Organised Crime and Transnational Threats Training Course

Participants can analyse how criminal groups generate revenue, manage risk and sustain operations.

• Revenue models behind drug markets, trafficking and illicit trade
• Supply-chain roles from sourcing and transport to retail distribution
• Risk transfer through brokers, shell entities and corrupt intermediaries
• Market adaptation following enforcement pressure, conflict or border restrictions
• Pricing, debt, coercion and reputation within criminal business relationships
• Opportunity structures assessed through demand, access, guardianship and profit

Participants can produce a structured initial assessment of a transnational organised-crime threat.

• Threat-assessment scope defined by geography, crime type and decision need
• Actor capability measured through resources, access, intent and adaptability
• Harm indicators covering victims, institutions, markets and critical infrastructure
• Risk matrices combining likelihood, impact, uncertainty and time horizon
• Scenario development for probable, plausible and high-impact criminal developments
• Priority-setting criteria aligned with mandate, harm and available resources

Participants can convert a threat question into intelligence requirements and a collection plan.

• Intelligence cycle stages from direction through collection, analysis and feedback
• Priority intelligence requirements derived from operational and strategic decisions
• Collection plans matching sources, indicators, owners and reporting deadlines
• Source evaluation using reliability, credibility, corroboration and access criteria
• Collection gaps recorded with assumptions, risks and mitigation actions
• Handling codes and need-to-know principles for sensitive intelligence sharing

Participants can map criminal networks and identify influential actors, brokers and vulnerabilities.

• Entity charts linking people, companies, accounts, locations and communications
• Association matrices separating confirmed links from assessed relationships
• Role analysis for leaders, logisticians, financiers, enforcers and facilitators
• Broker identification through bridging ties, gatekeepers and information control
• Temporal link analysis revealing changing alliances, meetings and transaction patterns
• Network vulnerabilities identified through dependencies, bottlenecks and trusted intermediaries

Participants can assess routes, concealment methods and control weaknesses affecting illicit flows.

• Route mapping across origin, transit, destination and return flows
• Modus operandi indicators for land, maritime, air and postal movements
• Concealment techniques involving cargo, travellers, containers and documentation
• Border-risk indicators drawn from anomalies, repetitions and route displacement
• Hotspot analysis using seizures, incidents, intelligence reports and inspection data
• Interdiction effects assessed through displacement, substitution and criminal adaptation

Participants can distinguish trafficking and smuggling indicators while applying victim-centred safeguards.

• Legal distinctions between trafficking in persons and migrant smuggling
• Control indicators including debt, threats, document retention and dependency
• Recruitment patterns involving labour brokers, online adverts and family networks
• Victim-centred interviewing principles, referral pathways and safeguarding obligations
• Financial and communications indicators linked to exploitation and facilitation
• Evidence needs for exploitation, movement, benefit and coercive conduct

Participants can identify financial indicators and frame financial inquiries supporting organised-crime cases.

• Placement, layering and integration patterns within criminal financial flows
• FATF risk-based approach applied to organised-crime financial exposure
• Transaction analysis using counterparties, velocity, structuring and anomalies
• Beneficial-ownership inquiries across companies, trusts and nominee arrangements
• Trade-based money-laundering indicators in invoices, shipments and payment flows
• Suspicious transaction reports assessed against predicate offences and typologies

Participants can identify corruption and insider-risk mechanisms that enable organised crime.

• Corruption typologies involving bribery, coercion, patronage and conflict interests
• Facilitator mapping across licensing, procurement, border control and financial services
• Insider-threat indicators including unexplained wealth, access misuse and associations
• Red flags in permits, inspections, seizures and evidence-handling records
• Segregation of duties and audit trails reducing opportunity for collusion
• Integrity-risk assessments linking vulnerable processes to criminal incentives

Participants can assess how organised crime uses digital infrastructure, fraud and online markets.

• Cyber-enabled fraud models involving phishing, mule accounts and impersonation
• Online marketplace indicators for illicit goods, services and recruitment
• Digital evidence categories from devices, platforms, logs and blockchain records
• Cryptocurrency tracing concepts, wallet clustering and exchange-offramp indicators
• Infrastructure assessment covering domains, hosting, messaging and payment services
• Operational security practices used by criminal actors to reduce attribution

Participants can develop transparent analytical judgments and communicate uncertainty clearly.

