emsenn

September 11: Intelligence Case

5 min read

The September 11, 2001 attacks — in which al-Qaeda operatives hijacked four commercial aircraft, crashing two into the World Trade Center, one into the Pentagon, and one (after passenger resistance) into a field in Pennsylvania, killing 2,977 people — constituted the most consequential intelligence failure since Pearl Harbor and produced the most significant reorganization of the intelligence community since 1947.

Available intelligence

The intelligence community possessed multiple pieces of information related to the plot:

  • The August 2001 PDB article — “Bin Ladin Determined to Strike in US” — warned of al-Qaeda’s intent to conduct attacks inside the United States, including the possible hijacking of aircraft. The article was strategic warning without operational specificity.
  • The Phoenix memo (July 2001) — an FBI Phoenix field office agent reported that an unusual number of individuals with possible ties to extremist organizations were enrolled in U.S. flight training schools. The memo recommended headquarters investigation; it was not acted upon.
  • The Moussaoui arrest (August 2001) — Zacarias Moussaoui was arrested by the FBI’s Minneapolis field office after a flight school reported his suspicious behavior. FBI Minneapolis sought a warrant to search Moussaoui’s laptop and belongings; FBI headquarters declined to pursue the warrant.
  • CIA tracking of hijackers — the CIA had identified Nawaf al-Hazmi and Khalid al-Mihdhar as al-Qaeda operatives and tracked them to a meeting in Malaysia in January 2000. The CIA knew they had U.S. visas but did not inform the FBI or place them on a watchlist until August 2001, weeks before the attack.
  • Millennium Plot intelligence (1999–2000) — the disrupted plot to attack Los Angeles International Airport demonstrated al-Qaeda’s operational interest in U.S. targets.

The failure

The 9/11 Commission identified the failure as one of “imagination” — the inability to conceive of the specific attack scenario:

Stovepiping between agencies. The CIA (foreign intelligence) and FBI (domestic law enforcement) did not share information effectively. The “wall” between intelligence and law enforcement — erected partly by legal interpretation of FISA and partly by institutional culture — prevented the integration of CIA’s knowledge of al-Hazmi and al-Mihdhar with FBI’s domestic investigative capabilities. Had the CIA’s foreign intelligence been combined with the FBI’s domestic awareness, the two known al-Qaeda operatives might have been located within the United States.

Organizational fragmentation. No single organization was responsible for the counterterrorism mission that spanned the foreign-domestic divide. The CIA tracked al-Qaeda abroad; the FBI investigated terrorism domestically; neither was organized to track a plot that originated abroad and was executed domestically. The gap between “abroad” and “domestic” — a jurisdictional boundary — became an operational seam the attackers traversed.

Collection bias. The intelligence community’s collection and analytical resources were disproportionately oriented toward state targets (Russia, China, regional adversaries). Non-state actors — particularly transnational terrorist networks — received less analytical attention than their threat warranted. The community’s organizational categories (states with militaries that SIGINT and IMINT could observe) did not fit the adversary (a networked non-state actor using commercial infrastructure).

Failure of imagination. The Commission’s term for the inability to conceive that al-Qaeda would use commercial aircraft as guided missiles against American buildings. The specific attack scenario — though not without precedent (the 1994 Air France hijacking plot to crash into the Eiffel Tower, the 1995 Bojinka plot) — was not in the scenario set the community considered. This is the legibility problem at the conceptual level: the intelligence system could not produce warning of an attack it could not conceive.

Institutional consequences

The 9/11 failure produced the most significant intelligence reform since 1947:

  • Intelligence Reform and Terrorism Prevention Act (2004) — created the DNI, NCTC, and information-sharing mandates
  • The DNI — separated IC leadership from CIA directorship
  • NCTC — created a dedicated center for integrating counterterrorism intelligence across agencies
  • Information sharing — mandated the shift from “need to know” to “responsibility to share”
  • FBI reorganization — created the National Security Branch, reorienting the FBI toward intelligence
  • DHS — created the Department of Homeland Security to integrate domestic security functions

Analytical significance

9/11 combines elements of Pearl Harbor (signal-to-noise problem, organizational fragmentation) with distinctive features of the post-Cold War threat environment:

The transnational non-state adversary. Al-Qaeda did not conform to the intelligence system’s state-centric organizational categories. It had no territory to surveil, no military to observe, no diplomatic communications to intercept. The intelligence system’s collection capabilities were designed for a different kind of adversary.

The domestic-foreign seam. The legal and organizational boundary between foreign intelligence and domestic law enforcement — essential for protecting civil liberties — created an operational gap that a transnational threat could exploit. The post-9/11 reforms attempted to close this gap while preserving the underlying constitutional protections.

The limits of reform. Each reform addressed the last failure: the 2004 reforms addressed the stovepiping and coordination failures of 9/11, as the 1947 reforms addressed the fragmentation failures of Pearl Harbor. Whether the reforms prepared the system for the next type of failure — a question that the 2026 Iran war may be answering — is the discipline’s permanent open question.

Graph View

Backlinks