What makes a good intelligence analyst is visible in the work: a judgment supported by sources, an explanation of uncertainty, and a clear distinction between evidence and assumptions. Practice those behaviors with a sourced timeline, competing-hypotheses worksheet, estimative assessment, collection-gap matrix, and decision-maker briefing built entirely from public information.

What makes a good intelligence analyst observable to a reviewer?

A reviewer should be able to trace your reasoning, understand the question you answered, and see how you handled contrary information. Practice products make those behaviors visible. They do not replace the qualifications, assessments, or experience required by an employer.

ICD 203, Analytic Standards, in its publicly posted version amended June 12, 2023, provides a useful foundation. It applies to Intelligence Community analysis, with a specific exception for purely law enforcement information. For an applicant, its principles can inform practice without making a private exercise an official intelligence product.

The directive addresses source quality, uncertainty, assumptions and judgments, alternatives, customer relevance, and logical argument. The exercises below translate those ideas into practice assignments. They are suggested preparation activities, not agency test questions or an official portfolio requirement.

Choose a bounded public topic, such as a transportation disruption or a change in a published government program. Define a fictional customer and the question that customer needs answered. Use that same question across the exercises so you can see where your judgment changes as the work develops.

Exercise one: Can you build a sourced timeline with reliability notes?

Create a timeline that separates when events happened from when someone reported them. Include the source for each entry, what it directly establishes, and any limitation. The deliverable should let a reader reconstruct the sequence without treating every published statement as verified fact.

Start with public primary materials: an official notice, a published hearing, an agency update, or a public dataset. Record the publication date and the event date separately when they differ. Preserve the original wording in your research notes, then paraphrase accurately in the finished timeline.

Add a reliability note to each entry. Before describing a statement as corroborated, trace the reports back to their origins: an agency notice, a news story quoting that notice, and a commentary quoting the news story may all leave you dependent on the same underlying account, with the same unresolved limitation. Explain that dependence.

Deliverable: a timeline with a source register and a short explanation of unresolved sequence questions. Self-review: could another reader identify which entries are official claims, confirmed actions, or your own interpretations? If the timeline implies causation, identify what evidence supports that additional step.

Exercise two: Can you test competing hypotheses?

Write plausible alternative explanations for the event, then evaluate the evidence against each. Include evidence that could contradict your preferred explanation. The deliverable is a comparison worksheet and a short explanation of which uncertainty most affects the result.

For the fictional transportation question, possible explanations might involve maintenance, a temporary operating constraint, or a lasting capacity problem. These are practice hypotheses, not claims about an actual facility. Choose explanations that could lead to different judgments rather than restating the same idea in different words.

For each important observation, explain whether it is expected under a hypothesis, surprising under it, or compatible with several explanations. Avoid simply counting supportive entries. An observation that fits every hypothesis may do little to distinguish among them.

Deliverable: an evidence-by-hypothesis worksheet with notes on contradictory and missing information. Self-review: what finding would make you abandon your preferred explanation? Ask a peer to identify an alternative you dismissed too quickly, then revise the worksheet if the criticism holds.

Missing reporting requires care. If your argument depends on the absence of an announcement, explain why you expected an announcement in the sources you searched, whether those sources normally cover the event, and how a publication delay or incomplete search could leave the event invisible to you.

Exercise three: Can you write a concise estimative assessment?

Answer a forward-looking question with a main judgment, supporting evidence, key assumptions, and an explanation of uncertainty. Make the time horizon and outcome clear. The deliverable should tell the fictional customer what you assess and why, without burying the judgment in background.

For example, assess whether the public evidence supports continued disruption through a clearly defined planning period. State the period in the exercise instructions and use it consistently. Explain what “continued disruption” means so that a later review could determine whether your judgment was accurate.

Keep likelihood and confidence separate. A likelihood statement concerns the event; confidence concerns the basis for your judgment. Explain whether uncertainty comes from limited reporting, source disagreement, an untested assumption, or the complexity of the issue. Adding a confidence label without that explanation contributes little.

Deliverable: a short assessment with a source list, an explicit key assumption, and an indicator that would change the judgment. Self-review: can you underline the evidence, circle the assumption, and identify the reasoning that connects them? If the assumption fails, revise the conclusion accordingly.

