Chapters 17-18 Print
LN324-91

CHAPTER XVII

SABOTAGE INVESTIGATION

INTRODUCTION:

To understand the importance of a sabotage investigation you must always
think that the sabotage act is the intent to cause harm, intercept, or
obstruct by the desire to cause harm or destroy or intent to destroy material,
installations, or utilities with regards to the national defense.

GENERAL FACTS:

A. IDENTIFY THE INVESTIGATION REQUIREMENTS:

1. Use various reports from other agencies to identify the
requirements so that the counter intelligence elements could start an
investigation of the sabotage act. These reports could be found in the
following agencies:

a. Military police

b. Criminal Investigation Divisions

c. Local Civil Authorities

d. The superior authority/supervisor in charge of the facility where
the sabotage occurred.

e. Confidential sources that could testify that a particular incident
was indeed a sabotage act.

2. Review the Preliminary Sheet (PS), prepared to be distributed by
the Central Intelligence Office, to identify the investigative requirements:

a. The PS has information collected during an investigation that may:

(1) Require further investigation and development.







152


--------------------------------------------------------------------------------

LN324-91

FIGURE/EXAMPLE #1

PRELIMINARY SHEET

_____________________________________________________________PRELIMINARY
SHEET DATE INVESTIGATION STARTED
_____________________________________________________________
1. SUBJECT/THEME 2. DATE

3. CONTROL OR FILE NUMBER

_____________________________________________________________4. TYPE AND
REASON FOR INVESTIGATION












7. AGENCY REQUESTING 8. AGENCY PREPARING REPORT
_______________________________________________________________________
OFFICE OFFICE
_____________________________________________________________
ADDRESS ADDRESS
_____________________________________________________________
FOR G2 ACTION FOR G2 ACTION (IM)
_____________________________________________________________
AUTHORIZED SIGNATURE AUTHORIZED SIGNATURE
_____________________________________________________________
NAME AND RANK NAME AND RANK
_____________________________________________________________
8. CONVINCING DOCUMENTS CONVINCING DOCUMENTS
_____________________________________________________________

153


--------------------------------------------------------------------------------

LN324-91

4. To condemn a person for an act of sabotage during peace time, you
have to prove that he had tried to cause harm described above. In war time it
is sufficient to prove that the person had knowledge that his act will affect
the "war effort".

5. If more than one person conspires to carry out a sabotage act and
one of them is captured while carrying out the plans of the act, all could be
accused and condemned for the sabotage act.

C. DETERMINE THE TYPE OF SABOTAGE INVESTIGATION THAT WILL TAKE PLACE:

1. PASSIVE SABOTAGE: This type of sabotage involves the passive
resistance of the population and it could be local or at national level. The
passive sabotage is not so organized so that persons or groups are assigned
specific missions: nevertheless, the population reaction is the result of
propaganda, well organized propaganda by a subversive group that is well
organized. In other words, the passive sabotage is when a population locally
or nationally has been convinced by a propaganda group to carry out or to
allow the acts previously described that could be classified as sabotage acts.

2. ACTIVE SABOTAGE: This type of sabotage is characterized by violent
sudden actions with visible results and which commonly turn into conflicts
with military forces. Within this category, we found the following physical
forms of sabotage:
a. Fire sabotage: Is when combustible materials are used to cause
fires and destroy government properties. This is normally considered as an act
of vandalism or a common criminal act.

(1) This act changes from vandalism to sabotage when it is
proven that it took place with the purpose of affecting the national defense,
the war or the war effort.

b. Explosive sabotage:

(1) In this type of sabotage explosives are used to destroy or
neutralize targets that are resistant to fires and to obtain the maximum
quantity of destruction at the minimum time.










154


--------------------------------------------------------------------------------

LN324-91

(2) Targets that are sensitive to explosive sabotage are:
(a) Bridges
(b) Tunnels
(c) Railroads
(d) Ships/boats
(e) Heavy equipment
(f) Industrial machinery

c. Mechanical sabotage:

(l) the mechanical sabotage is easier to maintain since it does
not require instruments or special tools, and normally is directed against
railroads, ships or industrial facilities.

(2) The mechanical sabotage is normally classified within one of
the following categories:

(a) Destroy/break/tear
(b) Inserting materials or abrasive substances such as, sand,
soil, etc., into lubricants and vehicle's fuels.
(c) Omission acts. This consist of not doing something so that a
mechanical equipment stop working. Not lubricating a motor so as to damage it,
not adjusting a mechanical part so that when the motor is turned on it will
stop working.
(d) Substituting real parts for fake parts in apparatus or
vehicles. Ce) Contamination of lubricants or fuels.

d. Biological, chemical and nuclear sabotage:

(l) The sabotage with biological agents is know as "biological
warfare", and is considered as the introduction of living organism and its
toxic products in the environment with the purpose of causing death, impede,
or harm people, animals or crops.

(2) Sabotage using chemical agents is know as "chemical warfare:
and is considered as the introduction of chemicals to the environment to cause
death, impede, or harm people, animals or crops.







