Cynthia Grabo (1927–2018) was a CIA analyst who spent four decades working on Soviet warning intelligence and whose classified handbook Anticipating Surprise: Analysis for Strategic Warning (originally written in 1972, declassified and published in 2002) codified the indications and warning methodology that remains the foundation of the discipline’s warning function.
Contributions
The indicators methodology. Grabo’s central contribution was the systematization of warning intelligence as a continuous monitoring function. Her framework identifies categories of indicators — military, political, economic, diplomatic — and establishes criteria for evaluating their significance. The key insight is that warning intelligence does not predict whether an event will occur; it assesses whether the probability is increasing. An indicator does not mean war; it means the conditions for war are becoming more favorable.
Recurring failure modes. Grabo identified failure modes that appear across the discipline’s case literature: breakdown of information flows between collection and analysis; failure to understand the adversary’s intentions on the adversary’s own terms (rather than through the lens of mirror-imaging); decision-makers failing to grant legitimacy to analysts’ warnings; and the “everyone’s responsibility” problem — when warning is designated as an additional duty for all analysts rather than the primary mission of dedicated warning analysts, “no one does it consistently well.”
The 2026 relevance. Grabo’s framework applies to both sides of the 2026 Iran war. On the Iranian side, the indicators of the impending U.S.-Israeli strike were abundant — carrier deployments, AWACS surveillance flights, the largest military buildup since 2003, on-the-record statements about preparing for “weeks-long sustained operations.” Grabo’s framework would classify these as high-confidence strategic warning indicators. That Iran apparently did not act on them represents either a warning failure (the indicators were not synthesized into a warning assessment) or a decision-maker failure (the warning was produced but leadership did not act on it) — both failure modes Grabo documented. On the U.S.-Israeli side, the post-strike environment creates the warning challenge Grabo described at its most demanding: multiple adversary actors (Iran, Hezbollah, Houthis, Iraqi militias) generating indicators across multiple theaters simultaneously, with each actor’s indicators requiring separate evaluation and the coordination between actors itself being an indicator requiring additional monitoring.
Related concepts
- Indications and warning — the system she codified
- Warning intelligence — the product her methodology produces
- Indicator — the observable signals her framework categorizes
- Signal-to-noise — the epistemic challenge her indicators methodology confronts