Should be a relative quick and easy search to walk up the chain of command and see where it broke.
That’s my reaction, as well. Unless there is an employee named Deep State, there’s a name attached to this action/inaction. The President should demand, and receive accountability, on several levels.
In this case it would appear even more direct, indeed preferable, to "walk down" the chain of command:
Sen Paul: "I was sitting in the White House when President Trump said I want his security clearance taken, and I saw the order given. I saw the chief of staff was there, not the current chief of staff, the previous chief of staff."