Border Security Intelligence Analysis Training Course

Duration 5 days 10 modules · 33 contact hours
Level Intermediate Certificate on completion
Who attends Border Intelligence Analysts, Customs Officers and others
Fee from USD 1,100 KSh 95,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-SLE-036

Before you join: Participants should have experience in border operations, customs, immigration, policing, security, intelligence support or a related public-sector role.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Border agencies and partner services must turn fragmented observations, traveller and cargo data, surveillance reporting, liaison information and open sources into defensible decisions. The operational challenge is to identify credible threats without overwhelming frontline teams with low-value referrals, mishandling personal data or confusing intelligence with evidence. Analysts need clear requirements, disciplined collection, tested judgments and reporting that commanders can act on within legal and policy limits.

This course develops the analytical methods used to support border control, customs, immigration, coastguard and law-enforcement operations. Participants work through the intelligence cycle; collection management; source and information evaluation; data quality; link analysis; structured analytical techniques; risk profiling; targeting; surveillance reporting; and intelligence dissemination. They learn to apply 5x5x5 intelligence grading, Analysis of Competing Hypotheses, indicators and warnings, targeting matrices, and the World Customs Organization risk-management approach. Particular attention is given to privacy, proportionality, human rights safeguards, information-sharing caveats and records needed for review or disclosure.

Instructor-led delivery combines short technical briefings with realistic border scenarios involving suspicious travel patterns, cargo anomalies, organised smuggling routes and multi-agency information requests. Participants assess reporting, challenge assumptions, build risk profiles, prepare intelligence products and brief decision-makers. They leave with a reusable border intelligence analysis toolkit containing templates for collection planning, source evaluation, risk profiling, intelligence reporting and analytical quality assurance. The course is available in classroom format in 50+ cities or live online. It runs for five days, 08:30-16:30, with approximately 6.5 contact hours each day, and includes a certificate of completion.

What you will be able to do

  • Frame priority intelligence requirements using decision-maker questions, indicators and collection gaps
  • Evaluate source reliability and information credibility using 5x5x5 intelligence grading
  • Build collection management plans that assign sources, tasks, deadlines and handling restrictions
  • Apply link analysis and entity resolution to identify relationships, patterns and inconsistencies
  • Test competing explanations using Analysis of Competing Hypotheses and key assumptions checks
  • Construct risk profiles and targeting matrices for passengers, cargo and conveyances
  • Produce intelligence reports and briefings that state confidence, caveats and operational implications
  • Establish governance controls for intelligence sharing, retention, quality assurance and feedback

Benefits of attending

For you

  • Produce clearer intelligence assessments with explicit judgments, sources and confidence levels
  • Identify weak reporting, unsupported assumptions and misleading correlations before dissemination
  • Build defensible risk profiles for travellers, cargo, routes and conveyances
  • Brief commanders with concise findings, operational implications and stated information gaps
  • Apply privacy, proportionality and handling controls to sensitive border intelligence

For your organisation

  • Improves targeting quality by focusing checks and referrals on better-supported risks
  • Reduces duplicate collection and operational clashes through structured tasking and deconfliction
  • Strengthens auditability of intelligence decisions, data handling and partner information exchanges
  • Creates more consistent reporting standards across customs, immigration, police and border teams
  • Supports lawful, proportionate interventions through documented risk indicators and review controls

Course modules

10 modules over 5 days

Participants can define intelligence requirements that support lawful border-security decisions.

  • Border threat typologies covering smuggling, trafficking, irregular migration and terrorism
  • Intelligence cycle: direction, collection, processing, analysis, dissemination and feedback
  • Distinguishing strategic, operational and tactical intelligence requirements within border operations
  • Priority intelligence requirements framed through decision-maker questions and indicators
  • Collection plans aligned to authority, necessity, proportionality and oversight
  • Separating intelligence assessments from evidence and administrative case material

Participants can apply legal, privacy and accountability controls to border intelligence activity.

  • Legal authorities governing border checks, data processing and surveillance activities
  • Human rights safeguards: legality, necessity, proportionality, non-discrimination and accountability
  • Privacy impact assessment triggers for watchlists, biometrics and data sharing
  • Handling personal data under purpose limitation, retention and access controls
  • Source protections, disclosure obligations and auditable intelligence handling records
  • Cross-border information exchange agreements, caveats and onward-sharing restrictions

Participants can direct collection against priority gaps using suitable sources and controls.

  • Collection management plan linking gaps, sources, tasks and deadlines
  • Human source reporting evaluated for access, motivation and reliability
  • Open-source intelligence collection using lawful search, preservation and verification methods
  • Border surveillance feeds assessed from patrols, sensors, cameras and aerial platforms
  • Interview-derived information recorded without contaminating witness or asylum processes
  • Collection gaps escalated through tasking, liaison requests and priority changes

Participants can assess information quality and organise data for defensible analytical use.

  • 5x5x5 intelligence grading applied to source and information assessments
  • Structured data capture using entities, events, locations, dates and identifiers
  • Data quality checks for duplication, missing fields, timeliness and provenance
  • Entity resolution methods for aliases, transliteration variants and document inconsistencies
  • Link analysis charts connecting persons, conveyances, communications and financial indicators
  • Audit trails preserving transformations, analyst judgments and dissemination history

Participants can test analytical judgments and identify emerging border-security threats.

  • Analysis plans defining question, assumptions, indicators, evidence and confidence
  • Analysis of Competing Hypotheses tests alternative explanations against available evidence
  • Key assumptions check exposes unstated beliefs and collection bias
  • Indicators and warnings matrices distinguish routine activity from threat escalation
  • Confidence statements calibrated using evidence quality, corroboration and analytical limits
  • Red-team challenge identifies adversary adaptation and analytic blind spots

Participants can develop and govern risk profiles that support proportionate interventions.

