Five Tiers of Cyber Intelligence Competency
Conventional security training sells scattered tool certifications while leaving analysts blind to adversarial intent, cognitive bias, and reflexive control. Treadstone 71 engineered the industry's Five-Tier Competency Model of Record—forging practitioners across five sequential identities: 01 The Operator, 02 The Analyst, 03 The Hunter, 04 The Architect, and 05 The Source.
Capability Expansion Across All Five Tiers
Click any tier below to morph the 6-axis capability radar polygon and inspect the exact tradecraft mandate, deliverables, and training path.
01 · The Operator
Every intelligence failure begins with undisciplined collection. The Operator strips away vendor feed dependency, translating executive concerns into Priority Intelligence Requirements (PIR → EEI → SIR) and collecting across surface, deep, and darknet environments behind unbreakable persona OPSEC.
02 · The Analyst
Transforms raw telemetry into finished, defensible intelligence. Grounded in Tradecraft at Machine Speed, The Analyst masters 66 Structured Analytic Techniques (SATs) across 9 families, runs Analysis of Competing Hypotheses (ACH), mitigates 35+ cognitive biases, and writes ICD 203 / PHIA probability-calibrated reports.
03 · The Hunter
Moves from reactive analysis to proactive adversary engagement across two specialized tracks: Track A (Cyber Counterintelligence CCIAI, Denial & Deception, Cyber-HUMINT Elicitation, PEOPINT/NARINT, and RU/CN/IR/KP Cognitive Warfare) and Track B (Transnational Cybercrime & Cryptocurrency Tracing).
04 · The Architect
Engineers the entire enterprise intelligence function. The Architect drafts intelligence charters and SOPs, scores organizational readiness against the Cyber Intelligence CMM™, models nation-state operating environments via STEMPLES Plus™ and Hofstede cultural dimensions, and delivers board-level strategic forecasts.
05 · The Source
Graduation from architecture to authorship. The Source synthesizes cyber intelligence (CCIA), counterintelligence (CCIAI), transnational crimeware, and People & Narrative Intelligence (PEOPINT / NARINT)—inventing new analytic methods, authoring organizational doctrine, profiling Unwitting Participants, and commanding multi-domain overwatch.
Diagnose Your Team's Operational Blind Spot
Select the operational symptom your SOC or CTI unit faces today to view the structural diagnosis and exact Tier prescription.
Replace IOC Noise With PIR-Driven Collection
Enforce 66 SATs, ACH & ICD 203 Estimative Rigor
Weaponize Active Deception, CCIAI & PEOPINT/NARINT
Build a CMM-Audited Program & Boardroom Foresight Engine
How Elite Intelligence Units Distribute Seats Across the 5 Tiers
A balanced intelligence program pairs a broad base of Tier 01–02 collectors and analysts with specialized Tier 03 hunters, Tier 04 architects, and Tier 05 doctrinal leads.
Train Your Entire Pyramid Under One License
Instead of negotiating separate purchase orders for every tier promotion or personnel rotation, the Enterprise Subscription (from $17,240/year, 5 to 50 seats) unlocks unrestricted 12-month access to every certification, role stack, and specialty course across all five tiers—bringing effective cost to about $42 per course per seat at the 50-seat tier.
smaller teams (3 to 5 operators): apply code TEAMINTEL at checkout for 10% off individual courses (6 or more: contact
