The Intelligence Lifecycle: Phase 1 - Planning & Direction

The Intelligence Lifecycle: Phase 1 - Planning & Direction
AI-Generated

A few weeks ago, I shared that we'd break down the Intelligence Lifecycle one phase at a time in my article The Intelligence Lifecycle Explained. My goal is to make each phase digestible, not overwhelming.

Early in my career, I'll admit, I wanted to skip the parts that felt "boring" or "unnecessary". Like many of you, I gravitated toward the fun part: Collection (aka the research rabbit holes we all love). But here's the truth. If you want your work to be solid and trusted, you can't skip the foundational steps.

So, let's start from the top.

Phase 1: Planning & Direction
"The first phase, Planning and Direction, consists of outlining the specific intelligence activities and actions required to support the mission. This includes prioritizing and directing intelligence collection efforts and assets."
(Baker & Henderson, 2017)

What does that mean for you?
Before you open your browser and start digging, you have to set the stage:

  • Know your why, what, when, where, and how.
    What’s the actual problem you’re solving?
  • Ask the right questions.
    For example: Who runs this account? What do we know about this group?
  • Set goals.
    What does “done” look like? Is it a report, a map, or just a single verified fact?
  • Define the scope and the timeline.
    Are you looking at one incident, one person, or an entire network?
  • Draft a collection plan.
    Which sources will you check first? What tools will you use?

Do analysts always do all this?
Nope.

Sometimes, you'll be handed vague tasking and have to improvise. Sometimes, there's no time for formal planning because a crisis drops in your lap. And in many roles, the priorities are already set by someone else, which means you might have limited room to shape the plan yourself.

Think of Phase 1 as a blueprint. Not every analyst gets to design the house but understanding the blueprint helps you know why the walls are where they are.

Phase 1 might not feel as thrilling as digging through data, but it's the part that saves you from chasing dead ends later.

💭 I’m curious…

How do you handle this step?

  • Do you always take time to plan before you collect, or do you sometimes jump straight in?
  • Have you ever had a project go sideways because there wasn’t enough planning upfront?
  • What tricks or habits help you stay focused during this phase?

Leave your feedback in the comment section below!

💡
Reference: Baker, J. W. & Henderson, S. (2017). The Cyber Data Science Process. The Cyber Defense Review, Vol. 2, No. 2. Read the article