155


--------------------------------------------------------------------------------

LN324-91

(3) Sabotage using nuclear weapons, could just with its
destructive capacity, cause serious damage or destruction to property,
materials and persons.

D. PREPARE AN INVESTIGATION PLAN: (See example #2)

1. Initial plan:

a. Determine the purpose of the investigation.
b. Determine the place of the incident.
c. Determine what official documents are required to travel to
the place where the incident took place (passport, visa, etc.)
d. Make arrangements to get these documents.
e. Determine priorities, if any, that exist in regards to the
case being investigated.
f. Determine if any restrictions or special instructions are
necessary.

2. Modify the investigation plan according to how you could obtain
more information.

F. CARRY OUT THE INVESTIGATION:

1. Go to the place where the incident took place.

2. Write down the date and time you arrived to area and the
weather conditions.

3. Visually search the area to try to find wounded persons and:

a. Coordinate medical attention.
b. Write down identity of the wounded, so as to possibly
question them later.
c. Coordinate transportation of wounded persons to medical
facilities.











156


--------------------------------------------------------------------------------

LN324-91

(FIGURE/EXAMPLE #2)
INVESTIGATION PLAN

1. PURPOSE OF THE INVESTIGATION:

2. TYPE OF INVESTIGATION: Limited

3. THE INVESTIGATION WILL TAKE PLACE IN THE FOLLOWING MANNER:

(Discretely)

4. PRIORITY: 30 days after having received the preliminary sheet.

5. SPECIAL INSTRUCTIONS:

a.

b.

6. INFORMATION PROVIDED:

7. INVESTIGATION SEQUENCE:

a. Carry out the review of files.

b. Examine the medical and military files of suspect.

c. Interview the following persons:

(l)

(2)

(3)

d. Carry out the investigation of the neighborhood.

e. Carry out the review of credit bureaus.

NOTE: THE PLAN DESCRIBED ABOVE MUST BE FLEXIBLE AND ITS INTENTION IS ONLY TO
BE USED AS A GUIDE. EVERY CASE MUST BE TREATED INDIVIDUALLY. YOUR PLAN COULD
BE SIMILAR, SHORTER OR LONGER ACCORDING TO WHAT THEIR OWN REQUIREMENTS.








157


--------------------------------------------------------------------------------

LN324-91

4. Coordinate work with other investigation agencies that are present
in the incident area, or if they should arrive later.

5. Identify and search a road for the medical personnel to use when
arriving to the place where there are wounded and/or dead persons.

6. Do not allow the corps to be covered since this could destroy
evidence.

7. Protect the area of the incident using persons to maintain the
curious passersby away from the area and to avoid that witnesses, suspects and
victims destroy evidence.

8. Protect all that could possibly be destroyed by fire, rain or any
other thing, such as footprints, etc.

9. Find the possible witnesses in the area.

10. Ask and write down the identity of the witnesses.

11. Separate the possible witnesses and take them outside the incident
area.

12. Carry out questioning/preliminary interviews of witnesses to
determine:

a. How much knowledge they have of the incident.
b. Movements that the witnesses have done in the incident area.
c. Any tool that the witnesses or other persons have possibly
touched.

12. Write down all the pertinent facts:

a. Identify the persons involved or that were involved in the area.
b. Initial impressions or observations.
c. Take photos of the area in all angles.
d. Take photos of the persons in the vicinity of the area.

13. Search the incident area and adjacent areas to collect all evidence
using the search patterns more useful in the area.

a. Pay particular attention to fragile traces of evidence that could
be destroyed if not collected immediately.






158


--------------------------------------------------------------------------------

LN324-91

b. Carefully examine all objects or areas where there may be latent
fingerprints and make sure that a follow up is done of this fingerprints.

c. Take photos or prepare imprints that could have value as evidence.
(Example: shoe prints, or boot prints on the ground could indicate the amount
of persons involved in the incident).

d. Treat stains or accumulation of liquids as evidence and write down
its place and take photos of them.

e. Treat any tool as evidence until this could be found to the
contrary.

14. Collect, mark for identification and process the evidence.

F. Transfer the evidence to the criminal laboratories and proper
agencies to evaluate such evidence.

G. Carry out the review of files.

H. Carry out the interviews with "Witnesses" that are necessary:

1. To obtain more information about the incident.

2. To develop new leads and/or sources.

I. Prepare Preliminary Reports, if necessary.

NOTE: THE PRELIMINARY REPORTS ARE PREPARED WHEN THEY ARE REQUIRED BY THE SOP
OR IF AN ORDER IS RECEIVED FROM THE HIGH COMMAND.

J. Contact your confidential sources of information.

K. Carry out an analysis of the information in the case to identify
the suspect. Even though an investigation is basically a collection of
information, the analysis of such information is a secondary function. This
analysis is the review and comparison of information obtained to develop a
hypothesis and come up with conclusions that could be used in identifying the
suspects and determining the circumstances of the incident and future actions.



