Risk management requires an understanding of what is happening, as well as what matters, and intelligence streams play an important role.

​

A strong intelligence capability begins with baselining. By reviewing organisational risk posture, historical incidents and lessons learned, teams can establish what "normal" looks like within their environment. This process helps identify which issues are routine and manageable, and which require rapid escalation and communication. Understanding criticality allows decision-makers to focus attention and resources where they will have the greatest impact.

​

During a live incident, intelligence should be drawn from multiple streams rather than a single source. CCTV systems, onsite observations, social and news media, internal reporting channels and, where relevant, information from emergency services can all contribute to a more complete operational picture. Individually, each source may provide only part of the story. Combined, they enable a more accurate assessment of the situation and support informed decision-making under pressure.

 

An often-overlooked aspect of intelligence reporting is the need to communicate confidence levels. Not all information is equal, and reports should clearly distinguish between what is confirmed, what is likely and what remains unclear or unknown. This approach allows leaders to make decisions based on the best available information while understanding the degree of uncertainty involved. It also reduces the risk of assumptions being mistaken for facts.

​

Finally, organisations should regularly exercise hypothetical scenarios and review real incidents to evaluate how intelligence is collected, analysed and shared. These reviews help identify strengths, expose gaps and highlight opportunities to better integrate intelligence into risk management processes. Over time, this continuous improvement cycle strengthens organisational resilience and enhances the ability to respond effectively to emerging risks.