Professional Documents
Culture Documents
Foreknowledge 1 E-Magazine For Intellige PDF
Foreknowledge 1 E-Magazine For Intellige PDF
Issue One
February 2012
Toolbox:
www.foreknowledge.info
ISSN 2225-5613
Strategic indicators
The effective Analysts’ judgement
analyst of probability
Richards Heuer:
Induna of
Upcoming intelligence analysis
conferences
Intelligence manager
responsibilities
Contents Editor:
From the editor 3 Dalene Duvenage
I
ntelligence analysts are busy knowledge work- compendiums for those interested in the “what and
ers. We work in national security agencies, de- how” of intelligence analysis that is practical, non-
fence departments, law enforcement units, academic and easy to read. You might find reading
compliance offices, investigation task teams, business lists, but usually they are dated, focusing on the en-
strategy work groups. We analyse political trends, tire field of intelligence studies with only a cursory
climate change, money laundering, identity theft, glance at intelligence analysis. Or they are primarily
leaders’ personalities, international investment, rebel focused on American national security intelligence,
group movements, terrorism, competitors’ acquisition ignoring the richness of intelligence from other parts
strategies, economic sector opportunities and threats, of the world. Sometimes one would come across
tax evasion, diamond smuggling, illegal migration misplaced elitism where contributions from law en-
patterns, corruption and border security to name a forcement, compliance and business are rejected as
few. not being “real” intelligence despite their use of the
Our shared job description: making sense of informa- same methodologies and tools - but just in a different
tion in a manner that will assist decision makers to context with different intelligence priorities.
take action. We evaluate possible deceiving reports, In the last few years we have seen an explosion of
sift through the OSINT tsunami, think creatively new books, tools, research papers, conferences, blogs,
about new and familiar problems, liaise with counter- discussion groups and organisations dedicated to the
parts and produce actionable intelligence against tight improvement of intelligence analysis across domains.
deadlines. But, they are scattered throughout the Internet, on
library shelves, hidden in the tacit knowledge and
It is ironic that we conduct environmental scanning
expertise of thousands analysts.
on terrorism, but do not apply the same methodology
to the intelligence analysis profession. We rarely have UNTIL NOW.
the time to contemplate new research on topics of in- Foreknowledge aims to be the “hub” of all things and
telligence interest or read new books and publica- events related to intelligence analysis. Its purpose is
tions. We definitely do not have the luxury of to provide an accessible space where intelligence an-
philosophising about the future of their profession. Or alysts who are serious about their job can learn from
attend interesting conferences, debate the usefulness experts, reflect on new developments, share experi-
of new tools or be aware of what intelligence analysts ences and raise the profession to new heights.
in other parts of the world are doing to counter the In essence, this will contribute to a shared under-
same threats. standing and vocabulary of intelligence analysis
If we are serious about professionalising intelli- across domains and continents in an easy-going, in-
gence analysis, we should become mindful about formal and non-academic manner. We discuss differ-
what we do, how we do it, create an institutional ent tools and techniques in the Analyst Toolbox
memory of best practices and implement recommen- section and offer some interesting nice-to-knows and
dations aimed at improving intelligence analysis. need-to-shares that will broaden your understanding
Keeping up to date with developments in our pro- of intelligence analysis concepts and practices. ●
fession is difficult. There are limited resources or
Dalene Duvenage
February 2012 • Foreknowledge 3
people
Dalene chats with
Richards Heuer
Induna of intelligence analysis
Induna: Zulu: meaning advisor, great
leader, ambassador, headman, or
commander of group of warriors.
H
ow do you define a man who has been instrumental in the pro-
fessionalisation of intelligence analysis, not only in his own
agency and country, but around the world? Who, through a
single book written in 1999, forced intelligence analysts to reflect on
what they do and how they do it? His writings ushered in a new era of
research, debate and writing in our profession.
