Warning intelligence is intelligence specifically focused on detecting threats before they materialize and communicating them to decision-makers in time for defensive or preemptive action. It is distinguished from general intelligence analysis by its obligation to trigger action rather than inform understanding — a warning that arrives too late for the decision-maker to act on is not a warning but a postmortem. The indications and warning system institutionalizes warning intelligence as a continuous monitoring function, watching predetermined indicators that a specific contingency may be approaching.
Warning intelligence operates at two scales. Strategic warning provides days to weeks of notice that an adversary is preparing a major action — mobilization, force repositioning, diplomatic preparation for war. Tactical warning provides minutes to hours of notice that an attack is underway or imminent — missile launch detection, border crossing, air defense activation. The two scales require different collection architectures: strategic warning depends on IMINT, SIGINT, and HUMINT integrated over time; tactical warning depends on persistent sensors, automated detection, and pre-delegated response authority.
The warning problem in 2026
The 2026 Iran war presents the warning problem from both sides simultaneously. From the Iranian perspective, the strategic warning indicators were substantial and publicly visible — carrier deployments, AWACS surveillance, leaked military preparation statements — yet Iran either failed to read them correctly, read them as coercive signaling rather than genuine preparation, or read them correctly but could not act on the warning in time. From the U.S.-Israeli perspective, the post-strike environment creates a warning problem in reverse: Iran’s dispersed asymmetric retaliation across multiple domains and actors generates warning requirements that exceed the collection architecture’s capacity to monitor them all simultaneously.
Roberta Wohlstetter’s foundational insight applies to both sides: warning is not a collection problem but a recognition problem. The signals were present before Pearl Harbor; the signals were present before 28 February 2026. The question is always whether the signals can be distinguished from the noise before the event they signal has occurred.
Related terms
- Indications and warning — the institutional system that operationalizes warning
- Indicator — the observable signals warning intelligence monitors
- Signal-to-noise — the epistemic challenge warning intelligence confronts