NOTE: THERE IS NO FIXED PROCEDURE IN THE ANALYSIS OF INFORMATION OF A CASE TO

159


--------------------------------------------------------------------------------

LN324-91

ARRIVE AT A SOLUTION. ONE METHOD COULD WORK AS WELL AS THE NEXT. NEVERTHELESS,
ANY OF THE METHODS USED MUST HAVE THE BASIC FUNCTIONS OF: (REVIEW, COMPARE,
AND MAKE A HYPOTHESIS).

1. Review all the information in the case:

a. Arrange in an orderly fashion all the information.
b. Examine the information in detail to identify the pertinent facts.

(1) Determine the dependability of the information.
(2) Determine the truth of the information

2. Compare the information known:

a. Compare the available information with the legal aspects of
sabotage.

(l) Identify facts/evidence that support or prove the legal
elements of sabotage.

(2) Identify vulnerabilities in the information that could
require further investigation.

b. Compare the information obtained from witnesses with such obtained
by other witnesses and sources.

c. Identify possible suspects through the information comparison.

(l) Identify such persons that have connection with the incident.
(2) Identify information that supports or proves the
"OPPORTUNITY" that possible suspects may have. (Ask yourself: Is it physically
possible that the suspect could have committed the act of sabotage?)
(3) Identify information that supports or prove "MOTIVATION" by
each suspect.
(4) Identify information that proves "INTENT" by part of the
suspects.
(5) Identify all circumstantial or association information
related with each suspect.
(6) Evaluate all information and evidence in regards to the test
elements required to support the sabotage accusation.





160


--------------------------------------------------------------------------------

LN324-91

3. Show one or more hypotheses. The most possible hypotheses are
selected to solve a problem according to the information and available
evidence.

a. Apply deductive and inductive reasoning to show your hypothesis.

(l) Inductive reasoning involves moving from the specific to the
general. Develop a generalization of the information being evaluated that
could explain the relationship between events under investigation.

(2) Deductive reasoning involves moving from the general to the
specific. Start with a general theory and apply it to the particular incident
to determine if the truth of the incident is part of the theory.

NOTE: WHEN USING DEDUCTIVE AND INDUCTIVE REASONING, THE MOVEMENT FROM ONE
POINT TO ANOTHER MUST BE DONE LOGICALLY.

b. During the study of information to show a hypothesis, the concept
of intuition must be considered. Intuition is an internal and sudden solution
towards a problem. Intuition frequently clarifies a problem when there is no
progress through logic.

c. Submit the hypothesis to probability tests, additional information
of other witnesses, and other data already known.

d. Eliminate the possibilities through the systematic comparison of
the hypothesis with the following considerations:

(1) Opportunity
(2) Motivation
(3) Observed activities
(4) Corroboration of the suspects' bribes

e. Select the best hypothesis based in the consistency of data
compared and the high degree of probability.

f. Test the hypothesis objectively.

g. Modify and/or refute the hypothesis if information to the contrary
is found.

4. Determine the requirement/direction of the future investigation
activities.


161


--------------------------------------------------------------------------------

LN324-91

a. Identify what could support or prove the hypothesis selected.

b. Get the approval of the Control Office to initiate actions that
have been identified.

L. Carry out the follow up, if necessary.

M. Carry out the personnel interviews if necessary.

N. Carry out a CI interrogation of suspects, when there is
suspicion in regards to the identity of a person.

0. Prepare and distribute the required reports.

P. You may consider that the investigation was successful when:

1. All the information and material related to the case has been
discovered and developed.

2. The physical evidence available was handled.

3. All the witnesses were interviewed.

4. The suspect was properly interrogated.

5. The case has been reported in a clear, exact and intelligible
manner.

















162


--------------------------------------------------------------------------------

LN324-91

CHAPTER XVIII

PREPARING AGENT'S REPORTS

INTRODUCTION:

After the CI agent finishes an investigation or part of the
investigation, the following step is to write down all the information in a
report, which is known as the Agent's Report. The preparation of this report
requires a great effort and skill from the agent. To know how to prepare a
good agent's report is one of the requisites and duties of any counter
intelligence agent. In this chapter we will discuss all the areas and rules
that govern the proper preparation of an agent's report.

GENERAL FACTS:

NOTE: For effects of this chapter we will use as example an agent's report,
see the format that appears in EXAMPLE #1.

A. COMPLETE BLOCK #1: (NAME OF SUBJECT OR TITLE OF INCIDENT)

NOTE: Typewrite all the information in this block as close as possible to the
left margin arid below block #1.

1. THE TITLE BLOCK in this report is always the same that
appears in the preliminary sheet (refer to previous examples), or of any
pertinent investigative report, with only two exceptions:

a. Change the title block to include alias or any other essential
information developed during the investigation.

b. Change the title block to change any error in the preliminary
sheet. All changes and corrections will be written down in Section "Agent's
Notes" of the report.

2. When there is no preliminary sheet, or any other investigative
reports in regards to this case, prepare the title block in the following
manner:





163


--------------------------------------------------------------------------------

LN324-91

(2) Write down the answer to the question "Where" in the second line.