Pioneer, doyen, vanguard? No. Induna says it all. In the African cul-
ture, elders are revered as wise leaders and advisors. Now 84, he stays
intellectually engaged and interested in the intelligence field. For this
first edition of Foreknowledge, I posed some questions to Dick on his
career and how he sees intelligence analysis in the future. We salute
him!
Psychology of intelligence
analysis Richards Heuer
I
ntelligence analysis is funda- told how to do it. Analysts learn
mentally a mental process, but by doing.
There are still thousands of understanding this process is This book aims to help intelli-
intelligence analysts and their hindered by the lack of conscious gence analysts achieve a higher
managers who have not yet awareness of the workings of our level of performance. It shows
read the seminal Psychology of own minds. When we speak of how people make judgments
improving intelligence analysis, based on incomplete and ambigu-
Intelligence Analysis by
we are usually referring to the ous information, and it offers
Richards Heuer. quality of writing, types of analyt- simple tools and concepts for im-
We will carry excerpts from ical products, relations between proving analytical skills.
intelligence analysts and intelli-
the book’s chapters in each People construct their own
gence consumers, or organization
edition of Foreknowledge, version of "reality" on the basis of
of the analytical process. Little at-
information provided by the
starting with chapter 1. tention is devoted to improving
senses, but this sensory input is
how analysts think.
You can also download the en- mediated by complex mental
Thinking analytically is a skill processes that determine which
tire book here.
like carpentry or driving a car. It information is attended to, how it
can be taught, it can be learned, is organized, and the meaning
and it can improve with practice. attributed to it.
But like many other skills, such as
What people perceive, how
riding a bike, it is not learned by
readily they perceive it, and how
sitting in a classroom and being
Richard Marrs
Strategic indicators
Dalene Duvenage
environmental scanning. It also
A
good tool to ascertain might impact on our forecasting
the future developments categorise “clues” and makes it and influence our probability
of an intelligence prob- easier to conceptualise and narrow judgements. It frames our think-
lem or issue, is strategic indica- down variables that might influ- ing so that we are not distracted
tors, attributes or signals. ence our analysis. by overwhelming data.
Indicator development is a phase During the planning phase, in- Indicators also make the warn-
in a complex process which can dicators are developed to assist in ing process more rigorous and
be found in the study fields of in- the collection plan. The analyst alert the analyst of events that
dications and warning (I & W) goes through an iteration process might otherwise have not been
and futures thinking amongst oth- whereby the issue at hand is brain- noticed. A so-called black swan,
ers. stormed thoroughly, hypotheses wild card or strategic surprise
Indicators are a pre-estab- developed and “clues” or indica- could be observed earlier than
lished set of observable phenome- tors are then identified that may what would have been the case if
na that are periodically reviewed support or refute these hypotheses analysts did not go through the
to help track events, spot emerg- - “If this is true, what will hap- indicator development process.
ing trends and warn of unantici- pen?” Detailed questions are then However, as with all thinking
pated change.1 asked about each indicator and and analytical tools, analysts have
sources tasked. to caution against myopic think-
They are useful throughout
the intelligence process as it forc- During the analysis phase, in- ing and slavishly following only
es the analyst constantly to con- dicators helps analysts to look ob- the indicators and become blind
duct situational awareness and jectively at detailed factors that to any event that does not fit the
indicator list.
Strategic indicators are used in
many sectors, especially in strate-
Scenario & gic business planning, resilience
ment ind engineering, risk management,
s
es conflict prevention and early
ica
s
as
tor
warning contexts.
