Counter Terrorism Legal Frameworks Training Course

Duration 10 days 16 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Counter-terrorism investigators, Police commanders and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-SLE-011

Before you join: Participants should have practical familiarity with their organisation’s security, law enforcement, intelligence, border, prosecution or regulatory responsibilities.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Counter-terrorism work requires public authorities to prevent, investigate and disrupt serious threats while preserving legality, due process, privacy and public confidence. Errors in legal authority, evidence handling, detention, surveillance, sanctions, intelligence sharing or use-of-force decisions can compromise prosecutions, expose agencies to judicial challenge and damage partnerships. Practitioners need to connect international obligations, domestic powers and operational decisions before an incident reaches court, oversight bodies or the media.

This course examines the legal frameworks governing counter-terrorism policy, investigations and operations. Participants work through the United Nations counter-terrorism architecture, human rights law, criminal law, financial disruption measures, border controls, intelligence governance and international cooperation. They learn to identify lawful authority, assess necessity and proportionality, distinguish intelligence from admissible evidence, prepare legal-risk advice and document defensible operational decisions. Particular attention is given to rights-sensitive measures, including surveillance, arrest, detention, questioning, asset freezing, travel restrictions and information exchange.

Teaching combines focused legal briefings with case-based analysis, group exercises, decision simulations and structured review of operational documents. Cases may involve terrorist financing indicators, online radicalisation, foreign terrorist fighter travel, cross-border evidence requests and planned disruptive operations. Participants build practical work throughout the course and leave with a counter-terrorism legal compliance dossier: a structured package containing an authority map, risk assessment, decision record, evidence plan, safeguards checklist and oversight brief.

The course suits officials and practitioners who already work with security, law enforcement, intelligence, prosecution, border management, financial crime or regulatory functions. It is designed for professionals who must translate legal requirements into operationally usable procedures and defensible decisions.

What you will be able to do

  • Interpret United Nations, human rights and domestic counter-terrorism legal obligations
  • Map statutory powers, approval routes and accountability controls for operational measures
  • Apply legality, necessity, proportionality and non-discrimination tests to proposed interventions
  • Distinguish intelligence reporting from evidence suitable for criminal proceedings
  • Prepare legally defensible surveillance, arrest, detention and questioning decision records
  • Assess terrorist financing controls using FATF Recommendations and targeted financial sanctions requirements
  • Draft lawful information-sharing and international cooperation requests with required safeguards
  • Present a counter-terrorism legal compliance dossier for operational and oversight review

Benefits of attending

For you

  • Greater confidence identifying legal limits before approving counter-terrorism interventions
  • A repeatable method for recording necessity, proportionality and safeguards
  • Stronger ability to challenge weak legal assumptions in operational planning
  • Practical language for working with prosecutors, legal advisers and oversight bodies
  • A completed compliance dossier adaptable to the participant’s own role

For your organisation

  • More defensible operational decisions supported by clear legal authority records
  • Reduced risk of unlawful detention, surveillance, data sharing and sanctions actions
  • Better preservation of evidence for prosecution and judicial scrutiny
  • Consistent human rights safeguards across counter-terrorism functions
  • Stronger audit trails for inspectors, courts, parliamentary committees and regulators

Course modules

16 modules over 10 days

Participants can identify the legal sources and institutional mandates governing counter-terrorism action.

  • Constitutional, statutory and common-law sources of counter-terrorism authority
  • United Nations Charter obligations and Security Council counter-terrorism resolutions
  • Domestic criminal offences, preparatory acts and terrorism definitions
  • Agency mandates, jurisdictional boundaries and delegated decision-making powers
  • Legal hierarchy applied when domestic rules conflict with international obligations
  • Authority maps linking powers, approvals, records and review mechanisms

Participants can apply core international counter-terrorism obligations to domestic policy and operations.

  • UNSCR 1373 duties concerning suppression, prosecution and international cooperation
  • Universal counter-terrorism conventions addressing bombings, financing and hostage-taking
  • Security Council sanctions regimes and domestic implementation requirements
  • United Nations Global Counter-Terrorism Strategy pillars and state responsibilities
  • Extraterritorial jurisdiction bases for terrorist offences and related conduct
  • Treaty reservations, implementing legislation and operational legal consequences

Participants can test counter-terrorism measures against applicable human rights safeguards.

  • ICCPR protections relevant to liberty, privacy, expression and fair trial
  • Legality, necessity and proportionality tests for rights-restricting measures
  • Non-discrimination duties in targeting, profiling and risk assessment
  • Derogations during emergencies and conditions for lawful notification
  • Torture prohibition, non-refoulement and humane treatment requirements
  • Positive obligations to protect life during credible terrorist threats

Participants can analyse offence structures and select legally sound charging approaches.

