# Strategic Intelligence and Risk Based Analysis

> Produce strategic intelligence that leadership can act on: assess threat, vulnerability, impact and likelihood, tie findings to business decisions, and track indicators and warnings over time.

Canonical: https://codelivly.com/rooms/cti-strategic-intelligence-and-risk
Last updated: 2026-10-28

| | |
|---|---|
| Level | Advanced |
| Category | Cybersecurity |
| Lessons | 5 |
| XP | 100 |

Purpose: move from describing threats to informing decisions. This module teaches how strategic intelligence differs from operational and tactical work, how to build a risk based assessment from threat, vulnerability, impact and likelihood, how to translate intelligence into business risk and decision options, and how to forecast and track indicators and warnings at a conceptual level.

Prerequisites: the four earlier paths of the Threat Intelligence Analyst career path (foundations, OSINT and indicator analysis, threat actor investigation, operations and sharing), or equivalent experience with the intelligence lifecycle, requirements and confidence statements.

Measurable outcomes. After this module you can:
- Distinguish strategic, operational and tactical intelligence by audience, question, time horizon and product.
- Decompose a risk scenario into threat (capability, intent, opportunity), vulnerability, impact and likelihood, and explain the limits of ordinal scoring.
- Write a decision oriented intelligence statement that names the decision, the options and the business consequence.
- Define a forecasting question, choose a base rate, and build a short indicators and warnings list for alternative scenarios.

Practical completion objective: complete the lab by scoring five risk scenarios for a fictional water utility with a defined method, re-scoring after a proposed control, and writing a one page risk brief for its executive team.

## Lessons

1. Strategic Intelligence: Purpose, Consumers and Products (15 min)
2. Risk Based Analysis: Threat, Vulnerability, Impact and Likelihood (18 min)
3. Linking Intelligence to Business Risk and Decisions (16 min)
4. Forecasting, Indicators and Warnings (18 min)
5. Lab: Risk Based Threat Assessment for a Water Utility (45 min)

## Related

- [Learning path: Advanced Intelligence Analysis and Reporting](https://codelivly.com/learning-paths/cti-advanced-analysis-reporting)
- [All rooms](https://codelivly.com/rooms)