• Analysis of competing hypotheses testing alternative explanations against evidence
• Key assumptions checks identifying unsupported beliefs and decision consequences
• Confidence statements based on source quality, corroboration and analytical limits
• Indicators and warnings linked to defined escalation thresholds
• Separating fact, inference, assessment and recommendation within intelligence products
• Cognitive-bias controls addressing anchoring, confirmation and groupthink risks

Participants can prepare decision-ready intelligence products for operational and strategic audiences.

• Intelligence report structure using key judgments, evidence and confidence statements
• Executive summaries tailored to decisions, risks and required actions
• Threat matrices displaying actors, capabilities, harms and priority responses
• Visual products using route maps, timelines, network charts and flow diagrams
• Briefing techniques for contested assessments and senior challenge questions
• Dissemination plans specifying recipients, handling restrictions and feedback routes

Participants can structure an investigation around hypotheses, evidence requirements and lawful priorities.

• Case theory linking suspected offences, actors, evidence and legal elements
• Investigative hypotheses prioritised by harm, feasibility and evidential value
• Evidence plans covering witnesses, documents, devices, finances and surveillance
• Chronologies integrating incidents, communications, travel and financial transactions
• Chain-of-custody requirements for physical, digital and documentary evidence
• Decision logs recording authorisations, rationale, risks and investigative outcomes

Participants can select appropriate cooperation channels for cross-border intelligence and evidence needs.

• Police-to-police cooperation channels, liaison officers and urgent information requests
• Mutual legal assistance requests for evidence, restraint and asset recovery
• Extradition considerations involving dual criminality, proportionality and human rights
• Joint investigation teams and coordinated operational planning arrangements
• Information-sharing agreements defining purpose, retention, safeguards and onward transfer
• Jurisdictional mapping for offences, victims, assets and investigative actions

Participants can apply legal and ethical safeguards to intelligence and enforcement decisions.

• Necessity and proportionality tests for intrusive investigative measures
• Privacy principles governing collection, retention, access and disclosure
• Non-discrimination safeguards in targeting, screening and risk assessment
• Victim protection duties during intelligence collection and enforcement operations
• Ethical decision records documenting harms, alternatives and supervisory review
• Data-minimisation controls for shared personal and operational information

Participants can design coordinated responses that combine prevention, disruption, investigation and protection.

• SARA model applied to scanning, analysis, response and assessment
• Response options spanning prevention, disruption, prosecution and asset denial
• Roles and responsibilities assigned through RACI decision matrices
• Interagency coordination protocols covering escalation, meetings and task ownership
• Performance measures tracking harm reduction, disruption and safeguarding outcomes
• Contingency planning for retaliation, displacement and operational compromise

Participants can identify asset-recovery opportunities and integrate financial disruption into response planning.

• Asset tracing from subjects through nominees, businesses and financial instruments
• Proceeds-of-crime indicators involving luxury assets, property and cash movements
• Freezing, seizure, confiscation and forfeiture concepts within legal frameworks
• Parallel financial investigations supporting disruption and evidential case development
• Asset-management considerations for preservation, valuation and disposal decisions
• Recovery strategies coordinated with foreign counterparts and financial institutions

Participants can identify and manage operational risks associated with organised-crime work.

• Operational risk assessments covering threats, vulnerabilities and protective controls
• Source-protection measures for confidentiality, exposure and retaliation risks
• Officer-safety planning for arrests, searches, surveillance and field meetings
• Information-security controls for case files, communications and digital devices
• Compromise indicators requiring escalation, containment and operational reassessment
• Post-operation reviews capturing lessons, welfare needs and control improvements

Participants can build, review and present a complete transnational organised-crime threat assessment and coordinated response plan.

• Threat profile integrating actors, markets, routes, harms and enabling conditions
• Intelligence requirements and collection plan addressing priority knowledge gaps
• Network chart identifying key actors, facilitators, assets and vulnerabilities
• Financial inquiry plan linking suspicious flows to criminal hypotheses
• Multi-agency response plan using SARA, RACI and measurable outcomes
• Legal, ethical and information-sharing safeguards documented within proposed actions
• Senior briefing presentation defending priorities, evidence, confidence and recommendations