Logo
The Intel Analyst Academy
IAA
Categories
Sign InJoin Early Access
Request a new topic

The Intel Analyst Academy

Professional education for intelligence analysts at all levels. Mastering the art of collection, analysis, and dissemination.

Learning Paths

  • Foundations
  • Strategic Intelligence
  • Tactical Intelligence
  • OSINT

Resources

  • Academy Brief
  • Analyst Tools
  • Coming soon
  • FAQs
  • Downloads
  • Community Forum
  • About Us

Secure Comms

  • Contact Us
  • Waitlist
  • Request a new topic
  • Feedback
  • Privacy Policy
  • Terms of Service
  • Refunds

Sister Networks

PeelBoss

Management platform — ops, teams and delivery

FreelancePro

Contracts, proposals & pricing for freelancers

AI for SMB

AI tools for small business operations

ABC of Cyber

Cybersecurity training without the scare tactics

Money Mastery

Calculators and guides for budgeting, debt, saving and investing

© 2026 The Intel Analyst Academy. All rights reserved.

Part of a network of learning platforms

Part of the Empire HQ network. Payments are charged by TTPN Pty Ltd (statement may show as TTPN or TTPN* plus the product name).

THE INTEL ANALYST ACADEMY

Professional Intelligence Training

Printable Lesson

Long Term Threats

← Back to lesson

Long Term Threats

The Intel Analyst Academy · Lesson Notes

Most of what crosses an analyst's desk is an event. A vote, a layoff, a blackout, a protest, a quarterly miss. Strategic intelligence is only partly about those. The long-range question is which slow forces made the event likely, which of those forces are still moving, and which opportunities sit in the same picture if you can stand to look at them. This lesson is how to identify long-term threats and opportunities without turning the work into either science fiction or a recycled news brief.

> A strategic threat rarely kicks the door in. It sends a calendar hold for sometime next decade and hopes you decline.

The PESTLE lesson on this path is the scanning frame. Forecasting is how you turn drivers into scenarios. This lesson sits between them: how you decide what is a driver, what is noise, and what a planner should actually watch.

Events, Conditions, and Drivers

Sort what you are looking at before you assess it.

  • Event. A discrete thing that happened. A sanctions package, a mine flood, a central-bank decision. Events are evidence. They are not, by themselves, the strategic subject.
  • Condition. A state of affairs that persists. A demographic bulge, a water deficit, a single-source supply chain, a legal regime that has not been updated since the fax machine. Conditions shape what events can do.
  • Driver. A force that is changing a condition in a direction. Aging, automation, desertification, a rival's capital-investment program, a shift in alliance habits. Drivers are what you forecast. Events are how you notice you might be wrong.

A headline that "tensions rose" is an event. The driver might be a ten-year shift in who insures the shipping lane, or a slow change in who the electorate trusts with a security ministry. If your long-term assessment is a list of recent headlines, you have written a briefing note and titled it strategy.

Ask, of every candidate driver: if this force stopped tomorrow, would the five-year story change? If the answer is no, it is colour. Keep it for the annex, if at all.

Horizon Scanning Without the Theatre

Horizon scanning is a routine, not a vision quest. Done properly it is boring in the way maintenance is boring, which is why shops skip it and then act surprised.

A workable monthly scan has four moves.

  • Collect outside your lane. Pull a thin set of sources you do not already agree with: a statistical office, a trade journal, a local paper in translation, a regulator's docket, a firm's capital-expenditure note. If every source would have published the same paragraph, you have one source.
  • Log candidates, do not assess them yet. A scanning log is a parking lot. Date, source, what changed, which condition it might touch. Assessment comes after you have more than one sighting.
  • Cluster. Group items that are the same force wearing different clothes. Three stories about insurance premia, naval presence, and port labour are sometimes one driver: the cost and reliability of a route.
  • Promote or kill. A candidate becomes a driver only if you can say what it changes, for whom, on what timescale. Everything else stays in the log or dies. Mercy-killing weak drivers is a skill. Hoarding them is how strategic products become unreadable.

Do this on a cadence even when the inbox is loud. The loud week is exactly when a slow driver gets ignored.

Time Buckets Are Different Questions

"Long term" is not one place. A one-year threat, a five-year threat, and a ten-year threat are different analytical objects, and they fail differently.

