This page describes the intelligence collection framework that underpins the Daily Threat Report (DTR), DTR Lite, the Daily Preparedness Brief, COMMS Watch, and the full suite of sector-specific products from Fortune Favors the Prepared. It identifies the threat areas monitored, the source tier structure applied, the analytical standards that govern how sources are used, and the general categories of sources drawn on in each area.
Specific source selections, collection cadences, operational sweep parameters, mandatory-source lists, and subscription-tier source details are not included in this public edition. Licensed subscribers and enterprise partners receive the full Master Source Registry as part of their product documentation.
Collection baseline at a glance
Counts reflect the Daily Threat Report collection set as of registry v2.22 (05 Jun 2026). The FFTP product suite draws on 629 unique sources across all products – 367 Tier 1, 253 Tier 2, and 9 Tier 3. 49 sources carry mandatory daily-sweep status in the DTR build. 21 sources carry a standing framing caveat (adversary state media and editorially-aligned outlets).
Products built on this baseline
The Master Source Registry underpins the following published products. Each product draws on a product-specific subset of the suite-wide collection:
Collection scope – why we monitor international sources
The collection baseline is deliberately not US-only. It draws on US federal and regulatory sources, allied and partner government channels, adversary government channels, intergovernmental organizations, international and regional media, humanitarian and non-governmental crisis-monitoring organizations, and official open-source feeds – all graded and handled under the tier and source-handling rules below.
This is a requirement of the analysis, not a preference. A threat picture built only from US-domestic sources is structurally incomplete:
- The threat originates abroad. Conflict, chokepoint disruption, disease outbreaks, pharmaceutical supply chain failures, export controls, and currency events begin outside US borders. The authoritative first report is almost always a foreign government, a foreign regulator, an intergovernmental body, or regional media – not a US agency. Waiting for a US source to restate it adds a lag the practitioner cannot afford.
- Corroboration requires more than one vantage point. A claim carried only by one government – including the US government – is a single-source claim. Independent foreign and international sourcing is what allows a finding to be confirmed rather than carried at low confidence.
- Adversary and allied channels are read for positioning. Official statements from adversary and allied governments are collected to assess intent, messaging, and posture – never adopted as fact without corroboration, always framed.
- Supply chains and infrastructure are global. Active pharmaceutical ingredients, semiconductor components, fertilizer feedstocks, and energy commodities move through foreign producers, foreign ports, and foreign regulatory regimes. The disruption signal is almost always foreign-origin. Monitoring it at source is the only way to provide meaningful lead time.
How international sourcing feeds the sector reports
| Sector report | Why international sources are required |
|---|---|
| Construction & Manufacturing | Inputs, components, and finished goods move through foreign producers, foreign ports, and foreign export-control regimes. A plant-floor or materials-cost picture built only from US sources misses the upstream disruption already in motion abroad. |
| Transportation & Logistics | Maritime chokepoints, foreign port status, foreign carrier actions, and intergovernmental maritime and aviation advisories are core inputs. The disruption signal is almost always foreign-origin and reaches US logistics on a lag. |
| Banking & Finance | Sanctions regimes, foreign central-bank actions, sovereign and currency events, and cross-border payment-system status are set outside the US. Foreign and intergovernmental sourcing is required to see the exposure before it lands domestically. |
| Healthcare | Disease outbreaks, foreign drug-manufacturing and active-ingredient supply, and international health-body declarations drive the sector. International health organizations and foreign drug regulators are routinely the first authoritative source. Pharmaceutical supply chain monitoring extends to upstream active-ingredient geography and manufacturing concentration risk. |
| COMMS Watch | GPS/GNSS interference events, internet routing disruptions, and satellite communications failures are global phenomena. Regional Internet Registries, European aviation authorities, and maritime AIS monitoring platforms provide ground-truth data on denial events with no US-domestic equivalent. |
In every case the same tiering and the same framing-caveat and aggregator-stripping rules apply. International scope widens the aperture; it does not lower the evidentiary bar.
Source tier definitions
| Tier | Definition |
|---|---|
| Tier 1 – Primary | Authoritative and official sources: federal agencies, regulatory bodies, government databases, intergovernmental organizations, allied-government press services, and Fortune Favors the Prepared proprietary condition assessments (PREP-CON, COMCON). Highest evidentiary weight. Cited directly whenever available. 367 Tier 1 sources suite-wide. |
| Tier 2 – Secondary | Established media organizations, vetted industry bodies, commercial data providers, and professional monitoring services with demonstrated accuracy records. Used for corroboration and coverage of gaps not addressed by Tier 1 sources. 253 Tier 2 sources suite-wide. |
| Tier 3 – Supplemental | Crowdsourced data, open modeling tools, and community-generated feeds. Never cited as standalone sources. Used only to supplement Tier 1 and Tier 2 findings. Entries resting on single Tier 3 data receive an UNCONFIRMED confidence rating. 9 Tier 3 sources suite-wide. |
Source-handling standards
Four standing rules govern how sources are used across all FFTP products, regardless of tier. These rules are part of the broader Analytical Standards and Tradecraft framework.