Indicator
m
developmen
vi ta
En sca l
nning crime group threat assessment
framework developed by the
RCMP in 1999. ●
In g
d ic in 1 Pherson Associates (2008) Handbook of analyt-
ator m o n it o r Adapted from CICS document ical tools and techniques
by D Duvenage
Measures of on-
Measures of societal Measures of
going domestic and
safety and security militarisation
international conflict
• Number of external and internal • Perceptions of criminality in society • Military expenditure as a percentage
conflicts fought: 2004-2009 • Number of refugees and displaced of GDP
• Estimated number of deaths from people as a percentage of the • Number of armed services personnel
organised conflict (external) population per 100,000 people
• Number of deaths from organised • Political instability • Volume of transfers (imports) of
conflict (internal) • Political Terror Scale major conventional weapons per
• Level of organised conflict (internal) • Potential for terrorist acts 100,000 people
• Relations with neighbouring • Number of homicides per 100,000 • Volume of transfers (exports) of
countries people major conventional weapons per
100,000 people
• Level of violent crime
• Budgetary support for UN
• Likelihood of violent demonstrations
peacekeeping missions: percentage
• Number of jailed population per of outstanding payments versus
100,000 people annual assessment to the budget of
• Number of internal security officers the current peacekeeping missions
and police per 100,000 people • Aggregate number of heavy weapons
per 100,000 people
• Ease of access to small arms a and
light weapons
• Military capability/sophistication
In t h e
y … .
nav
U.S. Navy photo by Photographer's Mate Airman Ricardo J. Reyes
US Naval Intelligence (ONI) Counter-Piracy Branch Chief, Brian Green in a recent interview:
“The analysts here are very talented, very dedicated, and highly motivated in what they do.
They very much have a passion for their work. At the forefront of their minds is indications and
warnings. I think that’s at the heart of intelligence analysis and it definitely applies to piracy and
maritime crime. We do intelligence. We try to pinpoint threats, threats to the United States,
threats to U.S. citizens, long term, short term, immediate, what have you, and that’s just good old
fashioned intelligence work.”
Michael Schrage
Phillip Fellman
“This is all just scientific window dressing. There is plenty of
smoke, but we are never shown what is behind the mirrors. This
isn’t science, it’s the art of advocacy, precisely what the original
National Intelligence Estimates and estimative process was de-
signed to eliminate. In this context, the product displayed here is
exactly the opposite of a scientific estimate. The scale of judg-
ments from Remote to Almost Certainly is simply a modification
Although Sherman of the 5 point Likert scale, a simple ordinal measure of typically
Kent's efforts to quan- anecdotal probability developed to aid research in the field of
psychology in 1932.“
tify what were essen-
tially qualitative
judgments did not Description Probability range
prevail, the essay's Will Greater than 90%
general theme remains The UK Ministry Likely/probably Between 60% and 90%
important today. of Defence
May/possibly Between 10% and 60%
Probability scale
Unlikely/Improbable Less than 10%
A
ttempting to fight a very dy-
Africa’s political, economic Within the organised crime network we
namic structure such as an or- see that there is one denominator that
and criminal threats ganised crime network with binds the organised group together,
*** intelligence tools and concepts that are and that is the importance of the social
not suitable to a modern crime-combat- network for survival. This denomina-
Due diligence and ing environment is a recipe for failure. tor is also found in the concepts of
background reports on Yet across the globe we see that private ubuntu and the Target-Centric Ap-
and public agencies combating organ- proach to Intelligence.
Persons and Companies of
ised crime teach and make use of an in- Ubuntu speaks about the individual and
Interest throughout Africa telligence approach that is predictable, his relationship within a group or a net-
compartmentalised and weakened by
*** work. The individual does not exist in
its exclusive structure and nature. isolation but, because of the group and
Setting up of intelligence This “traditional approach” or basic in- his fellow human beings, enjoys growth
units telligence cycle, is often implemented as and prosperity. Within this network
a business process (which it is not) and the actions of the individual has direct
*** is adapted with minor changes to suit influence on the success of the group.
the requirements of contemporary The concept of ubuntu is not based on
Intelligence information
crime-combating environments. In technology, systems and cycles but fo-
management and systems worst case scenarios, the approach or cuses on the positive interaction be-
cycle itself is protected by legislation tween individuals to achieve common
***
and, unknowingly to the intelligence goals and objectives.
