# Executive Briefings and Technical Intelligence Reports

> Write intelligence products that get read and acted on: BLUF and key judgements, report structures for executives and technical teams, sourcing and confidence statements, TLP marking, and actionable recommendations.

Canonical: https://codelivly.com/rooms/cti-briefings-and-reports
Last updated: 2026-10-28

| | |
|---|---|
| Level | Advanced |
| Category | Cybersecurity |
| Lessons | 5 |
| XP | 100 |

Purpose: communicate intelligence so that each audience can act on it. This module covers bottom line up front (BLUF) writing and key judgements, how technical reports and executive briefings differ in structure and content, how to cite sources and state confidence, how to apply the Traffic Light Protocol (TLP 2.0) correctly, how to write actionable recommendations for different audiences, and the most common ways intelligence reports fail.

Prerequisites: the four earlier paths of the Threat Intelligence Analyst career path, and modules 1 to 3 of this path (in particular estimative language and confidence from module 2).

Measurable outcomes. After this module you can:
- Write a BLUF and three to five key judgements that separate fact from assessment and state likelihood and confidence.
- Choose the right sections for an executive briefing and a technical report and explain who each section serves.
- Write sourcing and confidence statements using source reliability and information credibility ratings.
- Apply TLP 2.0 labels correctly, including to derived content.
- Turn findings into recommendations with an owner, action, deadline and expected effect, and diagnose common report failures.

Practical completion objective: complete the lab by diagnosing a flawed draft report (buried BLUF, unsupported certainty, TLP violation, unactionable recommendations) and rewriting it as an executive briefing and a corrected technical summary.

## Lessons

1. BLUF and Key Judgements (16 min)
2. Technical Reports and Executive Briefings (18 min)
3. Sourcing, Confidence Statements and TLP Marking (18 min)
4. Actionable Recommendations, Audiences and Common Report Failures (18 min)
5. Lab: Repair a Flawed Intelligence Report (45 min)

## Related

- [Learning path: Advanced Intelligence Analysis and Reporting](https://codelivly.com/learning-paths/cti-advanced-analysis-reporting)
- [All rooms](https://codelivly.com/rooms)