Use the editing discipline discussed in writing that produces useful results to remove background that does not support the answer. Concision should preserve the qualification that keeps a claim accurate.

Exercise four: Can you build a collection-gap matrix?

Identify the information missing from your assessment, why it matters, and a lawful public source that might address it. Prioritize the gap that could most change your judgment. The deliverable is a research plan, not a license to collect protected information.

Useful columns include the unresolved question, affected judgment, consequence if the assumption is wrong, possible public source, and limitation of that source. “Need more information” is too vague. “Need confirmation that the announced repair has been completed” identifies a question you can actually investigate through public releases.

Separate an information gap from a skill gap. If you already have a dataset but cannot interpret its measures, you may need a methods reference or instruction before seeking more data. If the available source cannot answer your question, explain what remains unknowable from the public record.

Deliverable: a prioritized gap matrix with a short justification for the highest-priority question. Self-review: would resolving that gap change the assessment, or merely add background? Keep the plan within public materials and avoid contacting people under a false identity or attempting access outside your authorization.

Exercise five: Can you brief a decision-maker clearly?

Convert the assessment into a brief that leads with the judgment, explains the strongest evidence, identifies the main uncertainty, and addresses implications for the fictional customer. The deliverable is a briefing outline or slide deck with speaker notes and a question log.

Give the listener a reason to care about the finding. If the fictional customer is planning deliveries, explain how the assessed disruption affects the planning question. Keep your analytical judgment distinct from any optional scenario discussion about possible decisions.

Rehearse with a peer. Ask someone who has not read your research to restate the main judgment, explain its largest limitation, and identify what the fictional customer should watch for next; their answer can reveal whether your carefully qualified assessment became a much stronger claim when you presented it aloud.

Deliverable: the brief and a record of questions you could not answer. Self-review: did you acknowledge those gaps directly, or improvise facts to maintain fluency? Revise the assessment when a question exposes a real weakness, and record the reason for the change.

The Intelligence Community career-fields overview describes analytical work on political, social, cultural, geographic, technical, and military conditions. Use your fictional customer’s subject knowledge to decide which terms need explanation and which background can be omitted.

How should you score the finished products?

Use a qualitative review of sourcing, logic, uncertainty, relevance, and clarity. Mark each area ready for review, needs revision, or unsupported, and explain the rating. The purpose is to identify what to fix, rather than create a score that predicts hiring success.

Keep the earlier version and your revision notes. They give you a concrete interview example of receiving criticism and changing an assessment. Apply the same attention to reader expectations described in how writing style affects a job search.

What belongs in a portfolio or interview?

Use independently created public-source work and describe its scope honestly. Keep classified information, protected employer materials, and sensitive operational details out. Follow the employer’s submission instructions and any review obligations that apply to you before sharing professional work.

The Army’s application guidance expressly prohibits classified information in application packages. Avoid reconstructing a classified project from memory or assuming that removing names makes material releasable. When in doubt about professional content, ask the responsible security or review office.

A resume description can say you created an independent public-source assessment, tested alternative explanations, and revised the judgment after peer review. If the work was collaborative, explain which research, judgments, and revisions were yours, which came from teammates, and how you resolved a substantive disagreement, so the reviewer can assess both your own analytical contribution and the care you took to represent the shared work accurately. The sample demonstrates practice; it does not establish professional experience at the level of a particular vacancy.

Compare the duties and qualifications of a target job alongside the role differences discussed in intelligence analyst career and salary information. Choose the practice product that best demonstrates a requirement you can already support, and identify what further experience you need.

Frequently Asked Questions

Do these exercises count as an analyst certification?

No. They are independent practice assignments. Describe the products, methods, and feedback you received, and reserve certification language for credentials you actually earned. An employer’s required education, training, and experience remain separate questions.

Can I use the same topic for every exercise?

Yes. Reusing the research question lets you trace how the timeline, alternatives, assessment, gaps, and brief relate to each other. Keep the source record and explain any change in judgment rather than silently changing the evidence between products.

Should I submit every sample with an application?

Follow the vacancy’s instructions about requested documents and work samples. Use the exercises for preparation even when no portfolio is requested. If a sample is requested, choose relevant, shareable work and identify it clearly as an independent public-source exercise.

Which exercise should I start with?

Start with the sourced timeline. Select a bounded public event, record its primary sources, and add a reliability note beside each material entry before writing an assessment.