Structured Analytic Techniques (SATs) IC Tradecraft Foundation — ACH, Premortem, Red Team, Devil's Advocacy, and Beyond
Structured Analytic Techniques are the codified analytic methods the United States Intelligence Community uses to discipline its judgment — to push back against cognitive bias, surface key assumptions, examine competing hypotheses, stress-test conclusions, and produce estimative judgments that hold up to scrutiny. SATs are not optional methodology for serious analytic work; they are the operational tradecraft that distinguishes intelligence analysis from informed opinion.
This flagship-tier course covers the full SATs catalog applied to cyber intelligence analysis — Analysis of Competing Hypotheses (ACH), Premortem Analysis, Red Team Analysis, Devil's Advocacy, Key Assumptions Check, Indicators and Signposts, Quality of Information Check, Deception Detection, Argument Mapping, and the rest of the technique library. ICD 203-compliant application of Heuer and Pherson's framework, calibrated to the cyber domain. Foundational reading for any analyst producing intelligence products at IC tradecraft standard.
What You'll Learn
The SATs catalog applied to cyber intelligence analysis
- Analysis of Competing Hypotheses (ACH) — Heuer's structured approach to systematically evaluate alternative explanations against available evidence. The technique that disciplines analytic judgment against confirmation bias and most-likely-hypothesis fixation.
- Premortem Analysis & Red Team Analysis — structured techniques for stress-testing analytic conclusions before they ship. Premortem assumes failure and works backward; red team adopts adversary perspective. Both produce defects an analyst working alone will not see.
- Devil's Advocacy & Team A / Team B — institutional techniques for forcing analytic challenge into the production process. When and how to apply each; the operational difference that matters for analytic output quality.
- Key Assumptions Check — the most overlooked SAT in routine practice and the most consequential. Surfacing the assumptions an analyst is treating as background fact, and what changes if any of them turns out to be wrong.
- Indicators and Signposts — structured construction of indicators for tracking adversary capability, intent, and operational tempo over time. The tradecraft that turns "watch this space" into operationally useful monitoring.
- Quality of Information Check & Deception Detection — disciplined source evaluation, deception markers, and the analytic techniques that protect against adversary-injected information designed to mislead.
- Argument Mapping & Estimative Language — visualization of analytic argument structure, plus the disciplined application of Kent probability language and ICD 203 confidence calibration to produce reporting that decision-makers can act on.
Course Content
The Operational Tradecraft That Distinguishes Intelligence Analysis
SATs as a category emerged from decades of IC operational experience and academic-grade methodological development — Richards Heuer's foundational work, Randolph Pherson's refinement and cataloguing, and the iterative refinement through CIA's Sherman Kent School and subsequent IC training pipelines. ICD 203 codified the analytic standards that SATs operationalize. The Tradecraft Primer formalized the technique catalog. The result is a coherent toolkit for analytic discipline — not just abstract method but operational tradecraft that working analysts can apply on deadline to live problems.
This course adapts the SATs catalog for cyber intelligence analysis specifically. The base techniques translate directly — ACH for adversary attribution, premortem for assessment of cyber program build risk, red team for stress-testing technical hypotheses, key assumptions check for cyber threat landscape forecasts. The course also covers cyber-domain-specific applications: deception detection in adversary-injected technical artifacts, indicators construction for adversary capability monitoring across long campaigns, and quality of information checks calibrated for OSINT sourcing where source reliability is often opaque. SATs is the methodology anchor for The Analyst Stack and the foundation that Critical Thinking, Analytic Writing, and the other Stack components build on.
The Methodology Flagship of The Analyst Stack
This SATs course is the methodology flagship of The Analyst Stack ($6,999) — the highest-priced single component at $1,499, anchoring the analytic-method band alongside Critical Thinking ($899) and Analytic Writing ($899). The Stack also includes the CCIA flagship certification course plus six additional analyst-foundation specialty courses. Together: comprehensive day-one analyst capability at substantial bundle savings versus individual enrollment.
Common Questions
Structured Analytic Techniques — FAQ
Intelligence analysts at any career stage producing analytic products to IC tradecraft standard, cyber threat intelligence professionals working attribution and forecasting, IC analysts entering or transitioning into cyber portfolios, policy advisors requiring estimative reporting on cyber topics, and academic researchers in intelligence methodology. Particularly relevant for analysts whose work will be reviewed against ICD 203 standards.
At $1,499 SATs is the largest single component of The Analyst Stack. The cost reflects the analytic depth — the course covers the full SATs technique catalog with cyber-domain operational application, not a survey overview. SATs is the methodology anchor that Critical Thinking ($899) and Analytic Writing ($899) build on. Comparable in scope and depth to Russian/Iranian doctrine flagships in the AI-Infused Cognitive Stack.
Yes. The course is calibrated to ICD 203 (Intelligence Community Directive 203 — Analytic Standards) and the IC Tradecraft Primer. Estimative language, confidence calibration, source characterization, and analytic standards all align with ICD 203 expectations. Analysts working in contexts where ICD 203 standards apply (IC, defense intelligence, federal civilian intelligence) will find the course directly applicable.
None formal. Familiarity with intelligence analysis or cyber threat intelligence concepts is helpful. The course is intermediate-to-advanced in technical depth — most learners benefit from also taking Critical Thinking & Cognitive Bias ($899) as complementary methodology grounding.
Yes. SATs is the methodology flagship component of The Analyst Stack ($6,999, 10 courses) — the anchor that other analyst-method components build on. Contributes substantially to the CCIA (Certified Cyber Intelligence Analyst) certification track, which references SATs methodology throughout its curriculum.
Treadstone 71 has taught Structured Analytic Techniques applied to the cyber domain continuously since 2008, when the firm codified field-tested intelligence tradecraft into the first master's-level cyber intelligence curriculum at Utica College. The SATs course reflects decades of IC operational practice translated for cyber-domain application — calibrated to ICD 203 standards, aligned with the IC Tradecraft Primer, and continuously refined across two decades of strategic adversary work. Veteran-owned, woman-led, NICCS-listed, IAFIE-aligned, operational since 2002.
Discipline Your Analytic Judgment. IC Tradecraft Foundation.
Self-paced. Intermediate-to-advanced. Full SATs catalog applied to cyber intelligence analysis. ICD 203 calibrated. Scroll up to enroll, or consider The Analyst Stack to combine this with Critical Thinking, Analytic Writing, and the full analyst methodology curriculum at substantial bundle savings.
$1,499 USD Self-paced · Methodology flagship · Lifetime access · CPE credits