Framing caveat for state and partisan media
Adversary state media and opposition-aligned or partisan outlets are never cited standalone for factual claims about events, casualties, damage, or impact. They are used only for official positioning and messaging, leadership intent and rhetoric, or as one side of a dual-source check against an independent Tier 1 or Tier 2 source. 21 sources in the registry carry a standing framing caveat.
Aggregator stripping
Sources that republish primary reporting without original analysis cannot be cited as the basis for an entry. Reporting is traced back to, and cited from, the original primary source. Where a primary source cannot be confirmed, the entry is marked UNCONFIRMED.
Mandatory sweep requirement
49 sources in the DTR baseline carry mandatory daily-sweep status. These sources must be individually checked and dispositioned at every build cycle regardless of whether they have produced new intelligence. The sweep produces a per-source disposition record – CLEAR, NSTR, or flagged for inclusion – retained as the evidentiary audit trail. No DTR product may be delivered without this sweep completed and reconciled.
ICD 206 and ICD 203 compliance
The tier structure, framing-caveat rule, aggregator-stripping policy, and named-source requirement are the FFTP implementation of Intelligence Community Directive 206 (Sourcing Requirements for Disseminated Analytic Products). Confidence calibration – HIGH, MODERATE, LOW – is calibrated against source tier per ICD 203 (Analytic Standards).
Coverage domains
The DTR collection baseline spans the following domains. Each domain draws on a dedicated set of Tier 1 and Tier 2 sources. Sub-domains without current activity receive an NSTR (Nothing Significant To Report) disposition at each cycle rather than being omitted – this distinguishes a quiet period from a monitoring gap.
Source categories by domain
The table below identifies the general categories of sources used in each major domain. Individual source selections are not disclosed in this public edition.
| Domain | Tier 1 source categories | Tier 2 source categories |
|---|---|---|
| Cyber & ICS Security | Federal cyber agencies, PSIRT advisories from major infrastructure vendors, vulnerability databases, national cybersecurity authorities (US and allied), military cyber commands, EU law enforcement cyber intelligence bodies | Specialist cyber threat intelligence firms, ICS/OT security research, investigative cybersecurity journalism, internet exposure monitoring services, commercial threat intelligence platforms, vulnerability exploitation tracking platforms |
| Geopolitical & Conflict | US executive branch and military commands, allied foreign ministries, intergovernmental organizations, UN bodies, official conflict-zone maritime advisories | International wire services, foreign policy research institutes, conflict event databases, regional specialist journalism, open-source conflict mapping, daily foreign policy news briefs from major research institutions |
| Soft-Target & Public-Venue Security | Federal active-shooter incident studies and safety resources, the national behavioral-threat-assessment research center, federal active-shooter and school-safety preparedness programs, the interagency federal-facility physical-security standards body, and federal counter-insider-threat program standards | Faith-community and interfaith information-sharing organizations, healthcare-facility security associations, and the academic global terrorism-incident database |
| Public Health | US federal public health authorities, WHO, regional international health organizations (Americas, Europe, Africa), foreign drug and health regulators (EU, UK, Canada, Japan, Australia), international harmonization bodies, EU health security crisis management portal, wastewater epidemiology surveillance networks, global disease eradication program authorities | Academic infectious disease centers, pre-publication genomic sharing platforms, specialist health trade press, medical journals, humanitarian medical organizations, automated global outbreak detection platforms, international scientific early-warning advisory networks |
| Pharmaceutical Supply Chain | US Pharmacopeia supply chain intelligence, US and international drug shortage databases (US, EU, Australia), European drug quality authority, Pan-American health organization, Brazilian health regulator | Global pharmaceutical industry associations, EU critical medicines stakeholder bodies, specialist health trade press |
| Nuclear Nonproliferation & Radiological Monitoring | International treaty verification monitoring networks (global seismic, hydroacoustic, infrasound, and radionuclide detection), nuclear nonproliferation research institutions with primary research mandates, arms control policy and treaty-compliance bodies | Academic proliferation research centers, open-source nuclear analysis organizations using satellite imagery and technical data |
| Internet & Comms Infrastructure | Regional Internet Registries (BGP routing authority), European GNSS interference NOTAMs, GPS program authorities, space situational awareness databases, US telecom regulators, maritime trade operations centers | Commercial BGP analysis platforms, internet outage detection research (active probing + darknet), open network interference measurement (245 countries), internet shutdown aggregation platforms, commercial network intelligence platforms, carrier status pages |
| Energy & Grid | DOE disturbance reporting, NERC reliability, EIA petroleum/gas/grid data, NRC event notifications, OPEC secretariat, International Energy Agency, pipeline safety authority | Real-time grid status aggregators, outage data aggregators, utility trade press, commodity analysis services |