  • Elements of terrorism offences: actus reus, mens rea and purpose
  • Preparatory conduct, attempt, conspiracy, solicitation and facilitation offences
  • Foreign terrorist fighter travel offences and evidential requirements
  • Online incitement, recruitment and propaganda within lawful speech limits
  • Material support and association offences assessed against legality principles
  • Charging matrices linking facts, statutory elements and available evidence

Participants can prepare legally grounded counter-terrorism operational plans and risk decisions.

  • Threat, vulnerability and consequence analysis for operational prioritisation
  • Legal-risk registers covering authority, rights, evidence and accountability
  • Decision logs recording intelligence basis, alternatives and approval rationale
  • Operational objectives distinguished from lawful means of achieving them
  • Escalation thresholds for legal advice, judicial orders and senior approval
  • Contingency planning for changed facts, urgent action and review

Participants can assess surveillance proposals against authority, necessity and oversight requirements.

  • Intrusive surveillance authorities, warrant thresholds and judicial supervision
  • Communications data, content interception and metadata legal distinctions
  • Covert human intelligence sources and handling authorisation safeguards
  • Open-source intelligence collection, platform terms and evidential preservation
  • Necessity and proportionality statements for surveillance applications
  • Retention, minimisation and deletion controls for collected personal data

Participants can establish lawful controls for counter-terrorism data use and disclosure.

  • Purpose limitation, data minimisation and accuracy in security records
  • Information-sharing gateways between police, intelligence and border agencies
  • Data-sharing agreements defining purpose, access, retention and audit
  • Handling sensitive personal data, source protection and classification markings
  • Cross-border data transfers, adequacy safeguards and onward-transfer restrictions
  • Disclosure decisions balancing public interest, privacy and procedural fairness

Participants can assess arrest, detention and questioning decisions against procedural safeguards.

  • Reasonable suspicion thresholds and documented grounds for arrest
  • Detention time limits, judicial review and custody record requirements
  • Access to counsel, interpreters, medical care and family notification
  • Interview planning, caution procedures and voluntary statement safeguards
  • Special protections for children, vulnerable adults and foreign nationals
  • Administrative detention risks, legal limits and periodic review controls

Participants can plan lawful searches and preserve physical and digital evidence for court.

  • Search warrant applications specifying premises, objects and evidential grounds
  • Exigent circumstances exceptions and contemporaneous decision documentation
  • Seizure inventories, chain of custody and secure evidence storage
  • Digital device extraction authorities, scope limits and forensic integrity
  • Hash values, forensic imaging and audit trails for electronic material
  • Privileged material, journalistic sources and legally protected communications

Participants can develop an evidence strategy that protects sources and supports prosecution.

  • Intelligence-to-evidence conversion plans for priority investigative hypotheses
  • Source reliability, corroboration and handling caveats in case development
  • Disclosure obligations, exculpatory material and prosecutor engagement
  • Hearsay, anonymous witnesses and protected witness legal considerations
  • Parallel investigations separating intelligence collection from evidential activity
  • Case theories connecting conduct, intent, statutory elements and proof

Participants can apply legal controls for terrorist financing disruption and asset freezing.

  • FATF Recommendation 5 criminalisation requirements for terrorist financing
  • FATF Recommendation 6 targeted financial sanctions implementation controls
  • Asset-freezing orders, designation criteria and notice requirements
  • Financial intelligence reports, suspicious transaction indicators and evidential use
  • Due process safeguards, delisting procedures and judicial challenge routes
  • Public-private information exchange with banks and financial intelligence units

Participants can apply lawful travel controls and watchlisting processes to identified risks.

  • Advance Passenger Information and Passenger Name Record legal controls
  • Watchlist nomination standards, identifiers and quality assurance checks
  • No-fly decisions, travel bans and procedural fairness safeguards
  • Border questioning powers, search limits and referral thresholds
  • Foreign terrorist fighter returnees: screening, investigation and reintegration options
  • Interagency watchlist governance, correction mechanisms and audit trails

Participants can assess use-of-force decisions within domestic and international legal limits.

  • Legal bases for force: law enforcement and armed conflict paradigms
  • Necessity, proportionality and precaution in planned protective operations
  • Rules of engagement, command responsibility and operational briefing records
  • Imminent threat assessments and lethal force decision thresholds
  • Post-incident reporting, independent investigation and evidence preservation
  • Medical assistance duties and treatment of injured persons

Participants can prepare lawful requests for cross-border counter-terrorism cooperation.

