffaello Pantucci, “The Islamic State Threat to Britain: Evidence from Recent Terror Trials,” CTC Sentinel9:3 (2016).

[3] Ibid.

[4] Matthew Weaver, “UK police have thwarted Paris-style terror plots, top officer says,” Guardian, March 6, 2017.

[5] Matt Dathan, “David Cameron to recruit 2,000 new spies amid claims UK foiled seven terror attacks in six months,” Independent, November 16, 2015.

[6] “Car used in Westminster terror attack was hired from Enterprise in Spring Hill,” Birmingham Updates, March 23, 2017.

[7] Ewan MacAskill, “Westminster attacker acted alone and motive may never be known, say police,” Guardian, March 25, 2017.

[8] Chris Johnston, “All 12 people arrested over Westminster attack released without charge,” Guardian, April 1, 2017.

[9] “Killer Khalid Masood left jail a Muslim, says childhood friend,” Press Association, March 25, 2017.

[10] Alice Ross, “Westminster attacker had record of increasingly violent attacks,” Guardian, May 15, 2017.

[11] Rowena Mason, “Theresa May’s statement – key extracts,” Guardian, March 23, 2017.

[12] “Four ‘planned to bomb Territorial Army base’ with toy car,” BBC NewsApril 15, 2013.

[13] Xantha Leatham and Omar Wahid, “Westminster terror attacker was radicalised in Birmingham in the past 12 months, sources claim,” Mail on Sunday, April 2, 2017.

[14] Kim Sengupta, “Last message left by Westminster attacker Khalid Masood uncovered by security agencies,” Independent, April 27, 2017.

[15] Vikram Dodd, “Westminster attack: Masood did act alone, police conclude,” Guardian, April 13, 2017.

[16] Robert Booth, “Westminster attacker Khalid Masood had interest in jihad, say police,” Guardian, March 27, 2017.

[17] Nick Hudson, “Manchester suicide attack: Abedi bought most bomb parts ‘himself,’” Policeprofessional.com, May 31, 2017.

[18] Paul Cruickshank, “London attack ringleader was under active investigation at time of assault,” CNN, June 8, 2017; C.J. Chivers, “Found at the Scene in Manchester: Shrapnel, a Backpack and a Battery,” New York Times, May 24, 2017.

[19] “Threat levels,” Security Service, MI5.

[20] “Manchester Arena suicide bomber Salman Abedi may not have acted alone, police say,” Telegraph, July 6, 2017; Neal Keeling, “Police suspect others were involved in Manchester Arena attack – and may make further arrests,” Manchester Evening News, July 6, 2017.

[21] Joe Thomas, “Manchester Arena bomber visited terror convict in Liverpool prison,” Liverpool Echo, June 25, 2017.

[22] Andy Hughes, “Manchester suicide bomber Salman Abedi linked to key UK IS recruiter,” May 25, 2017.

[23] Nazia Parveen, “Bomber’s father fought against Gaddafi regime with ‘terrorist’ group,” Guardian, May 24, 2017; Jonathan Ungoed-Thomas and Dipesh Gadher, “Salman Abedi: the Manchester killer who was bloodied on the battlefields of Libya and brought evil back home,” Sunday Times, May 28, 2017.

[24] “Otac teroriste iz Mancestera bio kod mudzahedina u BiH,” Glas Srpske, May 31, 2017.

[25] “Manchester Arena suicide bomber Salman Abedi may not have acted alone, police say.”

[26] Bel Trew, “Salman Abedi’s brother bought parts for Manchester bomb,” Times, June 9, 2017; “Manchester bomber’s brother and father arrested in Tripoli,” Libya Herald, May 24, 2017; Laura Smith-Spark and Hala Gorani, “Manchester suicide bomber spoke with brother 15 minutes before attack,” CNN, May 26, 2017.

[27] Josie Ensor, “Manchester bomber’s brother was ‘plotting attack on UN envoy in Libya,’” Telegraph, May 27, 2017.

[28] “Latest Statement from Detective Chief Superintendent Russ Jackson, Greater Manchester Police,” June 11, 2017. The statement is available at https://twitter.com/gmpolice/status/873926655059927041 and https://twitter.com/gmpolice/status/873926742553112578; Lizzie Dearden, “Salman Abedi travelled through Turkey and Germany four days before launching Manchester suicide attack,” Independent, May 25, 2017.

[29] Cruickshank, “London attack ringleader was under active investigation at time of assault.”

[30] SITE Intel Group, “#ISIS releases English-language version of claim for #Manchester bombing,” Twitter, May 23, 2017.

[31] “Terror ringleader ‘tried to hire 7.5 tonne lorry hours before London attack,’” ITV News, June 10, 2017.