(3) Write down the answer to the question "When" in the third line.

B. Write down the date in which the report was prepared in block #2
(day, month, year).

C. Write the control number in block #3 (CONTROL NUMBER OR FILE
NUMBER)

1. If you have a preliminary sheet the name that appears in
block #3 of the sheet could be used in this report as well.

D. Complete block #4 (Report of Findings): (SEE FIGURE/EXAMPLE #1)

1. Use this block to write down the information obtained during
the investigation. This is the most important part of the Agent's Report and
must:

a. Show in detail all the facts that the source brought. Write down
as facts as facts and opinions as opinions.

b. It must be pertinent and directly related to the investigation.

c. Be written clearly, orderly and clearly understood to avoid wrong
interpretations of facts.

d. Be impartial, and include favorable and unfavorable information
developed during the investigation.

e. Be concise and to the point. Describe exactly the activities and
attitudes of the SUBJECT. Avoid unclear phrases.

f. Be complete.

2. Normally, write the report:

(1) In narrative style
(2) Using third person (grammatically)
(3) Using the simple past.






165


--------------------------------------------------------------------------------

LN324-91

3. PRIVACY PHRASES: (SEE FIGURE/EXAMPLE #2)

a. According to Figure #2 select and write down the most appropriate
privacy phrase.

b. Write down the phrase in the third line where block #4 starts.

c. Leave 15 spaces where the left margin of the report.

d. This phrase is written entirely in capital letters.

4. DESIGNATION OF PHRASES: (SEE FIGURE EXAMPLE #3)

a. Select the appropriate phrase on Figure #3 and write down in
parenthesis according to the description in Figure #1.

b. It is written two spaces under the Privacy Phrase.

5. Start the Introduction paragraph which has the information
about the SOURCE, including identity, employment and address.

a. This paragraph starts in the same line of the Designation Phase.

b. In the right margin of the report, allow a blank area of at least
five spaces to write down the word (LEAD) if necessary. (A LEAD is any
information collected during the investigation that requires further
development. It could be a name, address, or whereabouts of a person or
organization.

c. Write down the specific information in the Introduction Paragraph
according to the type of report. (SEE FIGURE/EXAMPLE #4, TO SEE WHAT
INFORMATION COULD BE USED ACCORDING TO THE REPORT TYPE AND IN WHAT ORDER)

d. Write the last name of the SUBJECT in capital letters in the
report's text always.










166


--------------------------------------------------------------------------------

LN324-91

FIGURE/EXAMPLE #1
______________________________________________________________________
AGENT REPORT FROM
______________________________________________________________________
1. SUBJECT NAME OR TITLE OF INCIDENT2. DATE
RAMIREZ. Juan O. 15 May 1988
TCC: TORRES, Antonio O. 3. CON. NUMBER
CPT, 000-00-000
FLDN: 9 March 1956, San Salvador, ES
______________________________________________________________________
4. REPORT OF FINDINGS:

WRITE HERE THE PRIVACY PHRASE USING CAPITAL LETTERS.

(PHRASE DESIGNATION) Here starts the introduction paragraph under the
privacy phrase and in the same line of the designation phase. Allow a space in
the right margin to write the word (LEAD) when one comes up during the
investigation. (LEAD)

If there are more than one paragraph allow two spaces between the
paragraphs and prepare the first the same as the second.

(RUMORS IDENTIFICATION) Rumor information is written down in a separate
paragraph and is indicated with the phrase RUMORS INFORMATION in parenthesis.

AGENT'S NOTES: Here you write down all the notes or commentaries that
the agent has in reference to the source or the case. The agent's notes are
used only once in the report.







______________________________________________________________________
5. NAME AND ORGANIZATION OF AGENT 6. AGENT'S SIGNATURE
______________________________________________________________________


167


--------------------------------------------------------------------------------

LN324-91

FIGURE/EXAMPLE #2

PRIVACY PHRASES

THE SOURCE DID NOT HAVE AN OBJECTION THE INFORMATION CONTAINED
IDENTIFYING HIS IDENTITY TO THE IN THIS REPORT IS OBTAINED
SUBJECT. FROM CIVIL FILES.

THE SOURCE RECEIVED A PROMISE OF THE INFORMATION CONTAINED IN
CONFIDENTIALITY AS A CONDITION THIS REPORT IS FINANCIAL
OF HIS COOPERATION WITH OUR INFORMATION AND WILL NOT BE
INVESTIGATION. REVEALED TO ANY OTHER AGENCY.

THE INFORMATION CONTAINED IN
THIS REPORT WAS OBTAINED IN
OFFICIAL FILES FROM THE GOVERNMENT.

THE INFORMATION CONTAINED IN THIS
REPORT WAS OBTAINED FROM PUBLIC
FILES.

THE INFORMATION CONTAINED IN THIS
REPORT WAS OBTAINED FROM MILITARY
MEDICAL FILES.

THE INFORMATION CONTAINED IN THIS
REPORT WAS OBTAINED IN MILITARY
FILES FROM THE PERSONNEL OFFICE.