Intelligence training practitioner and investigating officer, The Target–Centric Approach is by na-
curriculum development integrally weakens the intelligence and ture a network approach and a social
investigative effort. process. Intelligence is generated by the
*** The cycle itself is anti-social and per- team rather than the analyst working
son-centric and the intelligence pro- on his own. It is collaborative in nature
Customised OSINT reports
duced is often the result of individuals and information is optimised to such an
working in silos with the end product extent that each member of the team
www.4knowledge.co.za seldom a collective effort. This cycle can utilise the intelligence to his own
does not respond positively to change advantage and to the greater benefit of
and, because information is slow to be the network.
shared, the usability of intelligence Together, ubuntu and the Target Centric
products reduces significantly over Approach offers an alternative that
short periods of time. guarantees the same benefits to which
When we think about organised crime, organised crime networks are accus-
we generally do not think about a per- tomed. Both these approaches are more
son functioning on his own, serving his compatible with modern policing con-
own individual interest. Instead, we cepts such as sector policing and com-
think about a network of people that munity policing than the traditional
executes their activities in a structured intelligence cycle. In a very dynamic
and well-thought-out fashion. Al- way they adjust rapidly to a changing
though compartmentalised in certain environment and optimise the social
aspects, the network is aware that it network as a platform to assimilate,
cannot function in isolation but is de- produce the best intelligence product
pendent on its members for growth and possible.
sustainability. This article is based on the readings and
The organised crime network cannot interpretation of Clark, Robert M. (2008). Intelli-
achieve the greater benefit when its gence analysis: A target-centric approach. Wash-
members operate as single entities. ington DC: CQ Press.●
In this, the first in a series of four articles, Janet takes us through the findings of research by her and
Mark Kebbell on what makes intelligence analysts effective.
Having worked views and the Critical Incident seen as a technical specialist (who
as an analyst and Technique (see Flanagan, 1954). can create maps, do crime stats)
then as a manager What I found was all three to a growing understanding of
of analysts I often methods gave me similar results the analyst as part of a support
wondered what but each method added a little structure for decision makers.
made some ana- that the other two methods didn’t For example an analyst who us-
lysts effective and others ...well reveal. The study showed that es technical skills to answer a
just not! I pondered it for several there were three main ways sub- question posed by management
years and finally had the opportu- ject mater experts identified an will only have to engage limited
nity while working with Mark effective analyst; thinking skills where as in the
Kebbell at The Centre of Excel- role of supporting a decision-
Ÿ The analyst would have
lence in Policing and Security to maker the analyst needs to be a
skills and abilities that could
really nut this out. problem-solver who generates
contribute to the develop-
I wanted to establish the skills ment and dissemination of recommendations for action and
and abilities required by an ana- an analytical product, would need extensive thinking
lyst to be recognised as effective. ability. Subject matter experts
Ÿ The analyst would have an
I set about looking for 30 subject said these thinking skills included
attitude that included being
matter experts (in our speak that lateral thinking, critical thinking
productive, seeking out
is analysts, managers of analysts and the ability to think ‘outside
work, having a high level
who have substantial experience the box’.
commitment and pride and
and decision-makers who use an-
having a ‘can do’ attitude,
alytical products) who I could talk
to.
Ÿ Some physical and personal Analysts
Being the combination of an ac-
attributes, like gender and are becoming
ademic nerd and an analyst
meant I wasn’t happy just asking
age were included that sub-
ject matter experts thought
characterised effectiveness.
decision-makers’ aides
them in one way what made an
In subsequent issues I will talk For me, all this has implications
analyst effective, I had to ask in
more specifically about the find- for recruitment, and what train-
three ways.
ings in each of these three areas ing or development opportunities
The first method was using the
and the meaning it has for us as we need to be offering our exist-
Repertory Grid Technique (for
analysts and managers. ing analysts to move them from
those who are interested I recom-
Overall, the main findings are a technician to a decision-makers
mend reading Kelly, 1955) and
change from the analyst being aid. ●
then I used semi structured inter-
I
n a recent study by the De- products of satisfactory Ÿ Providing opportunities for
fence Research and Develop- quality. professional development
ment Canada on “Issues in Ÿ Ensuring analytic rigour for their analysts.