| Severe Weather, Wildfire & Natural Hazards | NOAA/NWS alerts, Storm Prediction Center, Weather Prediction Center, National Hurricane Center, Joint Typhoon Warning Center, Climate Prediction Center, multi-model ENSO probability forecasting, interagency national drought information system, National Water Prediction Service, USGS earthquake and volcano programs, NOAA tsunami warning centers, US Forest Service national avalanche center, NIFC and federal wildfire data, NOAA marine and ocean prediction, FEMA alert systems, and the World Meteorological Organization global severe-weather warning aggregator | Global and European flood-awareness modeling, European wildfire information system, wildfire-smoke air-quality mapping, the European-Mediterranean seismological centre, NASA satellite fire detection and global landslide modeling, incident information systems |
| Maritime & Aviation | IMO safety circulars, MARAD advisories, FAA NOTAMs and system status, EASA conflict zone bulletins, ICAO advisories, TSA security directives, EUROCONTROL GNSS NOTAMs, international aviation industry standards and safety bodies | Vessel tracking platforms, flight tracking platforms, conflict zone airspace monitoring, specialist maritime intelligence, maritime editorial press, energy cargo intelligence platforms, sanctions-evasion vessel tracking databases, near-real-time chokepoint transit monitoring |
| Financial Services | FDIC, OCC, Federal Reserve, FINRA, FinCEN, SEC, OFAC, SWIFT advisories, US and international financial regulators (ECB, EBA, FCA, Bank of Japan, and others), international standard-setting bodies (BIS, FSB, IOSCO), daily financial system stress index and quarterly structural vulnerability monitor | Financial sector ISAC, specialist banking and securities trade press, financial threat intelligence platforms |
| Supply Chain & Logistics | Bureau of Industry and Security, Port of Los Angeles/Long Beach, Bureau of Transportation Statistics, PHMSA pipeline safety, USDA supply and demand reports, federal motor carrier safety authority | Freight market intelligence platforms, maritime cargo tracking, trade logistics press, cargo crime and asset protection intelligence bodies (Americas and EMEA), logistics conditions diffusion index, ocean and air freight rate benchmarking platforms |
| Global Trade & Shipping Economics | World Trade Organization, UN Trade and Development, the Baltic Exchange dry-bulk index authority, and the Suez and Panama canal operating authorities; global manufacturing and services PMI compilers and the OECD composite-leading-indicator series | Container freight-rate index providers, Asia-origin container-rate exchanges, container-line schedule-reliability analysts, ocean and air freight rate benchmarking platforms, and global cement and concrete industry data |
| Commercial Facilities & Retail Crime | Federal firearms theft and loss tracking (ATF FFL program), FBI incident-based crime reporting by location type, local law enforcement agency public alert platforms | Organized retail crime research bodies, retail industry crime tracking associations, real-time public safety radio aggregators, systematic local news aggregation platforms, firearms industry trade alert networks |
| Energy Infrastructure Security | DOE electric disturbance reporting, NERC reliability standards and enforcement, regional grid operators (Midwest and Southwest), EIA petroleum, natural gas, and production data, NRC nuclear event notifications, FERC regulatory orders, International Energy Agency | Real-time grid status aggregators, utility trade press, commodity pricing and market analysis services, power market intelligence |
| Water & Wastewater Security | CISA water sector advisories, WaterISAC threat intelligence, EPA water security and enforcement database, US Geological Survey water resources, NOAA National Water Prediction Service, primary drinking water and wastewater utility trade associations (US-based) | Water sector security research and regional utility networks |
| Humanitarian & Food Security | UN humanitarian coordination and financial tracking bodies, global food security early warning and famine monitoring authorities, interagency global food crisis assessment networks, global disease eradication authorities | Humanitarian medical organizations, specialist food security and famine monitoring press |
| AI Threat & Governance | National AI safety institutes, annual empirical AI capability and governance benchmark reports from major research universities, academic AI safety research centers | Specialist AI safety and governance research bodies, AI incident monitoring platforms, specialist technology policy press |
| Systemic & Catastrophic Risk | Annual systemic and global risk horizon assessments drawing on large expert panels | Catastrophic and existential risk research institutes, global challenge quantitative risk modeling bodies |
| Data Center & Infrastructure | US and international grid reliability authorities (North American and European), wholesale electricity market operators and independent market monitors, DOE disturbance reporting, FERC orders, EIA generator inventory, energy regulators in major data center markets (UK, EU, Ireland, Singapore), Lawrence Berkeley National Laboratory data center energy analysis, US and EU telecom and submarine cable bodies, Congressional Research Service | Data center industry standards and research bodies, specialist data center trade press, real-time grid status and outage aggregators, energy and power industry trade press, commercial energy market analysis, policy research institutes covering technology infrastructure and climate-grid interaction |
Analytical standards applied to sources
Sourcing discipline is the foundation of the analytical standards framework. The rules below govern every entry in every FFTP product – they are not aspirational; they are mechanically enforced at the build level.
