The School organizes its teaching and research around seven academic clusters. A cluster is not a course list. It is a defined body of knowledge, a set of methods, and a stated competency outcome. Courses, certificates, and research all map back to one or more clusters, which is what keeps a growing catalogue coherent instead of letting it accumulate into a pile of unrelated topics.
The clusters are ordered by dependency rather than difficulty. Cluster 1 is prerequisite reasoning for everything after it. Clusters 2 and 3 are the working methods. Clusters 4, 5, and 6 are applied domains. Cluster 7 is the constraint layer that governs all of them.
Cluster 1 — Intelligence Foundations
Covers intelligence literacy, intelligence history, intelligence institutions, the intelligence cycle, the distinction between information and intelligence, collection and analysis, decision support, and intelligence ethics.
This cluster answers a question most people skip: what actually makes something intelligence rather than news, research, or opinion? The answer involves a requirement from a decision-maker, a deliberate collection effort, analysis that goes beyond restating sources, and delivery in a form and timeframe that can change a decision. Remove any of those and you have something else.
Studying the history and the institutions matters for the same reason doctors study misdiagnosis. Intelligence failure is well documented, and the failures are usually analytical rather than informational: the material was available and was misread. Competency outcome: a learner can locate any analytical task correctly within the intelligence cycle and explain which decision it is meant to support.
Cluster 2 — Analytic Methods
Covers structured analytic techniques, cognitive bias, alternative analysis, and estimative language.
This is the technical core. Structured analytic techniques exist because unaided expert judgment is unreliable in predictable ways: anchoring on first impressions, confirmation-seeking, mirror-imaging, and overconfidence in coherent stories. Techniques such as analysis of competing hypotheses, key assumptions checks, quality-of-information checks, and devil’s advocacy do not make analysts smarter. They make specific failure modes harder to commit silently.
Estimative language is treated as a discipline in itself. Likely, possible, and cannot be ruled out are load-bearing terms in a brief, and using them loosely transfers the analyst’s uncertainty onto the reader without warning. Competency outcome: a learner can run a structured technique end to end and produce a judgment with explicit confidence and named assumptions.
Cluster 3 — Open-Source Intelligence
Covers OSINT fundamentals, public-source collection, source verification, media analysis, academic and institutional sources, geospatial awareness, digital verification, and ethical documentation.
Open-source work is where most practitioners actually operate, and where the discipline is thinnest in practice. Finding material is easy; establishing that it is what it claims to be is not. This cluster separates the two questions the standards insist on separating, namely how reliable is the source and how credible is this specific piece of information, and treats them independently, because reliable sources report false things and unreliable sources sometimes report true ones.
Verification is taught procedurally: provenance, corroboration by independent sources, internal consistency, and documentation sufficient for another analyst to reproduce the finding. Geospatial and visual verification are introduced at foundational level. Ethical documentation is not optional here; it is part of the method. Competency outcome: a learner can build a verified, documented, reproducible open-source evidence base.
Cluster 4 — Early Warning and Risk
Covers indicators, signals, thresholds, risk classification, political risk, social risk, conflict risk, institutional risk, scenario analysis, and alert communication.
Early warning is the attempt to see deterioration before it becomes an event. It depends on indicator design, meaning the selection of observable, monitorable signals that would change if the situation were changing, and on threshold logic that states in advance what level of signal triggers what level of alert. Defining thresholds afterwards is how warning systems come to justify whatever happened.
The cluster covers risk classification across political, social, conflict, and institutional dimensions, and scenario analysis as the tool for handling futures that are not simple extrapolations. Alert communication is deliberately included: a warning that a decision-maker does not act on has failed regardless of its accuracy. Applied examples are published by the Intelligence Center early warning function.
Competency outcome: a learner can design an indicator set with defined thresholds and communicate an alert proportionate to the evidence.
Cluster 5 — Strategic and Geopolitical Analysis
Covers the strategic environment, geopolitical competition, national power, regional systems, the Indo-Pacific, Southeast Asia, maritime security, and state and non-state actors.
This cluster moves from method to context. Strategic analysis asks how power, geography, economics, and institutions interact over years rather than weeks. It requires understanding national power as a composite of military, economic, technological, demographic, institutional, and narrative capacity rather than as a single ranking.
Regional depth is concentrated on the Indo-Pacific and Southeast Asia, including maritime security, which is where the School’s own expertise and that of the School of Southeast Asian Studies are strongest. Non-state actors are treated as first-class subjects rather than an afterthought. Competency outcome: a learner can produce a structured strategic assessment of a regional situation.
Cluster 6 — Information Environment
Covers disinformation, misinformation, propaganda, cognitive influence, narrative analysis, media ecosystems, information integrity, and strategic communication.
The information environment is now an analytical domain in its own right, because a significant share of what an analyst encounters was produced to influence rather than to inform. This cluster distinguishes disinformation from misinformation by intent, teaches narrative analysis as a method for tracking how framing propagates through media ecosystems, and treats information integrity as something that can be measured and degraded.
Cognitive influence is examined mechanically: which vulnerabilities in human reasoning are exploited, and how. Strategic communication appears here because understanding influence operations and communicating responsibly draw on the same knowledge used in opposite directions. Competency outcome: a learner can map a narrative, assess likely intent, and evaluate information integrity in a contested space.
Cluster 7 — Intelligence Governance and Ethics
Covers accountability, legality, privacy, proportionality, oversight, data governance, responsible AI, professional standards, and human judgment.
This cluster constrains the other six. Analytical capability without governance is a liability, and the constraints are substantive rather than procedural: legality of collection, privacy and data minimization, proportionality between intrusion and public interest, oversight and accountability for judgments, and documented data governance.
Responsible AI belongs here rather than in a technology cluster, because the governance question raised by AI-assisted analysis is not what the tool can do but who is accountable for the output. The School’s position is that AI may accelerate collection, summarization, and drafting, and never substitutes for human judgment, verification, or approval. The requirement of human review is a standing rule, not a transitional one. The full policy is published under ethics and legal boundaries.
Competency outcome: a learner can assess whether an analytical activity is lawful, proportionate, documented, and properly reviewed before conducting it.
How clusters map to study
Foundation courses draw mainly on Clusters 1 and 7. Method courses sit in Clusters 2 and 3. Applied and advanced courses sit in Clusters 4, 5, and 6, with Cluster 7 as a permanent overlay. Certificate tracks are built by combining clusters: the OSINT and verification certificate, for instance, is Clusters 3 and 7 with foundations from Cluster 1, as set out under professional certificates. The complete course-to-level mapping is published in the course catalog, and the school overview is on the about the school page.