168


--------------------------------------------------------------------------------

LN324-91

FIGURE/EXAMPLE #3

DESIGNATION PHRASES

(SUSPECT'S INTERROGATION) (EMPLOYMENT SUPERVISOR)

(FILE REVIEW OF LOCAL AGENCIES) (CO-WORKER)

(MILITARY SERVICE) (EMPLOYMENT FILES)

(MEDICAL FILES) (EDUCATION FILES)

(MILITARY FILES) (EDUCATION INTERVIEW)

(CIVILIAN PERSONNEL FILES) (DEVELOPMENT/EMPLOYMENT SOURCE)

(CITIZENSHIP) (DEVELOPMENT/RESIDENCE SOURCE)

(BIRTH) (DEVELOPMENT/EDUCATION SOURCE)

(CREDIT REFERENCE/WRITTEN DOWN) (MILITARY COMRADE)

(CREDIT REFERENCE/DEVELOPMENT) (MILITARY FILES REVIEW)

(PERSONNEL REFERENCE/WRITTEN DOWN) (MILITARY SUPERVISOR)

(PERSONAL REFERENCE/DEVELOPED) (COMMANDER)

(NEIGHBORHOOD CHECK) (FIRST SERGEANT)

(SUBJECT'S INTERVIEW) (POLYGRAPH TEST)

















169


--------------------------------------------------------------------------------

LN324-91

e. Use the complete name of the SUBJECT in the first sentence of the
introduction paragraph.

6. Complete the rest of the report, writing down all the information
about the SUBJECT obtained during the investigation. The exact report format
will be determined by the type of report. Below, we list various formats for
the different types of reports:

a. INVESTIGATION REPORT OF PERSONNEL SECURITY:

1) Enter the association paragraph which has a complete and concise
description between the Source and the SUBJECT.

(a) This paragraph must be answered with the questions in figure #5 as
a minimum, which will establish the nature, degree and length of its
association. (SEE FIGURE/EXAMPLE #5)
_______________

(b) Write down the last name of the SUBJECT the first time it comes up
in the association paragraph. After mentioning for the first time, it could be
referred to it with the word SUBJECT.

2) Between the history paragraph which contains information of the
SUBJECT'S history, such as:

(a) Date and birth place
(b) Family situation/marriage
(c) Military service
(d) Residences
(e) Education
(f) Employment
(g) Associates

NOTE: Information areas that are not covered during the interview could be
used to include the first sentence like: (The source could not provide more
information about the education, residence, employment of the SUBJECT).

NOTE: The history information must be written down chronologically, that is in
the time frame they occurred.




170


--------------------------------------------------------------------------------

LN324-91

3) Between the LIDMC paragraph, which contains favorable and
disfavorable information in regards to loyalty, integrity, discretion, moral
and character of the SUBJECT. (This is known as LIDMC) Areas that enter or are
discussed in the LIDMC paragraph are:

Sexual moral Non-prescribed medications
Ethics Financial stability
Honesty Improper gains
Integrity Police agencies
Maturity Government overthrow
Discretion Deny civil rights
Character Other organizations
Mental stability Foreign travels
Emotional stability Friends/foreign friends
Betting Foreign business connections
Alcoholic beverages Loyalty
Drugs

NOTE: Answer all the questions on the themes mentioned above even though the
SUBJECT gives you a negative answer such as (I DON'T KNOW). The negative
answers are included in the report in the last sentence, ("THE SOURCE did not
provide information about the SUBJECT'S foreign travels").

4) Between the RECOMMENDATION paragraph such as the last paragraph of
the personal security investigation report.

(a) This paragraph contains the recommendation from the source in
regards to if he recommends that a position of trust and responsibility is
given to the SUBJECT.

(b) Use the SUBJECT'S complete name and not the word SUBJECT in the
first phrase of the recommendation paragraph.

(c) A source could be give one of four recommendations:

(1) He could decline to recommend him: "The Source refused to give a
recommendation in regards to Arturo G. RIVAS, for a job in a position of trust
and responsibility since he has only known hin for (8) weeks.






171


--------------------------------------------------------------------------------

LN324-91

(2) Could give a favorable recommendation: "The Source recommended
Arturo G. Rivas for a position of trust and responsibility with the national
government".

(3) Could give a non-favorable recommendation: "The Source did not
recommend Arturo G. RIVAS for a position of trust and responsibility with the
national government due to his dishonesty and lack of integrity. The Source
made a sworn declaration and was willing to appear before a hearing or trial
in regards to the SUBJECT."

(4) Could give a qualified recommendation: "The Source recommended
that Arturo G. RIVAS is considered favorably for a position of trust and
responsibility with the national government, under the condition that he
(RIVAS) control his drinking habits. The Source made a sworn declaration and
was willing to appear before a hearing or trial in regards to the SUBJECT.

b. Files review:

1) The format will depend upon the type of file being reviewed:

(a) The information obtained from the normal files will be presented
in a tabulated manner (SEE FIGURE/EXAMPLE #6).