Intelligence Production - summa- through monitoring analytic Ÿ Being good listeners in at-
ry of interviews with Canadian processes and challenging tending to analysts’ con-
managers of intelligence ana- analysts in their assump- cerns.
lysts” the following responsibili- tions, process, and judg- Ÿ Shielding their group from
ties were cited: ments. This challenge various external pressures as
Ÿ Generating the production function can be difficult for much as possible to allow
outlook for their group; this both analysts and their man- them to concentrate on do-
includes defining the scope agers. It requires deep ing analysis. ●
and framing the questions knowledge of analytic proc-
for analytic products. esses, solid area knowledge,
Ÿ Establishing and maintain- and a great deal of tact from
ing an interface with clients, managers.
Food for thought
that is, the consumers of in- Ÿ Mentoring and developing
Why should an analyst want to
telligence products. This is (new) intelligence analysts.
work in the intelligence com-
especially important for de- Ÿ Evaluating the quality of an- munity when managers cannot
fining priorities for assess- alytic products and analysts’ promise analysts electronic
ments and seeking feedback performance.
connectivity, state-of-the-art
on final products.
Ÿ Being involved in the ana- collaborative technologies, or
Ÿ Actively participating in the lysts’ promotion process. ready access to the Internet
intelligence community
Ÿ Fulfilling financial manage- and outside experts?
through chairing interde-
ment duties and managing John Gannon
partmental meetings.
budgets. Analyzing intelligence: Origins,
Ÿ Ensuring production and
Ÿ Scheduling and allocating obstacles and innovations (2008)
timely delivery of analytic
resources.
I
n their excellent book Managing Intelligence - the Art of Influence, Neil Quarmby and Lisa Jane Young offer
a conceptual model of the role and function of an intelligence manager, irrespective of the specific setting in
which he or she operates. Success relies on careful attention to each of three inter-related areas of focus, often
simultaneously. They
conclude that these are:
Ÿ Upward organi-
sational focus to
ensure that the
intelligence func-
tion is under-
stood, utilised
and valued by
executives and
other senior staff
as an efficient
means of achiev-
ing organisational
goals;
Ÿ Downward focus to direct reports and other junior staff to ensure that long term organisational goals are
understood and used to prioritise intelligence work in the short and medium terms and to ensure that
staff are sufficiently equipped and motivated to provide quality intelligence and
Ÿ Focus on self, with respect to understanding personal strengths and weaknesses as a manager and practi-
tioner.
Government Analyst II (GA) Ÿ obtaining and analyzing com- blogs, list-serves and articles re-
Mary Lattig has been employed munication and financial garding economic crime and try to
by the US Florida Department of records stay abreast of fraud trends. I en-
Law Enforcement (FDLE) for 22 Ÿ preparation of charts and re- joy the puzzle of identifying the
years. Mary is assigned to the ports documenting these ef- steps in a fraud or scam and fol-
FDLE Lakeland Field Office forts. lowing the money.
where she supports a squad of six What are the greatest challenges
I also assist in the preparation and
(6) special agents and a special you face as an intelligence ana-
service of search warrants and with
agent supervisor tasked with the lyst and how do you overcome
subject interviews. I take part in
investigation of multi jurisdiction- them?
case briefings and may testify in
al felony crimes including eco-
court during the prosecution phase. One of my greatest challenges is
nomic crimes (fraud), violent
FDLE analysts are also tasked with time management. This challenge
crimes, drug crimes, and public
providing analytical support for has increased as resources availa-
integrity investigations. Mary is a
other law enforcement agencies ble to analysts have increased –
certified law enforcement trainer
that either don’t have analytic per- there is never enough time to
for FDLE and serves as a volun-
sonnel or need specialized assist- check every resource, but without
teer trainer for the International
ance. doing so an analyst wonders
Association of Law Enforcement
Who are your clients and what “what have I missed?” I overcome
Intelligence Analysts (IALEIA).