[32] “London attack: What happened where in eight minutes of terror,” Sky News, June 5, 2017.

[33] Ralph Blackburn, “London Bridge terrorist Khuram Butt taught primary school children in Ilford,” Barking and Dagenham Post, August 2, 2017.

[34] Richard Kerbaj, “Jihadi Sid told sister: I’ll die for ISIS,” Sunday Times, January 10, 2016.

[35] “The Jihadis Next Door,” Channel 4; Vikram Dodd, Matthew Taylor, Alice Ross, and Jamie Grierson, “London Bridge attackers were regulars at Sunday afternoon pool sessions,” Guardian, June 7, 2017.

[36] Fiorenza Sarzanini, “L’Italia segnalo il killer di Londra fermato a Bologna per terrorismo,” Corriere della Sera, June 6, 2017.

[37] Ibid.

[38] “Update: London Bridge terror attack investigation,” Metropolitan Police press release, June 16, 2017.

[39] Sarah Knapton, Martin Evans, Nicola Harley, Harry Yorke, Ben Farmer, and Robert Mendick, “Khuram Butt, Rachid Redouane and Youssef Zaghba named: Everything we know about the London Bridge terrorists,” Telegraph, June 6, 2017.

[40] Paul Cruickshank and Nic Roberts, “London ringleader Khuram Butt was intensely investigated,” CNN, June 6, 2017.

[41] “Appeal for information on knives used in London Bridge terrorist attack,” Metropolitan Police Press Release, June 9, 2017.

[42] Dodd, Taylor, Ross, and Grierson.

[43] Neil Johnston, Georgie Keate, John Simpson, and Katie Gibbons, “Police were warned two years ago that gym was ‘training jihadists,’” Times, June 9, 2017.

[44] Francesca Gillet, “London attack: ISIS claims responsibility for London Bridge horror which left seven dead, Islamist State media agency confirms,” Evening Standard, June 4, 2017.

[45] Raffaello Pantucci, “Al-Muhajiroun’s European Recruiting Pipeline,” CTC Sentinel 8:8 (2015).

[46] Ruth Sherlock, “British man who joined Islamic State to skip bail ‘killed’ in Syria,” Telegraph, July 5, 2015.

[47] Dipesh Gadher, “Housing benefit funds family’s dash to ISIS,” Sunday Times, March 19, 2017.

[48] Josh Barrie, “The Giant: Second British extremist ‘identified in ISIS video,’” Independent, January 17, 2017.

[49] C vs. HM Treasury, before The Hon Mr Justice Cranston, judgment handed down August 5, 2016.

[50] Rumiyah 10, June 2017.

[51] “PM statement following London terror attack,” Downing Street press release, June 4, 2017.

[52] Damien Gayle and Jamie Grierson, “London attack: Khuram Butt’s family stopped him going to Syria, says cousin,” Guardian, June 8, 2017.

[53] Cruickshank, “London attack ringleader was under active investigation at time of assault.”

[54] Rukmini Callimachi, “Manchester Bomber met with ISIS unit in Libya, Officials say,” New York Times, June 3, 2017.

[55] Saim Saeed, “French interior minister: Salman Abedi had ‘proven’ links with Islamic State,” Politico, May 24, 2017.

[56] Fiona Hamilton and Alexi Mostrous, “Manchester Arena killer Salman Abedi used YouTube to build bomb,” Times, June 24, 2017.

[57] “London Bridge attack latest: Terrorists named as police say they were not under surveillance as they posed ‘low risk,’” Telegraph, June 6, 2017.

[58] Paul Cruickshank, “Orlando shooting follows ISIS call for U.S. Ramadan attacks,” CNN, June 13, 2016.

[59] “UK security services have thwarted five plots since March Westminster attack: source,” Reuters, May 25, 2017.

[60] Darren Campbell, “Two arrested in Alum Rock Road charged with multiple terror offences,” Birmingham Mail, April 5, 2017.

[61] Charlotte Paxton, “Birmingham wife of alleged extremist is charged with terror offenses,” Birmingham Mail, April 25, 2017.

[62] Vikram Dodd, “Teenage girl accused in court of plotting terror attack in UK,” Guardian, July 26, 2017.

[63] Martin Evans, “Westminster terror suspect appears in court charged with bomb making offences,” Telegraph, May 10, 2017.

[64] “Willsden shooting: Police foil ‘active terror plot,’” BBC News, April 28, 2017.

[65] Dipesh Gadher, Robin Henry, Rebecca Myers, and Luke Mintz, “Banned Saudi preacher link to raided ‘house of terror,’” Sunday Times, April 30, 2017.

