# Analytical Reasoning, Evidence, and Confidence

> Separate evidence from inference and judgement, express likelihood and confidence precisely, and recognise common cognitive biases.

Canonical: https://codelivly.com/rooms/cti-analytical-reasoning-and-confidence
Last updated: 2026-10-28

| | |
|---|---|
| Level | Beginner |
| Category | Cybersecurity |
| Lessons | 5 |
| XP | 100 |

**Purpose.** The difference between a useful intelligence product and a confident-sounding guess is disciplined reasoning. This module teaches you to separate facts, inferences, hypotheses and assessments; to express probability with a defined estimative scale; to state confidence and the evidence behind it; and to recognise and counter the cognitive biases that most often distort CTI analysis.

**Prerequisites.** Modules 1 to 4 of this path, especially the Admiralty system.

**Measurable outcomes.** After this module you can:
- Label statements in an intelligence product as fact, inference, hypothesis or assessment.
- Use the ICD 203 estimative scale correctly and explain why vague words such as 'may' or 'could' mislead readers.
- Assign high, moderate or low confidence and list the evidence and gaps that justify it.
- Name six common cognitive biases, recognise them in a scenario, and apply a mitigation such as a key assumptions check or a simple analysis of competing hypotheses.

**Practical completion objective.** In the lab you classify every statement in a synthetic incident report as fact, inference or assessment, identify an overreaching conclusion, and rewrite it with appropriate estimative language and confidence.

## Lessons

1. Evidence, Inference, Hypothesis and Assessment (15 min)
2. Estimative Language and Probability (15 min)
3. Confidence Levels and Supporting Evidence (20 min)
4. Cognitive Biases and How to Counter Them (20 min)
5. Lab: Separate Fact, Inference and Assessment (45 min)

## Related

- [Learning path: Cyber Threat Intelligence Foundations](https://codelivly.com/learning-paths/cti-foundations)
- [All rooms](https://codelivly.com/rooms)