text: Chapter 7
  UPDATE OR CREATE THREAT MODELS
  7-48. Creating or updating a threat model lets the analyst piece together information, identify gaps,
  predict threat activities or COAs, and plan ISR. There will always be information gaps in the threat model,
  so the analyst will always have some uncertainty. Threat models have three parts:
  • Convert threat doctrine or patterns of operation to graphics.
  • Describe the threat’s tactics and options.
  • Identify HVTs and HPTs.
  CONVERT THREAT DOCTRINE OR PATTERNS OF OPERATION TO GRAPHICS
  7-49. Threat templates graphically portray how the threat might use its capabilities to perform the
  functions required to accomplish its objectives. Construct threat templates by analyzing the intelligence
  database and by evaluating the threat’s past operations. Determine how the threat normally organizes for
  combat, and how he deploys and employs his forces and assets. Look for patterns in how the threats
  organize their forces, timing, distances, relative locations, groupings, or use of the terrain and weather.
  Threat templates are tailored to the needs of the unit or staff section creating them.
  7-50. Threat templates for a LRS team are tailored to the team's mission. If the LRS team is tasked to
  locate the threat's regimental or division reconnaissance, the LRSU needs the threat template showing how
  the threat reconnaissance units are deployed. In some OEs, threat templating can be more difficult and
  unpredictable. The LRS team must consider the enemy situation and mission. Ask this question: “If I had
  to accomplish the same mission, and had no terrain constraints, where would I place my assets?” Analyze
  patterns and associations, even though these require frequent updates and are somewhat reactive.
  DESCRIBE THE THREAT'S TACTICS AND OPTIONS
  7-51. The threat model includes a description of the threat’s preferred tactics. A description is still
  needed, even if the threat’s preferred tactics are shown in graphic form. The description--
  • Lists the threat's available options.
  • Is not a "snapshot in time"--should portray actions as events unfold.
  • Aids in war-gaming and in developing threat COAs, and situational templates.
  • Addresses timelines, phases, WFFs.
  7-52. Describe and determine the threat's goal(s). Threat objectives are often, but not always, what the
  unit’s mission is trying to prevent. Threat objectives are also often actions taken by the threat to prevent
  unit mission accomplishment. Describe them in terms of purpose and endstate.
  IDENTIFY HVTS AND HPTS
  7-53. An HVT is the asset the threat commander requires for successful completion of a COA. It is
  shown and described on the template. Examples include--