Lexicon

Cutout

An intermediary used to insulate two parties in an intelligence relationship from direct contact

Audio readout of this entry.

A cutout, in tradecraft usage, is an intermediary — a person, a communications channel, or an institutional vehicle — used to insulate two parties in an intelligence relationship from direct contact. The intermediary's principal operational function is to break the chain of association so that compromise of one end of the relationship does not necessarily compromise the other end. A cutout standing between a case officer and an asset absorbs the contact pattern that would otherwise associate the two parties; a cutout standing between an asset and the asset's reporting source insulates the source from the asset's eventual exposure.

The operational forms a cutout can take are wide. A human cutout is a person — sometimes another asset, sometimes a witting third party, sometimes an unwitting one — who carries material between the two parties without being in possession of the operational understanding that would make the carrier a substantive participant in the relationship. A communications cutout is a covert-channel intermediary (a dead drop, a particular network endpoint, an electronic-message anonymisation system) through which material is passed without direct two-party contact. An institutional cutout is a front organisation, a commercial entity, a charity, or a similar structure that ostensibly provides the institutional context for the relationship while masking the underlying intelligence-service connection.

The institutional history of US cutout operations is documented across the Cold War record. The CIA's substantial use of front organisations in the 1947–67 period — the foundations and cultural-organisations programme that the 1967 Ramparts magazine disclosures and the subsequent Katzenbach Report substantially exposed — used institutional cutouts at scale. The Operation Mockingbird programme of CIA relationships with American journalists (substantially documented in the Church Committee record) operated through a combination of direct contact and journalistic-organisation cutouts. The post-2001 institutional record on private-sector intelligence contracting (the relationships between US intelligence agencies and the private contracting firms documented in the Booz Allen Hamilton, CACI, and Leidos profiles) represents an institutional category in which the contractor relationship sometimes operates as a cutout between an intelligence service and an end consumer of services.

The principal operational vulnerability of a cutout is the integrity of the cutout itself. A human cutout who is recruited or coerced by the surveilling service becomes a comprehensive operational vulnerability — the cutout's institutional position at the centre of the relationship gives the surveilling service access to the operational substance of both ends of the relationship. The classical institutional discipline around cutouts — minimising the cutout's substantive operational knowledge, rotating cutouts, compartmenting the operational details that any single cutout carries — is the standard countermeasure to that vulnerability.

See also