TThe Diary of a CEO
← All frameworks
Communication

Intelligence Urgency Ladder

Match the delivery channel to the consequence of delay

Difficulty
Easy
Time to result
~days to results
Steps
5
Confidence
98%

Kiriakou describes five CIA labels for communicating immediacy: routine, priority, immediate, flash, and critic. The mechanism is a shared escalation ladder. Low-consequence information can wait; higher levels move toward reading first, waking a decision-maker, or initiating an emergency response. A team can adapt the ladder by defining the cost of delay, the expected response time, and the channel attached to each level. This protects attention because ordinary updates do not compete with crises, while severe events do not depend on a sender improvising how loudly to ask for help. The labels alone are insufficient: each must map to an owner and action. Teams should review false alarms and delayed escalations so the ladder remains trusted.

Origin

Kiriakou describes urgency labels used for CIA reporting to senior US officials. Extracted from The Diary of a CEO.

Core principles

  • 01Urgency should reflect the cost of delay
  • 02Not every update deserves an interruption
  • 03Critical information needs an explicit escalation path
  • 04Shared labels reduce hesitation and alert fatigue

How to run it

  1. 1

    Define the levels

    Create a small ordered set from low urgency to existential emergency. Define each level by the consequence of waiting.

    Pro tip Five levels are enough to preserve meaningful distinctions.

    Watch out Labels based on emotion rather than consequence will drift.

  2. 2

    Map response times

    Give every level a maximum acknowledgement time and a named owner.

    Pro tip Make the highest level unmistakably immediate.

    Watch out An urgent label without an accountable recipient changes nothing.

  3. 3

    Map communication channels

    Use asynchronous channels for low levels and progressively more interruptive channels as delay becomes costly.

    Pro tip Reserve wake-up calls or paging for the top levels.

    Watch out Overusing emergency channels creates alert fatigue.

  4. 4

    Classify and send

    State the event, assigned level, evidence, required decision, and deadline in one concise message.

    Pro tip Include what changed and what happens if nobody acts.

    Watch out Do not bury the requested action inside background detail.

  5. 5

    Reclassify and review

    Raise or lower the level as evidence changes, then review misses and false alarms after the event.

    Pro tip Track classification errors, not just response speed.

    Watch out Keeping an outdated level can waste attention or hide danger.

In the wild

From routine to critic

Kiriakou says routine reporting could wait, priority material could be read later that day, immediate material should be read first, flash could justify waking the president, and critic meant an event such as war or an embassy being overrun. The progression tied delivery urgency to the severity of the situation.

Decision-makers received ordinary reporting without treating it like a crisis, while catastrophic events triggered interruption.

Classifying a production outage

A software team labels a cosmetic defect routine, a degraded background job priority, a customer-facing slowdown immediate, a broad outage flash, and confirmed destructive data loss critic. Each level has a response time and paging rule.

Engineers receive proportionate alerts and know exactly when to wake the incident commander.

Common mistakes

Calling everything urgent

If ordinary work receives emergency labels, recipients learn to ignore the ladder.

Leaving response undefined

A classification has little value unless it determines who responds, how quickly, and through which channel.

Is it for you?

Best for

It is best for operations teams, executive briefings, security incidents, and any environment with mixed-priority information.

Not ideal for

It is not ideal when labels have no agreed response time, owner, or escalation channel.

From the transcript

There are these levels of immediacy.

John Kiriakou · (24:30)

There's flash, which means, oh my god, something terrible just happened.

John Kiriakou · (25:00)

And then there's critic, which means, they're coming over the embassy walls, we're at war.

John Kiriakou · (25:00)

From the episode

CIA Whistleblower: They Can See All Your Messages! I Was Under Surveillance In Pakistan!