THE INTEL ANALYST ACADEMY
Professional Intelligence Training
Printable Lesson
Tactical Reports
The Intel Analyst Academy · Lesson Notes
Learn how to write tactical intelligence reports to support immediate operations and decision-making.
Structure and format of tactical reports
Time-sensitive reporting techniques
Operational intelligence requirements
Clear and actionable language
Tactical reports are time-sensitive intelligence products designed to support immediate operational decisions. Unlike strategic reports, tactical reports focus on near-term threats, opportunities, and operational requirements.
Begin with a concise summary of the most critical information that decision-makers need to know immediately.
Provide context about the current operational environment and relevant background information.
Identify and assess immediate threats, including capability, intent, and timeline.
Offer specific, actionable recommendations based on the intelligence findings.
Tactical intelligence reports serve a fundamentally different purpose from strategic assessments. While strategic intelligence informs long-term policy and planning, tactical reports support immediate operational decisions - often at the unit level, with timelines measured in hours or days rather than months or years.
While formats vary between agencies and mission types, effective tactical reports share common structural elements:
Tactical intelligence exists in permanent tension between speed and accuracy:
Tactical intelligence is only useful if it reaches the right consumer at the right time through the right channel:
Here is a first draft from a junior analyst, written at 0415 after an overnight report from the security contractor at a mine site:
"Overnight there were some reports of suspicious activity near the eastern fence. A vehicle may have been seen and some people were possibly observed. It is assessed that this could potentially indicate a threat to the site and further monitoring is recommended."
Every sentence hedges, nothing is specific, and the reader cannot act on any of it. Here is the same report rewritten:
Summary: Two people in a white utility vehicle were seen at the eastern perimeter fence at 0240 and left at 0255. Likely reconnaissance or an attempted theft. Recommend a fence inspection at first light and an extra patrol on the eastern perimeter tonight.
Source: Site security contractor, direct observation via thermal camera. Usually reliable. Footage reviewed by the analyst.
Situation: Two copper cable thefts were reported at neighbouring sites in the past month. The eastern fence borders an unsealed public road with no lighting.
Detail: The vehicle stopped near fence post E14. Both people spent about ten minutes at the fence. No breach was seen on camera, but the camera does not cover the base of the fence at E14.
Assessment: Likely reconnaissance ahead of a theft attempt, moderate confidence. The timing and location match the pattern at neighbouring sites. It may have been unrelated, such as people stopping on the road, but the time spent at the fence makes that less likely.
Gaps: No registration captured. No confirmation of whether the fence was tampered with.
Recommendations: Inspect the fence at E14 at first light. Add a patrol on the eastern perimeter between 0100 and 0400 for the next three nights. Adjust the camera to cover the base of the fence.
The rewrite is longer, but it is faster to use. The site manager can read the summary in ten seconds and know what to do before breakfast.
Find a short news report about a local incident, such as a break-in, a road closure or a protest. Rewrite it as a tactical report using the structure above: a summary of no more than three sentences, a stated source, an assessment with a confidence level, the gaps, and two specific recommendations.
Continue your training
This lesson is part of The Intel Analyst Academy — professional intelligence analysis training built for analysts. Explore the full course library, structured learning paths, and practical tools at theintelanalystacademy.com.