Building an Intelligence Team: The SOCIAL Perspective

Intelligence Team 03

We know building intelligence teams is the result of several processes. The two we’re covering as they relate to our considerations are cognitive processes and social processes.

The reason we’re discussing these perspectives is because intelligence team dynamics, especially within the cybersecurity culture, have several challenges. We have moved away from direct hire and into contracting team members. The contracts tend to be short-term and force the team member to focus on self-performance.

It’s this contracting culture that makes the cognitive perspective so prevalent in our industry.  And it’s this “TRY BEFORE YOU BUY” mindset of hiring managers that makes the social perspective much harder to establish within the intelligence team.

When you’re looking at an intelligence team from a social perspective, it focuses on the importance of collegial interactions to competently assess data. It also focuses on managing relationships with everyone involved on the team. We see it as the hive, we see it as the collective, where everyone has something to contribute, where diversity makes us stronger. 

Building an Intelligence Team: The SOCIAL Perspective

Video Blog Series

PART 1  |  PART 2  |  PART 3  |  PART 4  |  PART 5  |  PART 6  |  PART 7

This video (part 3 of 7) was recorded on July 15, 2022, while teaching the Certified Threat Intelligence Analysis Manager course to a corporate client. The specific content of the video was taken from Domain 14 of the CTIAM course, “Considerations for Creating an Intelligence Team.”

The remaining videos in this series will be recordings taken from the same domain and are being disseminated to the public with the permission of the client and Phase2 Advantage Cybersecurity.

Although comments have been disabled on this blog for security purposes, we encourage feedback and response on the social media platform in which this blog article was viewed.3

Michael I. Kaplan is the founder and CEO of Phase2 Advantage, and currently manages the Content Development and Publishing initiatives of the company. He is also the Chairman of the Cyber Security Advisory Committee at Savannah Technical College. The publishing division of Phase2 Advantage creates cybersecurity textbooks and workbooks listed on Amazon, Ingram's VitalSource platform, and all major booksellers.

Michael's technical areas of specialization are Incident Response, Business Continuity / Disaster Response Planning, Information Security Management, and Digital / Network Forensics.

Feel free to contact Michael at