Counter-Terrorism
Counter-terrorism spans prevention, protection, pursuit and response. The candidate must understand the continuum from radicalisation and mobilisation through planning, preparation and attack, because interventions differ by phase and questions often test which lever fits which phase.
Key concepts: the terrorist attack cycle (target selection, reconnaissance, acquisition, preparation, execution, escape); threat versus vulnerability versus risk (threat = intent and capability; vulnerability = exposure; risk combines them); and the distinction between tactical response and strategic prevention (countering violent extremism). Understand intelligence-led policing, disruption options (prosecution, control orders, travel restrictions, community engagement), and the principle of proportionality under law.
Traps: questions that equate a protected belief with extremism, or that propose surveillance of a community rather than of individuals. Another trap is treating radicalisation as identical to terrorism - most radicals never commit violence, and prevention work targets violence, not belief. Watch for answers that ignore legal authority or that prioritise a dramatic response over a lawful, proportionate one. Also distinguish threat assessment (is there intent and capability?) from risk assessment (what is the likelihood and impact?).
Rule of thumb: intent + capability + opportunity = threat in action. Remove any one element and the attack is disrupted; the least intrusive effective removal is preferred. Worked example: intelligence indicates an individual has expressed violent intent and has sought instructions on explosives manufacture. Intent and capability are both present, so this is high threat and warrants immediate escalation - not merely monitoring - because the preparation phase is short and the potential harm severe.