(b) The information was also presented in a narrative manner. (SEE
FIGURE/EXAMPLE #6)

(c) A combination of narrative and tabulation could be used. (SEE
FIGURE #6).

c. Incident, complaints, or limited investigations:

(1) Write down one or more information paragraphs that describe the
clear and complete story.












172


--------------------------------------------------------------------------------

LN324-91

(2) Present all information in chronological order.

(3) Answer the following questions to develop all the information:

(a) Who
(b) What
(c) Where
(d) When
(e) Why
(f) How

d. When a report is long and there is not enough room in the first
page:

(1) Allow at least half inch of space in the lower part of the report
and write down (continued) between parentheses on the lower part below the
report. (If there is need to include classified information in this report,
allow at least one inch of space.

(2) The report could be continued using the same format on the first
page with the same information in blocks 1-3 and from 5-6.

7. Write down the Rumors' Information if applicable: (SEE
FIGURE/EXAMPLE #1):
________________

a. Use this paragraph when developing rumors or information such as
that.
b. When the original source of the information could not be
determined.
c. When leads that could verify or deny this information could not be
identified.

NOTE: Put the paragraph (Rumors' Information) in the Investigation of Personal
Security reports between the LIDMC paragraph and the Association paragraph.

8. Enter the agent's notes paragraph:

a. This paragraph helps officials that review the report to evaluate
the information, and call the pertinent discrepancies to attention.

(1) Discuss the reason why a lead was not developed or why a
particular lead could not be developed.




173


--------------------------------------------------------------------------------

LN324-91

(2) Write down facts of your (Agent) personal knowledge that could
help to clarify the incident.

(3) Write down the pertinent information from the Source and do not
discuss the rest of the report.

(4) From your personal opinion of the SUBJECT, or the information
acquired from him, if it is necessary to clarify some doubts. It must be
specified that this is only the Agent's opinion.

(5) Discuss any existing discrepancies in the Personal History of the
SUBJECT.

(6) Discuss the condition in which the files reviewed were found, if
this affects its validity or not.

(7) Explain and discuss any work or phrase that is difficult to
understand normally.

(8) Call attention to conflicts or discrepancies in the different
stories that come up from the investigation in regards to the same
information. Write down your personal opinion about which of the stories you
personally think has more validity.

(9) Indicate if any of the sources have the same last name or are
related. (Only if it applies in the report).

b. Do not use the Agent's notes to:

(1) Provide much information that is not pertinent to the case.

(2) Point out the minor discrepancies in the Personal History of the
SUBJECT.

(4) Describe the difficulty you had to find a source.

(5) Indicate recommendations.

E. COMPLETE BLOCK #5: (NAME AND ADDRESS OF THE ORGANIZATION OF THE
SPECIAL AGENT) (SEE FIGURE/EXAMPLE #1)




174


--------------------------------------------------------------------------------

LN324-91

F. EDIT/REVIEW YOUR REPORT ACCORDING TO THE FOLLOWING RULES:

1. Structure of the sentences and their contents:

a. The sentences must be:
1) clear
2) concise
3) simple
4) impartial

b. The sentences must not contain:
1) Local idioms
2) Vulgar words (Unless you are quoting the SUBJECT'S exact
words).

2. The correct use of the work SUBJECT, and the name of the person
who is interviewing:

a. Always write the name of the person interviewed in capital
letters.

b. The word "SUBJECT" in capital letters could substituted the name
of the interviewee, except:

1) In the first sentence of the introduction and recommendation
paragraphs.

2) The first time the interviewee is mentioned in the association
paragraph.

c. Write in capital letters all the pronouns that are used to refer
to the SUBJECT. EXAMPLE: (HE, SHE).

3. The appropriate use of the word "SOURCE":

a. Write down the name of the source normally when it its mentioned
in the report, without using capital letters.

b. You may substitute the word "Source" with only the "5" in capital
letters when mentioning the source in the report.






175


--------------------------------------------------------------------------------

LN324-91

c. If you wish to use the pronoun to refer to the Source, write the
first letter in capital letters, "He", "She".

4. The appropriate use of the names of other persons mentioned in the
report that are not the "SUBJECT or the Source

a. The first time another person is mentioned in the report, you must
completely identify him, including the complete name, employment address,
residential address or any manner in which we could contact him.

b. After identifying the other persons for the first time, you could
refer to them in the rest of the report using only their last name, unless
when two persons have the same last name, then you must identify them with
their complete name.

c. If only the last name of the person is known, write down FNU which
means, FIRST NAME UNKNOWN, EXAMPLE (FNU Gonzalez).

d. If you only know the first name of the person, write down LU,
which means LAST NAME UNKNOWN, EXAMPLE (Raul LU).

e. Never use FNU, LU, together. If you do not know the name of the
person, indicate it in the following manner.

