Intelligence

What is PIR?

Priority Intelligence Requirement: a question the intelligence team is expected to answer because it supports a specific decision.

A priority intelligence requirement is a question that leadership needs answered to make a specific decision, and that the intelligence team is therefore expected to work on. PIRs set what gets collected and what gets ignored.

A good PIR is specific, tied to a decision and time-bound, for example "Which ransomware groups are targeting European logistics firms this quarter, and through which initial access methods?" Vague PIRs such as "tell us about threats" produce vague intelligence.

Where you learn it

See PIR in a real investigation

Our missions put you in front of real logs, domains and forums, with these terms underlined where they appear.

Start learning free