211. ERWT has also been incorporated into JTAC's assessment of the UK National Threat Level, alongside Islamist terrorism, left-wing, anarchist and single-issue terrorism (LASIT) and Northern Ireland-related terrorism in mainland Britain (the NIRT threat level in Great Britain is assessed by MI5).
Investigations
212. MI5 is reliant on information collected either from its activities or provided to it by external sources, whether that is the public, police or partner agencies. MI5 describes an individual who is, or has been, investigated because they are a potential threat to national security as an 'SOI'. In order to assess and manage intelligence, MI5 uses a formal triage process for incoming intelligence, a prioritisation system for ongoing investigations, and a higher-level review process to set strategic priorities.[1]
The 'Receive' stage
213. All information and intelligence entering MI5 or CTP comes through a single point of entry (SPOE). Processes are in place to receive and assess intelligence 24 hours a day and 365 days a year. On receipt, intelligence is assessed before either being rejected, or progressed as a 'trace' or a 'lead'.
A trace is a request for a check across MI5 indices to determine potential links to extremist activity that does not immediately meet the potential for lead development.
A lead is the term to describe all intelligence or information that is not linked to an ongoing investigation that, following initial assessment, suggests involvement in activities of National Security (NS) concern.
214. Intelligence meeting the threshold for a lead is tested for links to existing investigations, and:
- if the lead is linked to an existing investigation then it is forwarded to the appropriate investigative team; or
- if the intelligence does not relate to an existing investigation, the lead is assessed for credibility and a new investigation is launched, if appropriate.
The 'Assess' stage—the Intelligence Handling Model
215. Management of all new counter-terrorism led intelligence and threat reporting not linked to ongoing counter-terrorism investigations received by both MI5 and the police is conducted through the 'Intelligence Handling Model' (IHM). This is a joint initiative between MI5 and the police and provides a single point of entry for intelligence and ensures new leads benefit, where appropriate, from co-ordinated MI5, GCHQ, JTAC and CTP tracing and expertise. This co-ordination is carried out by dedicated teams in MI5. The IHM provides a robust framework to ensure that finite, covert investigative resources are directed against
- ↑ Written evidence - MI5, 31 January 2020.
83
