The Certified Cyber Intelligence Analyst (CCIA) is a 52 CPE-credit, generative-AI-augmented training program that teaches OSINT collection, structured analytic techniques, bias mitigation, deception detection, and AI-assisted intelligence reporting across a 16-week self-paced path. Graduates produce decision-ready intelligence products under IAFIE-aligned standards and earn the Certified Cyber Intelligence Analyst credential recognized by federal agencies, defense contractors, and Fortune 500 security teams.
What You Will Learn
Core tradecraft delivered across 15 generative-AI-enhanced modules
- OSINT collection and source validation — disciplined collection planning, provenance controls, anonymous browsing tradecraft, and structured use of open sources
- Structured Analytic Techniques (SATs) — Analysis of Competing Hypotheses, Key Assumptions Check, Red Team analysis, Devil's Advocacy, and 30+ advanced techniques
- Cognitive bias mitigation — recognize and counter confirmation bias, anchoring, groupthink, and mirror imaging in analytic production
- Generative AI-assisted tradecraft — apply AI to source validation, draft reporting, bias detection, and forecasting without surrendering analytic judgment to the model
- Deception and denial detection — identify hostile information operations, deception planning, reflexive control, and adversary narrative engineering
- Adversary targeting and dossier development — build threat actor profiles, map APT group capabilities, and assess intent and motivation
- Intelligence reporting standards — BLUF and AIMS frameworks, ICD 203 tradecraft compliance, confidence language, and warning indicators
- Operational security (OPSEC) — persona construction, infrastructure hygiene, attribution defense for collection operations
What You Will Be Able To Do After
Concrete operational capabilities upon completion
- Produce intelligence assessments that meet IAFIE and ICD 203-equivalent tradecraft standards under operational deadlines
- Plan and execute multi-source OSINT collection operations with documented provenance and source-reliability grading
- Apply SATs to high-stakes assessments, including ACH and structured red-team analysis for contested judgments
- Build and brief adversary dossiers covering capability, intent, opportunity, and indicators of change
- Detect and document hostile influence operations, narrative manipulation, and cognitive warfare campaigns targeting your organization
- Integrate generative AI into the intelligence production workflow as an analytic accelerator while preserving human judgment
- Write and brief intelligence products to executive, operational, and tactical audiences with appropriate confidence language
- Lead a cyber threat intelligence team through the full intelligence lifecycle from PIR validation to dissemination feedback
Who This Is For
- Threat intelligence analysts moving from indicator-driven reporting to assessment-driven production
- Cyber threat intelligence team leads building or maturing organizational intelligence programs
- SOC analysts and incident responders transitioning into intelligence-focused roles
- Counterintelligence and insider threat practitioners integrating cognitive and behavioral analysis into their tradecraft
- Federal civilian and defense analysts seeking IAFIE-aligned tradecraft training with CPE credit
- Security leaders developing intelligence literacy to evaluate and direct analyst output
- Career changers from military intelligence or law enforcement translating analytic skill into cyber-domain practice
Prerequisites
- No formal prerequisites required — the course is designed for working analysts at all experience levels
- Recommended: 1+ years in cybersecurity, intelligence, or a related analytic discipline
- Helpful: familiarity with the intelligence cycle, basic OSINT tooling, and analytic writing conventions
- Technical: a workstation capable of running a Linux VM and browser-based OSINT tools; corporate email address for enrollment validation
How CCIA Differs From Other Cyber Intelligence Training
Cyber intelligence training is dominated by technically-oriented courses focused on indicator hunting and SIEM operation. CCIA is purpose-built for analytic tradecraft — the discipline of converting raw collection into decision-ready assessments — rather than tool operation.
| Dimension | CCIA (Treadstone 71) | Typical Alternative |
|---|---|---|
| Standards alignment | IAFIE / PHIA / ICD 203-equivalent tradecraft | Vendor curriculum or NIST framework only |
| Analytic foundation | CIA / DIA tradecraft adapted to cyber domain | Technical indicator analysis without analytic framework |
| SAT coverage | 30+ structured analytic techniques with applied exercises | 2-4 techniques referenced, rarely practiced |
| AI integration | Generative AI as analytic accelerator with bias controls | AI treated as a separate tool or omitted entirely |
| Cognitive warfare | Embedded across modules with Russian / Chinese / Iranian doctrine | Not addressed |
| Instructor access | Direct mentor access to Treadstone 71 principal analysts | Anonymous instructor or rotating teaching assistants |
| Federal recognition | NICCS-listed in CISA cybersecurity workforce catalog | Vendor certification only |
| Lineage | Operational since 2002; first master's-level cyber intelligence curriculum (Utica College, 2009) | Recent curriculum without analytic-tradecraft heritage |
Treadstone 71 is a veteran-owned cyber intelligence firm operational since 2002, codifying CIA and DIA-style intelligence tradecraft for the cyber domain. The firm's foundational capability rests on a rare synthesis of United States Air Force cryptologic linguistics (Arabic and Russian), United States Army armored reconnaissance, academic study of Middle Eastern and Russian history, language, and political systems at Trinity College, Middlebury College, and Colgate University, and direct in-country immersion in Jeddah, Kingdom of Saudi Arabia during the formative years of the modern jihadist movement (1988–89). A Master of Science in Information Assurance from Norwich University extends the field tradecraft into enterprise-scale risk management. The aggregate methodology has been continuously refined across four continents of operational engagement.
Treadstone 71 was honored with the 2007 RSA Conference Award for Excellence in the Field of Security Practices and the 2007 SC Magazine Award for Best Security Team. Operational engagements span clandestine cyber HUMINT (including sustained adversary persona operations within Al-Qaeda and Taliban networks), real-time OSINT support to the Boston FBI following the 2013 Marathon bombing, FBI special-agent OSINT instruction, and senior-leader briefings at NATO Cooperative Cyber Defence Centre of Excellence (CyCon, Estonia), the United States Naval Academy, the Air Force Institute of Technology, and Johns Hopkins. Treadstone 71 is a founding member of the Cloud Security Alliance and holds board seats with Boston InfraGard, the Potomac Institute for Policy Studies, and the Journal of Law and Cyber Warfare.
From 2009 to 2014, Treadstone 71 codified field-tested clandestine cyber tradecraft into the first master's-level cyber intelligence curriculum, established at Utica College, with parallel instruction in Information Security Risk Management at Clark University. The Cyber Intel Training Center is the operational continuation of that curriculum — IAFIE-aligned, PHIA-standards-compliant, and listed in the CISA NICCS cybersecurity workforce development catalog. Treadstone 71 has authored or contributed to The Illusion of Due Diligence — Notes from the CISO Underground, Current and Emerging Trends in Cyber Operations, and multiple editions of the Computer Information Security Handbook, and appears as a primary subject-matter expert on CNN, CBS News, Fox News, BBC Radio, BBN, and i24News.
Considering a full cyber intelligence program build, not just training? Treadstone 71's consulting practice delivers operational intelligence programs end-to-end.
Explore Cyber Intelligence Program Build at Treadstone 71 →Begin Your Certified Cyber Intelligence Analyst Path
Self-paced enrollment opens immediately on purchase. Mentor support and live office hours throughout.
$4,699 USD 12% off featured programs with code TWELVEROFF at checkoutScroll up to use Teachable's enroll button, or contact info@treadstone71.com for enterprise / multi-seat licensing.