Strengthening Analytical Competence in (Cyber) Intelligence

Abstract

Sweden’s intelligence education system lacks the technical-domain competence required to meet the analytical demands of contemporary cyber intelligence. This finding emerges from a diagnostic analysis of eleven international intelligence education programmes using the Intelligence Competence Framework (ICF), which combines a multi-level analytical structure (strategic, operational, tactical) with the domain classification (technical, formal, informal) of the Systemic-Holistic Approach. When applied to the programmes referenced by Sweden's government inquiry on intelligence reform (SOU 2025:78), the framework reveals that formal and informal domains receive strong coverage across all programmes while the technical domain is systematically underarticulated — particularly at the tactical level, where only one of eleven programmes achieves strong coverage. Three interdependent capability requirements emerge from an analysis of SOU 2025:78, five international programme models (the German BND, the Danish MICS, the French DIReM, the ICE CIADM module, and the Norwegian Etteretningsskolen), consultations with Swedish intelligence practitioners, and contemporary analyses of AI-supported intelligence (NSCAI, Snow Globe, Emergent Intelligence). Organisationally, the proposed intelligence academy requires a professional authority function that sets competence standards across the intelligence community rather than delivering education alone. Educationally, programmes that integrate technical content with professional practice through apprenticeship models, twin-track specialisations, and practitioner-led instruction produce broader competence coverage than purely academic programmes. Technologically, baseline digital literacy encompassing data provenance, tool limitations, and AI-assisted analytical workflows must be treated as a structural requirement in curriculum design rather than as an optional specialisation. The practitioner consultations identified three specific capability gaps in the current Swedish system: OSINT training that moves beyond keyword searching, exposure to AI-assisted analytical workflows before operational deployment, and secure technical environments for realistic practice. A Swedish intelligence academy built on existing European models will inherit the same technical-domain deficit unless technical competence is embedded as a design principle from the outset.