  • About one year. You are mostly looking at decisions already in motion: budgets tabled, contracts signed, crop years, election calendars, capacity that is already being built. Surprise is still possible. It is less likely to come from a force that takes a decade to mature.
  • About five years. This is the planner's real horizon for capital, force structure, skills, and regulation. Drivers dominate events. You owe the reader scenarios, not a single line. The forecasting lesson is the method. Your job here is to choose which drivers earn a scenario.
  • About ten years and beyond. You are describing pressures and constraints, not outcomes. Pretending to a point forecast at this range is how analysts become fortune cookies. Say what would have to be true for the pressure to matter, and what investment made now is robust across more than one future.

If a senior reader asks "so which one will it be in 2035," the honest answer is that you can bound it and you can name the forks. Offer that. Do not invent precision to sound decisive.

Opportunity Is Not a Separate Hobby

Threat scanning that never looks for opportunity produces a product whose only recommendation is "worry, but with a bigger budget." The same drivers cut both ways. A rival's demographic decline is a threat to its stability and, sometimes, an opportunity for a labour agreement, a market, or a quieter border. A new export-control regime is a threat to a supply chain and an opportunity for a domestic producer who can actually deliver.

Write both in the same assessment, or the opportunity will be discovered later by someone in sales who did not read your paper. For each major driver, force one sentence: who benefits if this continues, and what would they have to do in the next planning cycle to benefit on purpose rather than by accident.

Do not cheerlead. An opportunity with no actor, no timeframe, and no obstacle is a slogan.

Wildcards, Weighted Properly

A wildcard is a low-probability, high-impact break: a pandemic-scale health shock, a rapid political collapse, a technology that becomes cheap a decade before the consensus said it would. Strategic readers love wildcards because they feel like insight. They are also where discipline goes to die.

Treat them this way.

  • Keep the list short. Two or three, not a page of movie plots.
  • Say why the probability is low, not just why the impact would be high. Impact without a reason for probability is entertainment.
  • Say what indicator would tell you the wildcard is leaving the wildcard bin and becoming a mainstream driver. That sentence is the useful part. It connects this lesson to the indicators-and-warnings lesson.
  • Do not let a wildcard eat the paper. The base drivers are what the organization can plan against. The wildcard is a stress test.

This Is Not a Tactical Threat Assessment

A tactical or organizational threat assessment asks whether a specific actor can harm a specific target, soon, and what to do about exposure. That work lives on the Threat Assessment path: capability, intent, vulnerability, priority. Do not drag it into a ten-year scan by dressing a gang, a ransomware crew, or a terrorist plot as a "strategic trend." You will both overfit the anecdote and under-specify the actor.

Long-term threat identification asks what conditions will make whole classes of problem more or less likely, and what that means for strategy, investment, and posture. If your draft names a specific plot, you have changed genres. Hand the plot to the threat-assessment shop. Keep the condition.

The handoff, done well, looks like this: "Over five years, water stress and youth unemployment in this corridor are drivers of political violence risk. That is the strategic judgment. Any specific actor's capability and intent is a separate assessment, refreshed on a shorter clock."

What the Product Should Contain

A long-term threat and opportunity note is not an encyclopedia of the region. Aim for this shape.

  • The decision horizon. Whose plan this serves, and whether you are writing to one year, five, or ten.
  • Three to five drivers. For each: the condition it changes, the direction, the evidence you trust, and the evidence you do not have.
  • One opportunity tied to a driver. Actor, obstacle, timeframe.
  • One wildcard. Probability judgment, impact, and the indicator that would promote it.
  • What would make you revise. Not a disclaimer. A real fork.

Cut any paragraph that would still be true if you swapped in a different country or a different firm. Those paragraphs feel safe because they are content-free.

Exercise

Choose a domain you can describe without classified material: a regional labour market, a city's flood and housing system, or a manufacturer's dependence on one imported input.

On two pages:

  • Name four drivers. Mark each as one-year, five-year, or ten-year.
  • Kill one of them in a sentence, and say why it was colour rather than a driver.
  • Write one opportunity that uses the same drivers, with an actor and an obstacle.
  • Name one wildcard and the observable that would stop it being a wildcard.
  • End with the single planning implication you would actually say out loud.

If the implication is "continue to monitor," you have not finished the assessment. Say what monitoring is for.

Continue your training

This lesson is part of The Intel Analyst Academy — professional intelligence analysis training built for analysts. Explore the full course library, structured learning paths, and practical tools at theintelanalystacademy.com.

© 2026 The Intel Analyst Academy

theintelanalystacademy.com · Master intelligence analysis