Integrated Intelligence Targeting
Unite disciplines, connect fragmented signals, and enable precise action
- Difficulty
- Advanced
- Time to result
- ~months to results
- Steps
- 6
- Confidence
- 95%
Integrated Intelligence Targeting replaces specialist stovepipes with a shared targeting operation. The process begins by defining the target and the decision or action that collected intelligence must support. Analysts, field operators, scientists, technologists, and partner organizations then combine their distinct information streams. Linkage analysis connects conversations, people, locations, transactions, and events, revealing relationships that no team could see alone. Technical capabilities help locate or verify the target, while operational personnel test whether the resulting picture is credible in the field. The output is not merely a report: it is validated intelligence delivered to a trained unit capable of acting on it. The mechanism therefore runs from multidisciplinary collection, through relationship mapping and corroboration, to coordinated execution.
Origin
Jack Divine described how the CIA's counter-narcotics center broke down internal stovepipes while pursuing drug networks including Pablo Escobar. Extracted from Masters in Business.
Core principles
- 01Complex targets cannot be understood through isolated specialties
- 02Analysts, operators, and technologists contribute complementary evidence
- 03Linkage analysis turns disconnected signals into an actionable network
- 04Information collection must connect directly to a capable action team
How to run it
- 1
Define the operational target
Specify the person, network, threat, or decision under investigation. State what successful intelligence must allow the organization to do.
Pro tip Frame the target narrowly enough that evidence can confirm or refute it.
Watch out Collecting information without an operational question produces noise rather than intelligence.
- 2
Assemble complementary disciplines
Bring together analysts, field operators, scientists, technologists, and relevant outside partners. Give them a common objective rather than separate departmental outputs.
Pro tip Include the people who will ultimately act on the intelligence.
Watch out Physical co-location alone will not overcome incentives that reward information hoarding.
- 3
Pool the evidence
Combine human reporting, communications, locations, transactions, technical observations, and partner data. Preserve the source and reliability of every contribution.
Pro tip Use a shared evidence model so different disciplines describe entities consistently.
Watch out Do not flatten uncertain claims into established facts.
- 4
Map the links
Use linkage analysis to connect people, conversations, events, assets, and locations. Search for hubs, intermediaries, recurring patterns, and gaps requiring new collection.
Pro tip Treat missing or contradictory links as collection requirements.
Watch out A visible association does not by itself prove control, intent, or guilt.
- 5
Corroborate the target
Validate important conclusions through independent information streams and field checks. Confirm that the identified target is current, specific, and actionable.
Pro tip Require stronger corroboration as the cost of a mistaken action rises.
Watch out Technical precision can create false confidence when the underlying identification is wrong.
- 6
Connect intelligence to action
Deliver the validated picture to a trained, trusted unit with a clear mandate. Maintain feedback so operational results improve the intelligence model.
Pro tip Plan the collection-to-action handoff before the investigation begins.
Watch out Good targeting fails when the acting unit is corrupt, unprepared, or disconnected from the intelligence team.
In the wild
The counter-narcotics mission combined intelligence collection, technical capabilities, interagency cooperation, and specially developed Colombian units. Escobar was eventually located through his cell-phone use, allowing the operational unit to act on the intelligence rather than merely document his network.
→ Integrated collection and execution helped locate a high-profile trafficker who had resisted conventional policing.
A company investigating procurement fraud combines financial analysis, employee interviews, access logs, communications metadata, and supplier records. Linkage analysis reveals that several apparently unrelated vendors share an intermediary and payment destination. Investigators independently verify the relationships before counsel and compliance act.
→ The company identifies the controlling network while avoiding accusations based on one ambiguous data source.
Common mistakes
Preserving specialist stovepipes
Separate teams may each possess a useful fragment while nobody sees the complete network. Shared targeting must replace sequential departmental reporting.
Confusing collection with completion
A large evidence repository is not an operational result. The information must be linked, corroborated, and delivered to someone capable of acting.
Ignoring the action unit
Precise intelligence is wasted or compromised if the receiving unit lacks training, integrity, or a clear mandate.
Is it for you?
Best for
It is best for investigations in which evidence is distributed across disciplines, systems, organizations, or countries.
Not ideal for
It is excessive for simple cases that one specialist can resolve from a single reliable source.
From the transcript
“The beauty of the counter and arcotage program, the counter Terrorism wanted had changed the discipline and that all of these groups had to work…”
“We brought them together and we started to develop new capabilities linkage analysis, which we take for granted now, and that is how you use…”
“So from an agency point of view and working with other agencies, the mission was to identify where he was and then to have a…”
From the episode
Jack Devine Talks About the FBI and CIA