"The SUBJECT was married with a woman, unknown name...

f. If a source is not sure as to how to spell a name, write down the
word "Phonetics" in parenthesis after the name. This means that the name was
spelled by sound only.

g. Indicate the maiden names of the women in the following manner.
(Maria Gomez, N: Gonzales) This means that the maiden name of Maria is
Gonzales.

h. Do not identify the confidential sources by their proper names.
Use the numbers or code names only. Do not use phrases in the report that
could identify, or help find a confidential source in your reports.







176


--------------------------------------------------------------------------------

LN324-91

5. CAPITALIZATION: When you are preparing the Agent's report you must
follow the following rules in regards to writing words and capital letters.
Capitalize:

a. The first word of each sentence.

b. The first letter of the word "Source".

c. The first letter of proper names, places, countries, races,
languages, months, and days of the week.

d. All letters of the SUBJECT'S last name.

e. All the words in the PRIVACY PHRASE.

f. The word SUBJECT.

g. All the PHRASES OF DESIGNATION.

h. Al the classifications of security (CONFIDENTIAL, SECRET, ULTRA-
SECRET).

i. Pronouns when they are substituted by the SUBJECT'S name (HE,
SHE).

j. Names of all the political parties and organizations (Liberal
Party).

k. All the titles before the names (Dr., Att., Md.)

1. Titles of rank, office, or profession if accompanied by names,
(GONZALES, Raul, JCS, Joint General Staff).

m. Names of regions, locations, or geographic structures, (East,
West, North).

n. The names of organizations formally structured and established.
(Joint General Staff, Department of National Investigations, National Police,
etc.)

o. The names of languages, (English, Spanish, French, etc.).


177


--------------------------------------------------------------------------------

LN324-91

p. The names of schools, universities, (Santa Maria School,
University of El Salvador, etc.)

q. University degrees, (Master in Medicine, Law, etc.)

6. DO NOT CAPITALIZE THE FOLLOWING:

a. Names of studies/courses (mathematics, history, biology, chemistry)
except languages (English, Spanish, French, etc.).

b. Descriptive terms to show addresses, (over, below, at left, at
right).

7. The use quotation marks " " "

a. Do not use quotation marks to show common nicknames, unless it is
used with the full name of the person. (Herman "Babe" Ruth).

b. Do not use quotation marks with names of newspapers and magazines,
underline them: (El Diario).

8. Use of commas:

a. Use commas between cities and country, (San Salvador, El
Salvador).

b. Use a comma to separate absolute phrases, (Juan Jimenez, the
richest man in the world, was arrested yesterday).

9. Underline:

a. Underline words in another language, followed by the translation
to Spanish in parenthesis, (He worked at the Post Office (Correo).

b. Underline any information developed during the interview that is
different than that which appears in the SUBJECT/TITLE block.








178


--------------------------------------------------------------------------------

LN324-91

9. The use of short titles:

a. To use short titles means to take the first letter in each name of
an organization or theme and to write them in parenthesis, later, the short
title could be used in the report:

EXAMPLE: "The Source works in the Joint General Staff of the Armed
Forces (JGSAF), of El Salvador (ES).

b. As soon as the short title is established it could be used without
the parenthesis. Only use the parenthesis when mentioning the short title for
the prist time. EXAMPLE: The Source said that the SUBJECT also worked at
JGSAF, ES.

c. The short titles are used for schools, units and military
installations.

d. Never use short titles for person's names.

e. Do not use short titles if the phrase will only be used once in
the report.

10. Abbreviations:

a. Do not use many abbreviations in your reports.

b. If you use abbreviations, spell out the complete word the first
time mentioned in the report, and later use only the abbreviation.

c. Do not abbreviate military ranks if they are mentioned alone
without a name, (The man was a captain). You may abbreviate when it is
accomplished by a name, (The CPT Ramirez is a good soldier).

d. Never abbreviate the months in the year and use the complete year
in your reports, (the 15 May 1988).

11. The use of numbers and numerals:

a. When using numbers from one to nine, spell them out, (one, two,
three, four,...nine).
b. From nine on you may use numerals (10, 11, 12, 13, etc.).
c. Use numerals to describe:

(1) Sums of money. The amount does not matter always use numerals.


179


--------------------------------------------------------------------------------

LN324-91

(2) Numbers in streets in addresses, (50th Street).

(3) Apartment and room numbers.

(4) Temperature degrees, prices, percentages, etc.

d. Do not use numerals:

(1) When starting a sentence, spell out the number, (Four terrorists
were captured yesterday).

e. Use the following rules for the military reports:

(1) Use the military form of writing the time (According to your SOP).

(2) The units, companies, squadrons, regiments, etc., could be
abbreviated and are not placed in numerical order when mentioned in the
report. (He belongs to the 1st Squadron, 2nd Company, Cavalry Regiment).

G. Complete Block #6 (SIGNATURE):

1. Sign your name the same way in which it appears written in block #
5.

2. All reports require an original signature in each page, do not use
carbon paper or stamps when signing the report.

H. Mark all the pages of the report with its appropriate
classification. (The classification will be selected according to the
requirements of your SOP).