[66] Danny Boyle, “Mother and daughter in terror plot case ordered to lift veils by magistrate who demands to see their eyes,” Telegraph, May 11, 2017.

[67] Steve Robson and Rachel Burnett, “Three men ‘plotted London terror attack involving car bomb driven through Westminster Bridge inspired by Khalid Masood atrocity,’” Mirror, May 27, 2017.

[68] “Man arrested in east London charged with terror offences,” Metropolitan Police press release, June 20, 2017, and “Terror suspect viewed London Bridge attack material before arrest,” Court News UK, June 21, 2017.

[69] Ben Farmer and James Badcock, “Birmingham counter-terror arrest: Alleged ‘spiritual leader’ of Majorca-based cell is held,” Telegraph, June 28, 2017.

[70] Fernando J. Perez, “Uno de los yihadistas detenidos en Mallorca planeo una ‘matanza’ en Inca,” El Pais, June 30, 2017.

[71] “Erol Incedal: terror accused enjoyed billionaire’s lifestyle secret trial files reveal,” Telegraph, December 11, 2015.

[72] Tom Whitehead, “Erol Incedal jailed for three-and-a-half years over bomb-making manual,” Telegraph, April 1, 2015.

[73] See Raffaello Pantucci, “The Islamic State Threat to Britain: Evidence from Recent Terror Trials,” CTC Sentinel 9:3 (2016).

[74] “23,000 people have been ‘subjects of interest’ as scale of terror threat emerges after Manchester attack,” Telegraph, May 27, 2017; Cruickshank, “London attack ringleader was under active investigation at time of assault;” “AC Mark Rowley discusses the threat of terrorism,” Metropolitan Police, August 11, 2017.

[75] Dominic Casciani, “Manchester attack: The bewildering complexity of a terror inquiry,” BBC News, May 25, 2017; Sean O’Neill, “Spies gather to focus on biggest threats,” Times, June 8, 2017.

[76] Francis Elliott and Sean O’Neill, “May tells MI5 to ‘keep up’ with changing terror threat,” Times, June 5, 2017.

[77] Rowena Mason, “MI5 to review handling of London Bridge attack, says Theresa May,” Guardian, June 6, 2017.

[78] Cruickshank, “London attack ringleader was under active investigation at time of assault;” “AC Mark Rowley discusses the threat of terrorism.”

[79] “PM statement following London terror attack.”

A very short piece for an excellent Central Asian regional newsletter called the Conway Bulletin looking at Pakistan and India possibly joining the SCO.

SCO Expansion Should Not Threaten the West

Expanding the Shanghai Cooperation Organisation (SCO) will strain its functions but could boost trade and relations between Central Asia and South Asia, writes Raffaello Pantucci.

The Shanghai Cooperation Organization (SCO) has achieved remarkably little in its decade plus life.

Established formally in 2001, it grew out of a regional grouping aimed at seeking to define China’s borders with the former Soviet Union. Over time, it has expanded beyond its immediate neighbourhood to include countries as distant at Belarus and Sri Lanka as ‘dialogue partners’.

The current push to welcome both India and Pakistan is likely to further test the organisation’s already limited capability. The practical implications for Central Asia are unlikely to be dramatic, though in the longer term it may help bind Central and South Asia closer together and foster a greater sense of community across the Eurasian heartland.
<!–more–>

In practical terms, the SCO has always been a fairly limited organisation. Seen initially by Russia as a way of controlling Chinese activity in Central Asia, for Beijing it has provided a useful umbrella under which to pursue their stealthy expansion in the region. For Central Asian powers, it provided another format in which to engage their larger neighbours. While the primary thrust of its activity has been in the security space, China has regularly sought to push it in an economic direction.

Yet, at the same time, all of the countries involved have largely pursued their own national interests through other pathways. The most recent demonstration was the establishment by
Beijing of the Quadrilateral Cooperation and Coordination Mechanism (QCCM). Focused on
managing the security threats from Afghanistan, the QCCM in many ways replicates a function which one would have expected the SCO to deliver.

The addition of Pakistan and India to the grouping is unlikely to change this dynamic.

All of the nations involved in the SCO will continue to function through their own bilateral and other multilateral engagements. But it will offer another forum in which India and Pakistan are obliged to interact and will also help further tie Central and South Asia together. These ties have been growing for some time. Kazakhstan has expressed an interest in participating in the China- Pakistan Economic Corridor (CPEC) and Indian President Narendra Modi visited Central Asia last year.

If India and Pakistan join the SCO, it will further help tie them together.

Raffaello Pantucci is director of International Security Studies at the London-based Royal United Service Institute (RUSI).