National Counterterrorism Center
Based on Wikipedia: National Counterterrorism Center
The National Counterterrorism Center—known colloquially as NCTC—isn't just another federal agency. It's something altogether more ambitious: a fusion cell where analysts from the CIA, the FBI, the Department of Defense, and the Department of Homeland Security sit side by side, sharing not just information but their deepest suspicions. Located at Liberty Crossing in McLean, Virginia—a site chosen for its proximity to Langley, the headquarters of the CIA—this center represents the most ambitious attempt to merge intelligence on terror threats since the creation of the Central Intelligence Agency itself.
The idea of such a center was born from the deadliest terrorist attack in world history. After the September 11 attacks, the 9/11 Commission completed its investigation and proposed creating an organization that could merge intelligence on terror threats. The commission's recommendation was straightforward: America needed a single point where all the pieces of the terrorism puzzle could come together.
President George W. Bush announced plans to create such a center in his January 2003 State of the Union address—a speech that marked the beginning of what would become a wholesale transformation of American counterterrorism. On May 1, 2003, Executive Order 13354 formally established the Terrorist Threat Integration Center, or TTIC. The name was functional but unwieldy, reflecting the clunky nature of early efforts to fuse different agencies' databases.
By 2004, the center had been renamed and placed under the authority of the director of national intelligence by the Intelligence Reform and Terrorism Prevention Act. It was a structural change that mattered enormously: putting NCTC under the Office of the Director of National Intelligence meant it could access streams of intelligence from across the government.
The Christmas 2009 airline bombing attempt—though unsuccessful—was a turning point in more ways than one. After Abdulmutallah's failed attempt on Northwest Airlines Flight 253, the NCTC was tasked with creating a process to exhaustively prioritize terrorism threat threads; identify follow-up action by intelligence, law enforcement, and homeland security; and enhance what would become known as the Terrorist Identities Datamart Environment database.
The post-2009 expansion of the NCTC's authorities was dramatic. In 2012, United States Attorney General Eric Holder granted the center the authority to collect, store, and analyze extensive data collections on U.S. citizens compiled from governmental and non-governmental sources—data that could be used for suspicious behavior detection through pattern analysis and shared with foreign states.
The effort has drawn controversy. Critics have likened it to a pre-crime effort—a system of mass surveillance reminiscent of the Information Awareness Office, with its proposed mass surveillance architecture. The center's defenders argue it's simply organizing information; its detitioners see something far more sinister: a system that could track Americans' movements and behaviors based on patterns rather than actual crimes.
In August 2019, The Daily Beast reported that the NCTC had begun to work on counterintelligence to combat domestic terrorism—a new mandate that would expand its reach further into monitoring potential threats within American borders.
How the Center Works
What does the NCTC actually do? The center analyzes terrorism intelligence including potential domestic threat intelligence; monitors communications internationally and domestically for potential threats; generates actionable information to potentially prevent criminal acts domestically. It stores terrorism information; supports U.S. counterterrorism activities using information technology; and plans counter-terrorism activities as directed by the President of the United States, the National Security Council, and the Homeland Security Council.
It provides terrorism information to the intelligence community; makes detailed lists of terrorists, terrorist groups, and worldwide terrorist incidents; supports the response to terrorist incidents in the United States and worldwide; and writes assessments and briefings for policymakers. The center has access to various databases, including those from the NSA and the CIA, and is in charge of what is known as the Terrorist Identitions Datamart Environment (TIDE) database.
The NCTC also operates the publicly accessible Worldwide Incidents Tracking System database—a rare public-facing component of an otherwise secretive operation. But most of its work happens in the shadows.
The Database That Knows Everyone
The center's Terrorist Identities Datamart Environment (TIDE) database contains more than 1.2 million identities of people who are known to be terrorists, suspected of it, or linked to people who are. This is not a list of criminals: it's something far stranger—a database of potential threats, maintained by analysts who believe they can predict future attacks through pattern analysis.
The number is staggering: 1.2 million people whose names, addresses, travel histories, communication patterns, and associations have been logged in American government files. The database tracks not just confirmed terrorists but also their associates, their families, and everyone connected to them.
A Controversial Expansion
In 2012, the center's authority expanded dramatically. Attorney General Eric Holder granted it the power to collect and store extensive data collections on U.S. citizens, compiled from governmental and non-governmental sources—data that could be used for suspicious behavior detection through pattern analysis and shared with foreign states.
The move was controversial. Critics pointed out that the center's pre-crime effort resembled something closer to science fiction than traditional law enforcement: a system designed not to catch criminals but to identify potential future criminals before they commit any wrongdoing.
In August 2019, The Daily Beast reported that the NCTC had begun working on counterintelligence to combat domestic terrorism. The move marked an expansion into one of the most sensitive areas of counterterrorism: monitoring threats within the United States itself.
The Center's Role in Counterterrorism
The center provides terrorism information to the intelligence community; makes detailed lists of terrorists, terrorist groups, and worldwide terrorist incidents; supports the response to terrorist incidents in the United States and worldwide; writes assessments and briefings for policymakers. It has access to various databases, including those from the NSA and the CIA, and is in charge of what is known as the Terrorist Identities Datamart Environment (TIDE) database.
The center operates the publicly accessible Worldwide Incidents Tracking System database—one of the few windows into this secretive operation—but most of its work happens in the shadows. It monitors communications internationally and domestically for potential threats; generates actionable information to potentially prevent criminal acts domestically. And it plans counter-terrorism activities as directed by the President, the National Security Council, and the Homeland Security Council.
A Center of Many Names
The center has undergone several name changes since its inception: from Terrorist Threat Integration Center (TTIC) in 2003 to National Counterterrorism Center in 2004. The names reflect the evolving nature of its mission and the expanding scope of its authority.
Throughout, it has maintained a singular focus: consolidating all terrorism-related intelligence under one roof, creating what former Director of National Intelligence James Cllinger called "a single point of responsibility" for tracking threats.
But as with most things in counterterrorism, secrecy remains paramount. The center doesn't publicly discuss its methods or the precise nature of its database. It operates from Liberty Crossing in McLean, Virginia—near CIA headquarters—where analysts and agents work together to identify potential threats.