SANS FOR578 GCTI questions &
answers
Intelligence - answer The collection, processing, and analysis of info
about a competitive entity and its agents, needed by an org or group for
its sec. and well-being
Counterintelligence - answer identification, assessment, and
neutralization of adversary intel activities
must consider:
gain-loss
potential disinformation
Classic Intel Sources - answer HUMINT
GEOINT
MASINT
OSINT
SIGINT
All Source
,MASINT - answer Measurement and signature intel (radar, nuclear det.,
etc)
SIGINT - answer Signal intercepts (cell phone, line tapping, etc.)
Sherman Kent's (founder of CIA) Analytic Doctrine - answer Focus on
policymaker concerns
Avoidance of a personal policy agenda
intellectual rigor
conscious effort to avoid analytic biases
willingness to consider other judgments
systematic use of outside experts
collective responsibility for judgment
effective communication of policy-support info and judgments
candid admission of mistakes
data-driven analysis - answer good datasets and straightforward
problems
accuracy is based on the dataset's accuracy
logically-driven and easily replicated
, conceptually-driven analysis - answer numerous unknowns and
undefined variables and relationships
immediate interpretation of complex concepts
accuracy is driven by mental models ad feedback
Analysis - answer Detailed examination of the elements or structure of
something
breaking something down into its constituent parts to understand its
operation
Mental models - answer experiences-based assumptions and
expectations of the way the world operates
should be reviewed and updated as experience grows
Structured Analytic Techniques (SATs) - answer analyst approaches to
better evaluate info while reducing while reducing the impact of bias
more transparent, testable, and defendable
Heuer:
Getting organized
Exploration techniques
diagnostic techniques
answers
Intelligence - answer The collection, processing, and analysis of info
about a competitive entity and its agents, needed by an org or group for
its sec. and well-being
Counterintelligence - answer identification, assessment, and
neutralization of adversary intel activities
must consider:
gain-loss
potential disinformation
Classic Intel Sources - answer HUMINT
GEOINT
MASINT
OSINT
SIGINT
All Source
,MASINT - answer Measurement and signature intel (radar, nuclear det.,
etc)
SIGINT - answer Signal intercepts (cell phone, line tapping, etc.)
Sherman Kent's (founder of CIA) Analytic Doctrine - answer Focus on
policymaker concerns
Avoidance of a personal policy agenda
intellectual rigor
conscious effort to avoid analytic biases
willingness to consider other judgments
systematic use of outside experts
collective responsibility for judgment
effective communication of policy-support info and judgments
candid admission of mistakes
data-driven analysis - answer good datasets and straightforward
problems
accuracy is based on the dataset's accuracy
logically-driven and easily replicated
, conceptually-driven analysis - answer numerous unknowns and
undefined variables and relationships
immediate interpretation of complex concepts
accuracy is driven by mental models ad feedback
Analysis - answer Detailed examination of the elements or structure of
something
breaking something down into its constituent parts to understand its
operation
Mental models - answer experiences-based assumptions and
expectations of the way the world operates
should be reviewed and updated as experience grows
Structured Analytic Techniques (SATs) - answer analyst approaches to
better evaluate info while reducing while reducing the impact of bias
more transparent, testable, and defendable
Heuer:
Getting organized
Exploration techniques
diagnostic techniques
