Programme Overview
Day 1 – Physical Security & Information Handling
- Physical security fundamentals and access control
- Information classification and Traffic Light Protocol (TLP)
- Need-to-know and compartmentation principles
- Secure communication and data handling
- Chain-of-custody concepts
- Practical handling and classification exercises
Outcome: Participants establish the operational discipline required for professional intelligence work.
Day 2 – OPSEC (Operational Security)
- The 5-step OPSEC cycle
- Threat modelling and risk management
- The 3-layer camouflage model (connection, machine and identity)
- Personal digital footprint analysis
- Social media exposure and persona management
- OPSEC countermeasures and resilience planning
Outcome: Participants create their own Personal OPSEC Action Plan and learn how to protect themselves, their clients and their investigations.
Day 3 – Understanding Information & Critical Interpretation
- What OSINT is and what it is not
- Surface web, deep web and dark web fundamentals
- The 4 Vs of information verification
- Disinformation, misinformation and malinformation
- SIFT verification methodology
- AI, deepfakes and synthetic content risks
Outcome: Participants learn to critically evaluate information and distinguish reliable intelligence from noise.
Day 4 – Intelligence Cycle & Methodology
- The 5-phase Intelligence Cycle
- EEIs (Essential Elements of Information)
- Berkeley Protocol introduction
- NATO Admiralty source assessment
- BLUF (Bottom Line Up Front) reporting
- Collaborative intelligence processes
- Mini country-study exercise
Outcome: Participants learn to transform raw data into actionable intelligence products.
Day 5 – Structured Research Workflow
- Selector-based investigation methodology
- Domain and URL workflows
- Email investigation workflows
- Name and username research workflows
- Telephone and reverse image investigations
- Research logging and documentation discipline
- End-to-end practical investigation exercise
Outcome: Participants build a complete, reproducible investigation workflow that can be directly applied in operational environments.
.png)
