
INT-01-00
Analysis of Competing Hypotheses
Why our brains get threat assessment wrong, and what to do about it
Downloads for This Series
INT-01 ACH Companion Study Guide
Complete reference: eight-step process summary, blank matrix template, hypothesis set checklist, indicator planning worksheet, and a condensed bias catalogue
Download PDF →
Order the Printed Workbook
Printed and bound companion workbook for INT-01 — all worksheets, checklists, and reference tables in a field-ready format
Order now →
Analysis of Competing Hypotheses is a structured method for evaluating multiple explanations for an observed situation without letting your brain quietly eliminate the ones you do not want to be true. This lesson explains why that matters: what cognitive bias is, why confirmation bias in particular degrades threat assessment, and what ACH does differently. Lessons 1 through 3 cover the three core principles, the eight-step process in full, and a complete applied scenario. This lesson is the foundation. Do not skip it.
The Problem ACH Solves
The Threat to Your Thinking
Before you can understand what ACH does, you have to understand what it is designed to fix. The problem is not laziness. It is not carelessness. The problem is the normal operation of a human brain under conditions of ambiguous information, which is exactly the condition that every threat assessment, every vetting decision, and every MAG security evaluation operates under. Your brain is not malfunctioning when it produces bad analysis. It is doing exactly what evolution built it to do, and that is precisely the problem.
The core issue is this: human beings do not process information neutrally. We process it through a set of cognitive shortcuts called heuristics, which under normal social conditions save enormous time and produce good-enough results. The problem arises when those same shortcuts are applied to analytical problems, where good-enough is the threshold at which bad decisions get made and surprises occur. In intelligence work, surprise is the metric of failure.
Confirmation bias is the most operationally dangerous of these heuristics. Once you form an initial impression of a situation — a person seems trustworthy, a threat seems unlikely, a scenario seems implausible — your brain begins filtering incoming information to fit that impression. Evidence that confirms the initial impression gets processed and retained. Evidence that contradicts it gets minimized, reinterpreted, or discarded. This process is largely unconscious. You do not experience it as bias. You experience it as reasonableness. The person who disagrees with your assessment seems to you to be the one who is not thinking clearly.
The intelligence community has documented the consequences of confirmation bias repeatedly and at cost. The failure to anticipate the 1973 Yom Kippur War, the misreading of Iraqi weapons programs, numerous tactical surprise events — in each case, substantial contradictory evidence existed in the record. Analysts had access to it. It did not change the assessment because the assessment was already formed and the incoming evidence was being filtered through it rather than testing it.
The Other Biases That Compound the Problem
A Catalogue of Analytical Failure Modes
Confirmation bias is the dominant threat, but it operates alongside several others that compound its effects. A serious student of analytical tradecraft needs to be able to name these, recognize them in their own reasoning, and understand how ACH addresses each of them.
Anchoring is the tendency to place disproportionate weight on the first piece of information received about a situation. Once that anchor is set, subsequent information is evaluated relative to it rather than on its own terms. In a vetting context, a strong first impression from an early referral contact functions as an anchor. Everything the candidate does afterward gets measured against that impression rather than evaluated independently.
Availability bias causes analysts to overweight information that is recent, vivid, or emotionally salient. A threat that happened in a neighboring community last month is treated as more probable than a threat with a higher base rate that has not produced a recent local example. The dramatic incident feels more analytically important than the quiet pattern.
Mirror imaging is the assumption that adversaries, unknown actors, or ambiguous persons think, value, and behave the way you do. An analyst who would never attend a community event for the purpose of intelligence collection assumes that most people at such events are there for legitimate community reasons. That assumption is the operational opening that a skilled collector exploits.
Groupthink is the suppression of dissenting analysis within a team or organization in favor of consensus. When everyone at the table agrees on an assessment, it feels like the assessment is robust. It is often instead a sign that the dissenting interpretation has not been heard or has been socially discouraged. ACH addresses groupthink directly because its structured process forces every hypothesis, including the dissenting one, to be evaluated against the full evidence set.
