“The third group is focused on counterintelligence and security. I think the reason for that is fairly evident, in terms of vulnerabilities of the department and the harm that can come to it by failing to detect when we have, in fact, been harmed.”