| Standard | What it means in practice |
|---|---|
| Named-source requirement | Every claim in a published entry carries an attribution. Unnamed “reports suggest” or “sources indicate” phrasing is prohibited. |
| Source-symmetric skepticism | The same evidentiary bar is applied to claims from US government sources as to claims from allied governments, international organizations, and media. Official US source status does not reduce the confirmation requirement. |
| Dual-source confirmation | Significant factual claims are confirmed by at least two independent sources before being reported at confirmed confidence. Single-source entries are clearly marked and carry reduced confidence. |
| Operator-supplied data primacy | Where the operator has supplied primary data (NWS snapshots, official rosters, direct agency output), that data is authoritative over any summary or compacted version of it. Re-verification against the operator’s original data is required before each delivery. |
| No carryover without justification | Items from prior cycles are not carried into the current cycle without current-cycle data to support them. Carryover without justification is a build error; the pre-delivery audit explicitly checks for it. |
| Estimative language discipline | Forward-looking judgments use a fixed probability ladder (almost no chance / very unlikely / unlikely / roughly even chance / likely / very likely / almost certain) and separate likelihood from confidence (HIGH / MODERATE / LOW) – never collapsed into a single term. Every judgment carries alternative hypotheses with supporting and disconfirming evidence. |
| Anti-padding audit | A mandatory pre-delivery audit checks for entries that restate without adding new information, calendar items elevated to intelligence entries, and entries that duplicate coverage already handled in a dedicated section. Items failing the audit are cut, not softened. |
| Pre-delivery gate | Every DTR cycle must pass three mechanical gate checks before delivery: (A) per-source sweep reconciliation with individual dispositions recorded for all mandatory sources; (B) dead-carryover and padding audit with kept/cut decisions recorded; (C) compaction-recovery verification confirming key figures against original operator data. No product ships without passing all three. |
Recent framework activity
Current edition – v2.21 (02 Jun 2026): 40 new sources added across four comprehensive collection-gap sweeps, bringing the suite-wide total to 629 (367 Tier 1, 253 Tier 2, 9 Tier 3). This edition closes six previously identified monitoring gaps and extends three existing domains. Nuclear nonproliferation and radiological monitoring: a five-source layer added covering international treaty verification networks, nonproliferation research institutions, arms control policy bodies, and open-source nuclear analysis – filling a structural gap previously covered only by safety and event-notification sources. Public health early-warning: three sources added providing automated real-time global outbreak detection, CDC operational wastewater epidemiology (1,200+ sites, 120 million people monitored), and EU health security crisis management. These operate as pre-notification signal layers that precede formal WHO and CDC alert channels by days to weeks. Global disease eradication program monitoring added for poliovirus environmental surveillance coverage. Financial system stress indicators: a daily financial stress index and quarterly structural vulnerability monitor added to the financial services domain – the first real-time stress-signal layer in a domain previously covered primarily by regulatory and after-the-fact reporting. Maritime expansion: maritime editorial press, energy cargo intelligence, near-real-time Hormuz transit tracking, and sanctions-evasion dark-fleet monitoring added, particularly relevant to the ongoing Iran conflict and Strait of Hormuz conditions. Ocean and air freight rate benchmarking added, filling the prior absence of an air freight rate source. Supply chain intelligence: cargo crime and asset protection intelligence bodies (North America and EMEA), federal motor carrier safety authority, and logistics conditions diffusion index added, providing cargo theft intelligence and a 30-60 day leading indicator of freight market conditions. Systemic risk domain formalized: a new Systemic and Catastrophic Risk domain drawing on annual expert-panel horizon assessments and quantitative risk modeling from dedicated research institutes. PRIOR v2.20 (02 Jun 2026): DCIB/AITB merge – the standalone Data Center and Infrastructure Brief (DC product code) retired; source set absorbed into AITB. Commercial facilities and retail crime, energy infrastructure security, and water and wastewater security layers expanded. Two new standing products (ESB, WWSB) launched. PRIOR v2.18 (30 May 2026): natural-disaster and destructive-weather monitoring, soft-target and public-venue security, global trade and economic indicators, emergency-management and crisis-response authorities, and cyber, AI-incident, insider-threat, and data-center-resilience frameworks expanded. The framework is reviewed and expanded on a continuing basis; this page reflects the current edition.