A common mistake made by OSINT practitioners is collecting information before deciding what information is actually needed. Social media, news articles, public records, commercial databases and internal intelligence systems provide access to vast quantities of information.
It is tempting to begin searching immediately, gathering everything that appears remotely relevant. While this approach often produces large amounts of data, it doesn’t necessarily support a good intelligence product.
The best OSINT analysts approach collection differently. Rather than asking "What information can I find?", they begin by asking "What information do I need?" This distinction lies at the heart of collection planning.
A collection plan provides a structured approach to gathering information. It identifies the intelligence gaps that need to be filled, prioritises them according to their importance and determines the most appropriate sources and collection methods for obtaining the required information. Done well, it keeps investigations focused, reduces wasted effort and ensures that collection activities directly support the intelligence requirement.
Why collection planning matters
Collection is often the most resource-intensive stage of the intelligence process. Every search conducted, every database queried and every request made consumes time, money or operational resources. Without a clear plan, analysts can quickly become overwhelmed by information that contributes little towards answering the original question.
A structured collection plan helps avoid this problem by ensuring that collection is purposeful rather than opportunistic. It provides a roadmap for the investigation, allowing analysts to concentrate on the information that is most likely to influence the final assessment.
Collection planning also improves transparency. If decisions are later questioned, the analyst can demonstrate why particular sources were used, why others were not and how collection activities were linked directly to the agreed intelligence requirement.
Identifying intelligence gaps
Every investigation begins with some information already available. Collection planning helps to identify what is still unknown. A useful starting point is to divide the available information into three categories:
- What do we know?
- What do we think we know?
- What do we still need to know?
The third category forms the intelligence gaps that the collection plan is designed to address.
For example, if an organisation is conducting due diligence on a potential supplier, it may already know the company's directors, registered address and financial accounts. The remaining intelligence gaps may concern beneficial ownership, political exposure, litigation history or adverse media reporting. These gaps then become the focus of collection.
Thinking in terms of intelligence gaps prevents analysts from repeatedly collecting information they already possess while overlooking areas that genuinely require further investigation.
Prioritising collection
Not every intelligence gap is equally important. Some questions must be answered before a decision can be made, while others simply provide additional context. Attempting to investigate everything with equal effort is rarely practical. Collection should therefore be prioritised according to factors such as:
- The importance of the information to the final decision.
- The likelihood that the information can be obtained.
- The time available.
- The resources required.
- The consequences of not obtaining the information.
This helps ensure that limited resources are directed towards the collection activities most likely to influence the outcome of the assessment.
Selecting collection methods
Once intelligence gaps have been identified, the analyst must decide how they will be addressed. Different questions require different collection methods. Publicly available information may answer some requirements, while others may require access to internal records or financial data. In some investigations, interviews, surveillance or forensic collection may also be appropriate, depending on the legal powers available and the nature of the enquiry.
Analysts rarely rely on a single source. Instead, they seek to corroborate important findings through multiple independent sources wherever possible. The choice of collection method should always reflect the intelligence requirement rather than personal preference or familiarity with a particular tool.
Building a collection plan
Collection plans vary in complexity, but most include the same core elements. For each intelligence gap, the analyst should identify:
- The question that needs answering.
- The priority of that requirement.
- The sources likely to provide the information.
- The collection method.
- Who is responsible for the task.
- Any deadlines or review dates.
Even a simple table can provide enough structure to coordinate collection activities across an investigation and ensure that work is not duplicated unnecessarily.
Collection is not analysis
One of the easiest traps for analysts is confusing collection with progress. Finding more information does not necessarily improve the assessment. At some point, additional collection begins to produce diminishing returns, consuming valuable time without materially changing the intelligence picture.
Analysts must continually ask whether new information is likely to influence the assessment. If the answer is no, collection may already be sufficient. Knowing when to stop collecting is often just as important as knowing where to look.
Collection plans should evolve
Collection planning is not a one-off exercise completed at the beginning of an investigation. As new information emerges, intelligence gaps change. Some questions are answered, while others appear for the first time. Priorities shift, new sources become available and operational requirements evolve.
For this reason, collection plans should be reviewed regularly throughout an investigation. They should remain flexible enough to respond to changing circumstances while continuing to support the original intelligence requirement. A collection plan is therefore best viewed as a living document rather than a fixed checklist.
Effective collection begins with good planning
The quality of an intelligence assessment depends not only on how well information is analysed, but also on how intelligently it is collected.
Analysts who begin searching without a plan often accumulate large volumes of information that add little value. Those who start by identifying intelligence gaps, prioritising collection and selecting appropriate sources produce investigations that are more efficient, more focused and ultimately more useful to decision-makers.
Collection planning is about collecting the right information.
Get new handbook chapters as they go live.
Join the Intelligence with Steve community for new guides, member-only articles and training updates.
Join free