The vetting problem is an analytical problem
Consider a common vetting scenario. A candidate is referred by a trusted long-term member. The referral creates an anchor. The candidate is personable, knowledgeable, and helpful at early events. These behaviors are consistent with a genuine community member — but they are also consistent with a skilled infiltrator building rapport. The information is identical in both cases. What differs is which hypothesis you are holding when you interpret it.
If your initial impression is positive, each additional positive interaction confirms it. Neutral signals get interpreted as positive. Ambiguous signals get explained away. By the time a genuinely concerning indicator appears, it is evaluated against a confirmed-feeling prior assessment that was never subjected to structured scrutiny. The result is a conclusion that feels thoroughly examined and is actually poorly tested.
ACH does not prevent this by giving you better information. It prevents it by changing the procedure. Instead of building a case for the most plausible explanation, you build a case against every explanation simultaneously, and you look specifically for the evidence that discriminates between them. The candidate who is genuinely trustworthy and the sophisticated infiltrator will eventually produce different evidence. ACH keeps you looking for that evidence rather than stopping when you feel comfortable.
What ACH Does Differently
The Method in Brief
ACH was developed by Richards J. Heuer Jr., a CIA analyst who spent decades studying how intelligence analysts actually think and where that thinking goes wrong. His foundational text, Psychology of Intelligence Analysis, is the source document behind this curriculum. Heuer built ACH on a single insight that inverts the normal analytical procedure: instead of asking which explanation has the most evidence supporting it, ask which explanation has the least evidence against it.
This inversion matters because of a basic logical asymmetry. Finding evidence that is consistent with a hypothesis does not prove it. Many hypotheses can be consistent with the same evidence. But finding evidence that is genuinely inconsistent with a hypothesis — evidence that cannot plausibly be true if the hypothesis is true — does something real. It weakens or eliminates that hypothesis. ACH is built around that asymmetry. It is a machine for finding and weighing contradictions rather than confirmations.
The method produces a matrix: hypotheses across the top, evidence down the side, and a structured assessment in each cell of whether that evidence is consistent, inconsistent, or not applicable to each hypothesis. The analyst reads across the rows, one evidence item at a time, assessing how each item fits every hypothesis simultaneously. The hypotheses that accumulate the fewest serious inconsistencies are the most credible. The hypotheses that are heavily contradicted are eliminated or downgraded. The conclusion that survives is the one that has been most aggressively tested, not the one that felt most plausible at the start.
The full eight-step process, the principles behind it, and a complete applied scenario follow in Lessons 1 through 3. This lesson’s job is only to establish the problem clearly enough that the solution makes sense when you reach it.
Before moving to Lesson 1, take two minutes with a current judgment you are carrying about a person, situation, or potential threat in your community. Write down your current assessment in one sentence. Then write down the single best piece of evidence that would prove you are wrong. If you cannot name that evidence quickly, you have not yet tested your assessment — you have only held it.
Keep that exercise in mind as you work through this course. ACH will give you the procedure for doing that test systematically.
Cognitive bias is not a malfunction — it is the normal operation of human heuristics applied to conditions where those heuristics produce systematic errors
Confirmation bias is the most operationally dangerous bias: it filters incoming information to fit an existing assessment, largely without the analyst’s awareness
Anchoring, availability bias, mirror imaging, and groupthink compound confirmation bias in real analytical settings
In vetting and threat assessment, all of these biases operate against you in predictable ways: strong referrals create anchors, positive early interactions feed confirmation bias, and social cohesion within the vetting team can suppress dissenting analysis
ACH addresses these failures by inverting the procedure: it asks which explanation has the least contradicting evidence rather than which has the most supporting evidence
This inversion is grounded in a logical asymmetry: disconfirmation is analytically more decisive than confirmation
↑ Back to Intelligence Analysis