I. Send the completed report to the Control Office.













180


--------------------------------------------------------------------------------

LN324-91

FIGURE/EXAMPLE #4
EXAMPLES OF INFORMATION FOR THE INTRODUCTION PARAGRAPH
_______________________________________________________________________
1. SOURCE'S INTERVIEW (INVESTIGATION OF HISTORY):

(DESIGNATION PHASE): Interview date; identity of interviewed person
(name, occupation, residence, rank, serial number, position); and the place
where the interview took place. The reason for the interview, and the
association and period of knowledge between the SUBJECT and the interviewer.

2. SOURCE'S INTERVIEW (INVESTIGATION OF THE INCIDENT):

Interview's date; complete identity of the source; interview place, and
if necessary, the reason for the interview.

3. FOLLOW-UPS:

Date, length, follow-up type and any information with respect to persons
under follow-up (observation); place, and the identity of the persons that are
handling the follow-up. If the situation requires the protection of the
identity of the persons (without counting the agents), a code reference must
be used.

4. SUBJECT INTERVIEWS:

(DESIGNATION OF PHASE); date of the interview, identity of the SUBJECT
(complete name, rank, serial number/identity number, position, employment
place and residence address and employment place); sworn declaration of truth;
interview place; purpose for the interview; notice of legal rights; notice of
need to have a written sworn declaration by the SUBJECT.

5. REVIEW OF FILES:

(DESIGNATION PHASE); review date; finding the files, office or any
place, name and position of the person who brought access to the files,
complete identity of the file (title, page, or any other information that
helps in the identification of the file).






181


--------------------------------------------------------------------------------

LN324-91

CONTINUATION OF FIGURE/EXAMPLE #4

6. SEARCHINGS, SCRUTINIES, SEIZURES:

Date of activity, identification of persons and/or units carrying out
such activity; and the authority to carry out this authority. In scrutinies
and seizures you need the name of the official that serves as witness.
(Normally this person is the SUBJECT'S commander).

7. INVESTIGATIVE INTENTS:

Date of intent, identity of the persons whom they tried to interviewed;
identity of persons to whom they talked; reason for which the person was not
able to be interviewed; and any other possible lead. The explanation must show
that everything possible was done to find the source or the person but it was
not possible.

8. CONFIDENTIAL SOURCES:

Sources that have codes for identification purposes will not be
identified, neither phrases nor information that could give leads as far as
identity or location will be included in the report. The confidential sources
will only be mentioned by its code, or designated symbol. To help evaluate the
information, the Agent indicates through a phrase the security level the
source has. EXAMPLE:


"The Source, who has brought confidential information in the past...

"The Source, who has brought information that has been corroborated
partly by other sources

"The Source, whose security is unknown, but who has known the SUBJECT
during the last five years....












182


--------------------------------------------------------------------------------

LN324-91

FIGURE/EXAMPLE #5
ASSOCIATION PARAGRAPH
1. The first time they met (were introduced) and the circumstances of
such meeting.

2. The last time they met and the circumstances.

3. Type of contact (professional or social, or both).

4. Contact frequency.

5. Closest association period, if any.

6. Moments in which they did not have contact for 31 days or more.

7. Communication between them during the period in which they did not
have contact.

8. Communication or correspondence from the date of last contact.























183


--------------------------------------------------------------------------------

LN324-91

FIGURE/EXAMPLE #6
______________________________________________________________________
AGENT REPORT FROM
______________________________________________________________________
1. SUBJECT'S NAME OR TITLE OF INCIDENT 2. DATE

RAMIREZ, Juan O. 15 May 1988
TCC: TORRES, Antonio O. 3. CONT. NUMBER
CPT, 000-000-000
9 MARCH 1956, San Salvador, ES
______________________________________________________________________
4. REPORT OF FINDINGS:

WRITE HERE THE PRIVACY PHRASE USING CAPITAL LETTERS.

(MEDICAL FILES) El (DATE), Juan O. RAMIREZ'S military medical files
at the Military Hospital, San Salvador, El Salvador were reviewed by (rank and
Agent's name), Special Agent, Joint General Staff, substantially and revealed
the following information:

NAME:

RANK:

SERIAL NUMBER:

UNIT:

DATE OF LAST MEDICAL CHECKUP:

The SUBJECT'S file did not have information that could indicate the ilegal use
of drugs or marihuana; abuse of prescription medicines or any other medicines;
the chronic use of alcoholic beverages, or mental or nervous disorders. No
physical disorder or medicines indicated in the file give any abnormal
indications.


______________________________________________________________________
5. NAME AND ORGANIZATION OF AGENT 6. SIGNATURE OF AGENT


184


--------------------------------------------------------------------------------

LN324-91

REPORT FROM
AGENT
_____________________________________________________________________
1. NAME OF SUBJECT OR TITLE OF INCIDENT2. DATE
___________________________
3. CONT. NUMBER
_____________________________________________________________________
4. REPORT OF FINDINGS:












______________________________________________________________________
5. AGENT'S NAME AND ORGANIZATION 6. AGENT'S SIGNATURE


185