Intelligence – Key To Making Decisions

Collection – Finding Information

There is a lot of information on the web, from specialist suppliers as well as from internal sources and depending on the task, the most appropriate and capable would have to be approached and accessed. But it is not a one stop shop with information having to be checked, sources re-tasked as necessary or new sources brought in to verify or delve deeper into information already received. And, as with all information sources their reliability would have to be proven.

Collation – Recording It

There may well be a stream of information coming in that has to be collated into a logical order. It can be a time consuming process, whether its working in analogue with a card index system or digitally with an online database. However, it is at this point that initial connections are made, trends recognised and maybe the need, as always, to re-task the original source or bring in new sources to answer what could be new questions.

Analysis – Making Sense of it All

Analysis is more than pattern recognition, it is being able to evaluate the information that has been gathered and this does require a depth of subject knowledge. It is analysis which gives the answer to the original requirements in the Direction phase. Threat Assessments are not a prediction, but a well thought out and reasoned judgement as to what might happen.

Dissemination – Getting the Message Out

Whether it’s through written reports or verbal briefings, analysts have to present their assessment in a structured and meaningful way. Analysts should be more than competent with their communication skills and should be open to question and challenge on what is being presented. Even with the most expert of analyst’s what is being produced is an opinion, it is a qualitative not a quantitative statement, with reports having to be read in that way.

A Continuous Cycle – It’s Never-Ending

While some Threat Assessments might be a one off, the general business of understanding the security threat is an ongoing process. There is always a need to be aware of what is happening, tasking sources and evaluating how any changes might affect an organisation. It has, in a sense, to be baked into the Security Risk Management and Resilience process.

Intelligence – In Action

Aidan Anderson of RedLeaf Consultancy, has used the Intelligence Cycle or ongoing Threat Assessments in his work as Security Consultant and previously as a Bank Security Manager. Two examples are given below, the first in daily use as part of a Security Risk Management programme and the second on bank robberies.