Questions Defined Before Search
The engagement begins with the decision, the uncertainty obstructing it, and the specific intelligence questions whose answers could change posture, timing, or action.
Intelligence Collection & Analysis
Collection built around the decision, not the dataset.
Intelligence Collection & Analysis is used when the information required for a decision sits outside the organization, is distributed across unreliable channels, or has been obscured by volume, narrative, or incomplete reporting.
Archer Knox defines the decision requirement first, converts it into priority intelligence questions, and builds a controlled collection and analytic process around what leadership must know, what remains uncertain, and what action the answer may support.
Mandate
- Define decision requirements and priority intelligence questions.
- Design collection plans, source boundaries, and validation gates appropriate to risk.
- Fuse open-source, human, public-record, internal, and environmental reporting.
- Separate verified fact, credible reporting, inference, and unresolved collection gaps.
- Deliver decision-grade assessments with provenance, assumptions, and confidence.
Common Triggers
- Unknown actors, networks, or relationships affecting leadership or operations.
- External activity suggesting targeting, coordination, mobilization, or influence.
- Partner, market, acquisition, vendor, or jurisdictional risk requiring verification.
- Pre-event, travel, facility, litigation, or mission intelligence requirements.
- Internal reporting that has become fragmented, circular, or narrative-driven.
When collection reveals credible threat indicators, the intelligence record moves directly into active threat management so validation, escalation, and protective action remain continuous. Protective Intelligence
The question governs the collection.
More information does not automatically create more visibility. Collection is disciplined by the decision requirement, bounded by authority, and measured by whether it reduces a material uncertainty for the person responsible for action.
Sources Tasked With Purpose
Authorized sources and methods are selected against the requirement, with provenance, relevance, access limits, and validation needs defined before volume begins to accumulate.
Information Converted Into Judgment
Reporting is fused, tested, and translated into findings, confidence, alternatives, remaining gaps, and the consequences of acting—or waiting.
No source stands alone. Each source carries access, bias, reliability, and consequence.
Archer Knox treats collection as a governed system rather than a list of tools. The value of a source depends on what it can actually establish, how its information was obtained, what may distort it, and whether the reporting can withstand comparison with independent evidence.
Public Signals in Context
Digital activity, media, records, technical traces, commercial data, and public behavior are collected against defined questions and preserved with source and time intact.
Access With Reliability Attached
Direct reporting, interviews, liaison information, and field observations are evaluated for access, motivation, consistency, corroboration, and the limits of what the source could know.
Documented Relationships and Events
Corporate, legal, financial, property, regulatory, and other authorized records are used to establish identity, chronology, ownership, connection, and contradiction.
Organizational Knowledge Tested
Existing reporting, access logs, incident records, communications, and stakeholder accounts are assessed as sources—not accepted as settled fact because they originated inside the organization.
Conditions Read Around the Target
Physical setting, movement, access, local dynamics, event conditions, infrastructure, and temporal changes are examined where the operating environment materially shapes the question.
Independent Streams Brought Together
Sources are compared for convergence, conflict, sequencing, and explanatory value so one strong narrative does not substitute for a supported intelligence picture.
Every phase must narrow uncertainty or expose why it cannot yet be narrowed.
The sequence protects the engagement from open-ended research, premature conclusions, and analytic drift. Collection remains tied to an authority, a question, a time horizon, and a defined standard for when the available record is sufficient to support judgment.
Define the Decision
Establish the responsible decision-maker, operational or legal boundaries, timing, consequences, and the uncertainty preventing a defensible course of action.
Convert Uncertainty Into Questions
Translate the decision requirement into priority intelligence questions, indicators, essential elements of information, and explicit conditions that would alter the current posture.
Assign Sources and Validation Gates
Determine what can answer each question, which sources are authorized and proportionate, where corroboration is required, and what collection should stop because it no longer serves the mandate.
Develop the Record
Gather and preserve relevant information with source, date, access, context, and handling intact; identify contradictions and gaps as they emerge rather than concealing them in the final product.
Test Competing Explanations
Compare evidence, pattern, chronology, source reliability, alternative hypotheses, and potential deception; state what the record supports and where judgment remains conditional.
Deliver the Answer at Decision Speed
Present the finding, confidence, key evidence, unresolved gaps, implications, and recommended next collection or action in a form usable by the authority responsible for the decision.
The product must make uncertainty visible without making it useless.
Archer Knox separates what the sources report from what the evidence establishes and what the analyst judges. Confidence is stated, assumptions are exposed, and the reader is shown what could materially change the assessment.
Provenance
Where the information originated, how it was accessed, when it was collected, and whether the original context is preserved.
Reliability
What the source could know, its history of accuracy, potential bias, motivation, and access to the reported information.
Corroboration
Which independent records, behaviors, sources, or environmental facts support—or contradict—the reporting.
Alternatives
What competing explanation could account for the same evidence and why the current judgment is stronger, weaker, or still unresolved.
Confidence
How strongly the available evidence supports the judgment, distinct from how severe the potential consequence may be.
Gap
What remains unknown, why it matters, whether it can be collected, and what decision may have to proceed without it.
Outputs are structured around the next authority and the next decision.
Deliverables are scaled to the mandate. The engagement may produce a focused assessment or a sustained intelligence record, but every output identifies what supports the judgment, what remains uncertain, and what the recipient is expected to decide.
Intelligence Requirements Framework
Decision requirement, priority questions, indicators, collection boundaries, source strategy, timing, and the conditions that would materially alter posture.
Controlled Source and Collection Record
A traceable account of relevant reporting, provenance, source evaluation, chronology, corroboration, contradictions, gaps, and collection disposition.
Decision-Grade Intelligence Assessment
Key judgments, supporting evidence, confidence, alternative explanations, implications, collection gaps, and indicators requiring continued attention.
Executive Decision Brief
A compressed operating picture identifying what changed, what matters now, what can wait, and which decision or escalation is required from the named authority.
Intelligence is complete only when it enters the operation without losing its meaning.
Collection and analysis can stand alone, but the intelligence often becomes the foundation for a protective, investigative, crisis, or executive-security decision. The record remains continuous as the engagement changes posture.
Threat Management
Credible indicators move into ongoing validation, escalation thresholds, and protective action without rebuilding the subject or source record.
Case Direction
Intelligence that establishes a defined allegation, actor, transaction, or event can be converted into a governed investigative mandate with evidence controls attached.
Incident Command
Time-sensitive findings enter the incident picture with source, confidence, and decision relevance preserved for the command authority.
Security Leadership
Recurring intelligence requirements can be sustained under an FCSO mandate when collection, posture, implementation, and accountability must remain connected.
Collection ends when the decision is supported—not when every possible question has been answered.
A successful engagement leaves leadership with a clearer operating picture, a traceable basis for judgment, and an explicit understanding of what remains unknown.
Where the requirement persists, Archer Knox can maintain the collection cycle, embed the function into a protective or investigative engagement, or place it under sustained executive security oversight.
- The decision requirement has been answered or its remaining uncertainty is explicit.
- Sources, assumptions, contradictions, and confidence are visible to the recipient.
- Relevant intelligence has moved to the authority responsible for action.
- Continued collection has a defined purpose, owner, threshold, and stop condition.