  • WCO risk management principles applied to passengers, cargo and conveyances
  • Risk profiles combine modus operandi, route, document, commodity and behavioural indicators
  • Targeting matrices rank cases by harm, likelihood, confidence and intervention value
  • Anomaly detection compares declarations, travel patterns and historical seizure data
  • False-positive review reduces unnecessary referrals and discriminatory selection patterns
  • Risk profile governance sets review dates, approvals and performance measures

Participants can plan, record and assess surveillance-derived intelligence within operational safeguards.

  • Surveillance objectives converted into collection questions, boundaries and reporting requirements
  • Static and mobile surveillance planning addresses coverage, safety, communications and contingencies
  • Observation logs distinguish facts, inferences, times, locations and conditions
  • Surveillance imagery handled with metadata, continuity and access controls
  • Counter-surveillance indicators assessed without compromising personnel or ongoing operations
  • Operational deconfliction coordinates surveillance activity with partner agencies

Participants can produce intelligence products that inform timely operational and strategic decisions.

  • Intelligence reports use BLUF, sourced judgments, confidence and implications
  • Situation reports distinguish confirmed facts, assessments, gaps and required action
  • Threat assessments connect actors, intent, capability, opportunity and likely impacts
  • Maps and timelines communicate routes, patterns, events and operational windows
  • Briefing decision-makers on uncertainty, caveats and recommended collection priorities
  • Dissemination lists apply need-to-know, handling caveats and recipient accountability

Participants can coordinate intelligence exchanges while protecting sources, data and operations.

  • Information-sharing protocols define purpose, legal basis, roles and safeguards
  • Joint border intelligence cells coordinate customs, police, immigration and coastguard inputs
  • Liaison requests specify intelligence questions, identifiers, urgency and handling restrictions
  • Deconfliction processes prevent duplicate investigations, operational clashes and source compromise
  • Feedback loops measure whether intelligence changed decisions, deployments or controls
  • Partner reliability assessed through timeliness, relevance, security and legal compliance

Participants can assess intelligence performance and plan measurable improvements for their workplace.

  • Intelligence requirements register links mission priorities to collection and analytical outputs
  • Performance measures track timeliness, accuracy, utility, referrals and outcomes
  • Quality assurance review tests sourcing, logic, language and handling compliance
  • Bias mitigation routines document assumptions, peer challenge and alternative hypotheses
  • Retention and disposal schedules protect data while preserving accountable records
  • Personal application plan identifies a workplace intelligence improvement within ninety days

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Priority intelligence requirements template
  2. Collection management plan template
  3. 5x5x5 source evaluation worksheet
  4. Border risk profile and targeting matrix
  5. Intelligence report and briefing template
  6. Analytical quality assurance checklist

Who should attend

  • Border Intelligence Analysts — improve the quality, traceability and utility of analytical assessments
  • Customs Officers — target higher-risk cargo, conveyances and trade movements using structured profiles
  • Immigration Officers — assess travel and identity indicators while applying lawful data safeguards
  • Border Force Supervisors — direct intelligence activity and use assessments to allocate operational resources
  • Police Intelligence Officers — coordinate cross-border intelligence on organised crime and trafficking networks
  • Coastguard and Port Security Personnel — convert maritime observations into actionable intelligence reporting

Skills and tools covered

Intelligence collection managementSource evaluationStructured analytical techniquesBorder risk profilingSurveillance intelligence reportingIntelligence product writing

Tools and standards

Intelligence Cycle, 5x5x5 Intelligence Grading, Analysis of Competing Hypotheses, WCO Risk Management Compendium

How the course runs

Training methodology

The course uses short instructor briefings to introduce methods, standards and decision points, followed by case work based on border crossings, ports, airports and land-border operations. Small-group exercises assess reporting, grade information, develop risk profiles, test hypotheses and prepare intelligence products. Simulations require participants to respond to changing information, competing operational priorities and partner requests. Facilitated review compares analytical judgments and identifies handling, legal and quality-assurance considerations. Each participant completes an application plan for an intelligence improvement relevant to their role.

Requirements and prerequisites

Participants should have experience in border operations, customs, immigration, policing, security, intelligence support or a related public-sector role. They should be familiar with basic operational reporting, handling sensitive information and their organisation's local procedures for referrals or escalation. Prior analytical experience is helpful but not essential. The course does not require advanced statistics, specialist surveillance qualifications, access to intelligence databases or prior use of analytical software. Participants should bring examples of non-sensitive operational challenges they want to address after the course.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants should have experience in a border, customs, immigration, policing, security or intelligence-support role. Basic familiarity with operational reports and sensitive-information procedures is sufficient; no advanced analytical qualification is required.

Participants should bring a laptop if their organisation permits it, although it is not essential for classroom delivery. They may also bring non-sensitive examples of intelligence or targeting challenges, provided no restricted information is disclosed.

The course suits analysts, intelligence officers, customs personnel, immigration officers, border-force supervisors, port-security staff and police officers supporting cross-border operations. It is designed for professionals who already work with operational information and need stronger analytical discipline.

This course applies intelligence methods specifically to border risks, including travellers, cargo, conveyances, routes, surveillance reporting and multi-agency targeting. It also addresses border-specific legal safeguards, referral decisions and information-sharing arrangements.

Participants can introduce clearer intelligence requirements, better source grading, risk-profile reviews and more decision-focused reporting. The reusable templates support immediate improvements to collection tasking, targeting and analytical quality checks.

Each day runs from 08:30 to 16:30 and provides approximately 6.5 contact hours. Time is divided among instructor briefings, applied case work, group exercises, simulations, feedback and individual application planning.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.