  • Mutual legal assistance requests: facts, offences, evidence and urgency
  • Extradition requirements, dual criminality and political offence exceptions
  • INTERPOL notices, diffusion requests and data protection considerations
  • Joint investigation teams and agreed evidence-handling arrangements
  • Intelligence liaison exchanges, caveats and source-protection obligations
  • Non-refoulement assessments before transfer, deportation or rendition decisions

Participants can build oversight and remedy arrangements into counter-terrorism governance.

  • Judicial, parliamentary, inspectorate and independent oversight functions
  • Internal audit trails supporting review of intrusive powers
  • Complaint handling, remedy pathways and victim-sensitive communication
  • Legal privilege, operational confidentiality and accountable transparency boundaries
  • Lessons-learned reviews after disrupted plots and operational failures
  • Policy revision triggers arising from judgments, inquiries and inspections

Participants can build, review and present a complete legal compliance dossier for a counter-terrorism operation.

  • Operational scenario scoping: threat facts, objectives and jurisdiction
  • Authority map matching proposed measures to legal powers
  • Human rights assessment applying legality, necessity and proportionality tests
  • Evidence and intelligence plan protecting admissibility, disclosure and sources
  • Financial, border and international cooperation measures documented with safeguards
  • Approval record, oversight brief and post-operation review schedule

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Counter-terrorism legal authority map
  2. Necessity and proportionality assessment template
  3. Operational legal-risk register
  4. Intelligence-to-evidence conversion plan
  5. Information-sharing agreement checklist
  6. Counter-terrorism legal compliance dossier

Who should attend

  • Counter-terrorism investigators — require lawful powers and evidence plans for active cases
  • Police commanders — approve disruptive operations and accountability arrangements
  • Intelligence analysts — need to handle collection, dissemination and evidential boundaries
  • Public prosecutors — assess charging, disclosure and international evidence issues
  • Border and immigration officials — apply travel controls, watchlisting and referral powers
  • Security policy advisers — translate international obligations into domestic procedures

Skills and tools covered

Counter-terrorism legal analysisHuman rights complianceOperational decision recordsIntelligence evidence managementTerrorist financing controlsInternational legal cooperation

Tools and standards

UN Security Council Resolution 1373, International Covenant on Civil and Political Rights, FATF Recommendations, United Nations Global Counter-Terrorism Strategy

How the course runs

Training methodology

The instructor uses short legal briefings to establish each framework, followed by case work based on realistic counter-terrorism decisions. Participants examine authorities, assess legal risks, compare options and draft operational records in small groups. Simulations test approval of surveillance, arrest, financial disruption and cross-border cooperation measures under time pressure. Facilitated reviews link each decision to legality, necessity, proportionality, evidence and oversight requirements. Individual application planning helps participants adapt templates and controls to their own statutory setting.

Requirements and prerequisites

Participants should have practical familiarity with their organisation’s security, law enforcement, intelligence, border, prosecution or regulatory responsibilities. They should understand basic criminal justice concepts such as investigation, arrest, prosecution, evidence and judicial review, although they do not need to be lawyers. Experience reviewing policies, operational plans, intelligence products or case files is useful. The course does not require prior specialist counter-terrorism training, knowledge of a particular national legal system, advocacy qualifications or technical surveillance expertise. Participants should bring awareness of their own agency’s legal authorities and approval procedures where possible.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

You should understand basic criminal justice or public security processes and have some exposure to operational, policy, legal, intelligence or investigative work. A law degree is not required, but participants should be prepared to read and discuss legal authorities.

Bring any non-sensitive policies, approval forms, legal authorities or process maps that you are permitted to use for learning purposes. Do not bring classified, personal, operationally sensitive or case-restricted material.

It is intended for practitioners whose work affects counter-terrorism decisions, including investigators, commanders, analysts, prosecutors, border officials, policy advisers and compliance staff. It is particularly useful for staff moving into roles with approval or legal-risk responsibilities.

Operations courses focus mainly on threat response, tactics, command and investigative techniques. This course focuses on the legal authority, rights safeguards, evidential consequences and oversight requirements that govern those actions.

Participants can use the authority map, legal-risk register, decision record and safeguards checklists when planning or reviewing real work. The materials are designed for adaptation to national law, agency procedures and approval routes.

Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first week establishes legal foundations and operational controls; the second week applies them to evidence, financing, borders, cooperation, oversight and the final dossier.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.