type of products do you provide to that challenge by adhering to what
She also volunteers as a mentor
them? I consider the most important step
for a regional analyst mentoring
in the intelligence cycle – plan-
program. FDLE analysts document their
ning. If an analyst understands the
work in investigative reports and
primary focus (goals) of an investi-
these reports are part of the investi-
What is the role and function of gation and plans accordingly, it
gative case file. Other products in-
intelligence analysts in your reduces the time spent gathering
clude analytical charts (association,
agency? needed information.
flow, network, etc.), timelines, sus-
Within our agency analyst duties pect composites, financial analysis, What can intelligence analysts do
can vary depending on assigned spreadsheets, communications fre- to promote our profession?
program area, but as a field office quency lists and charts and maps. Always be willing to lend a hand
analyst working in the investiga- These products are used both dur- to another analyst. If you have a
tions program area, my primary ing an investigation by agents and strong network of analyst contacts,
role is to provide analytical sup- during the prosecution phase by you will be seen as someone who
port for criminal investigations prosecutors. can always find an answer, solve a
and intelligence gathering. My problem, and get the job done. I
What is your specialist area and
routine duties include: would also encourage all analysts
what do you do to stay informed
Ÿ the identification of target and abreast of new developments? to join and participate in profes-
subjects sional organizations such as
Although I support investigations
Ÿ preparation of biographical IALEIA, and participate in local
involving drugs, violent crime, and
and background files and regional analytical working
public integrity, my personal area
Ÿ identification of associates and groups. ●
of interest is economic crime. I seek
assets out advanced training, newsletters,
May
2012
International Association for Intelligence
Education (IAFIE) 8th Annual Conference
21- 24 May 2012 : Washington DC, US
Intelligence Education: Theory and Practice
July
2012
The Australian Institute of Professional
Intelligence Officers (AIPIO) Annual
conference
Intelligence 2012: Anticipating Risk & Influencing Action
24th - 26th July 2012: Sydney, Australia
OUR READERS
▪ National security and intelligence agencies
▪ Defence intelligence agencies
Senior management, decision-makers, s
▪ Crime intelligence agencies and police force
intelligence specialists and analysts, igenc e
researchers and academia, intelligence ▪ Local and state law enforcement intell
operational specialists and related units
professionals ▪ Government investigation & counter
corruption agencies
▪ Tax and other compliance government
agencies
▪ Private security and risk intelligence
US, Canada, UK, France, Germany,
Sweden, the Netherlands, Switzerland, companies
Greece, Italy, Romania, Australia, New ▪ Private think tanks
ational
Zealand, Japan, Mexico, Brazil, ▪ Universities and colleges with an intern
Argentina, South Africa, Botswana, rity progr amm es
relations / intelligence / secu
Namibia, Uganda, Kenya, Nigeria,
Ethiopia, UAE, Israel, Afghanistan etc
▪ Former intelligence officers PRODUCTS
& SERVICES
● IT tools, software and apps
● Books, journals and specialist
publications
● Education programs at universities
and colleges; online and distance
learning courses
● Training and development
● Professional & specialist services
i.e. research, translation, consult-
CHANNELS ing etc
● Career openings and job
Dedicated www.foreknowledge.info website announcements
Endorsing professional organisation member ●
websites & communication
All intelligence related LinkedIn groups
Subscriber database of 1000 contacts in
agencies and units throughout the world
Excellent rates with international exposure!
Twitter
Contact
editor@foreknowledge.info
Retired senior CIA Directorate of Intelligence (DI) officer and the author
of a number of articles on intelligence and intelligence analysis in recent
article in the CIA’s Studies in Intelligence.