Definitions
Definitions are split into the following categories:
- Event Definitions
- Group Definitions
- Attack Definitions
- Counter Terrorism Definitions
Event Definitions [back to top]
Click on the links to access the full definitions:
Event date
The date on which the event began, based on the local time of the event
Event type
The top-level classification used to categorise each event recorded as one of three non-state armed group (NSAG) event types, or three counter-terrorism (CT) event types.
- CT Judicial - Any formal measure taken by the state's judicial system against a militant or militant network, e.g. charges, convictions, extraditions, etc.
- CT Operation - An incident in which state security forces attempt to kill, capture or disrupt militants and their networks.
- CT Statement - An incident in which a non-militant actor makes a notable written or verbal statement about militants and/or militancy.
- NSAG Action - An incident in which militants or their supporters commit a non-violent political act (such as signing a ceasefire), or a non-political violent act (such as a bank robbery).
- NSAG Attack - An incident in which a sub-state actor (either an individual or organisation) commits an illegal act of politically or ideologically motivated violence against persons or property, with the aim of coercing others to adopt or comply with its objectives, or to submit to their authority.
- NSAG Statement - An incident in which militants or their supporters issue a notable written or verbal statement.
Event significance
- Critical - An event that has international significance and is therefore likely to be of especial interest to all JTIC clients.
- Significant - An event that is particularly significant in the context of the theatre in which it occurred, and is therefore likely to be of especial interest to analysts of that theatre, and also of interest to JTIC clients in general.
- Notable - An event that is notable in the context of the theatre in which it occurred, and therefore likely to be of interest to analysts of that theatre, but which is unlikely to be of particular interest to JTIC clients in general.
- Common - An event that is routine in the context of the theatre in which it occurred, and therefore likely to be of limited interest even to analysts of that theatre.
Region / country
The country or countries in which the event occurred.
Group Definitions [back to top]
Click on the links to access the full definitions.
Group family
A set of militants – usually within a particular country – which share a common set of characteristics that may be used to define them as a sub-set within the wider militant scene
Group name
A set of militants – usually within a particular country – which share a common set of characteristics that may be used to define them
Group scope
The geographical range of the threat posed by the group, determined with reference to the group’s operational history and/or stated targeting history
Group orientation
The ideology which motivates group formation and mobilises recruits
Group role
Indicates whether the actor being recorded played an Active or Passive role in the event.
- Active - The actor initiated the event being recorded, e.g. carried out an operation, or issued a statement.
- Passive - The actor did not initiate the event, but was directly impacted by it, e.g. the target of an operation, or the subject of a statement.
Attack Definitions [back to top]
Click on the links to access the full definitions
- Attack scale
- Tactic
- Target's environment
- Attack platform
- Attack weapon
- Suicide attack
- Target sector
- Target sub-sector
- Target object
- Target nation
- NSAG statement
- NSAG statement medium
- NSAG action type
Attack scale
- Extreme - Extreme attacks must meet one or more of the following criteria:
- At least 100 civilian, security force, or unidentified fatalities.
- Structural damage to an iconic national building or monument, or a key piece of critical national infrastructure.
- Macro - Macro attacks must meet one or more of the following criteria:
- At least 10 civilian, security force, or unidentified fatalities, or 50 wounded/abducted;
- Structural damage to a notable building or piece of infrastructure (government offices, military barracks, airports, international hotels, etc).
- Micro - Micro attacks must meet one or more of the following criteria:
- At least one civilian, security force, or unidentified person killed/wounded/captured;
- Structural or otherwise significant damage to any building or piece of infrastructure.
- Destruction of any vehicle, equipment or other property.
- Nano - If an attack was carried out, but caused no civilian, security force or unidentified casualties, and no more than superficial damage to buildings or other property (i.e. consistent with vandalism), it should be classified as a Nano attack.
- Disrupted - If an attack was underway, but was prevented from being executed by some kind of external intervention, it should be classified as a Disrupted attack, e.g. an IED is emplaced but gets defused before it was supposed to detonate; a suicide bomber is shot before he can detonate; or a rocket is intercepted and destroyed in flight.
- Failed - If an attack was underway, but was prevented from being executed by some kind of human or technical failure, it should be classified as a Failed attack, e.g. when an IED is emplaced but fails to detonate for any reason.
Tactic
- Ambush - An Ambush is an attack involving a close-quarters engagement with a mobile or moving target, typically launched from a pre-prepared position, which seeks to use the element of surprise to ensure the encounter is short, one-sided and decisive.
- Hit And Run - A Hit And Run is an attack involving a brief close-quarters engagement with a fixed position, with the aim of quickly inflicting damage or casualties while minimising the exposure of the militants (who may remain mobile throughout the encounter). Unlike a Raid or Assault , there is no attempt to capture or destroy the target.
- Assault - An Assault is an attack involving a sustained close-quarters engagement with a fixed position which is capable of offering armed resistance, with the aim of seizing, looting or destroying the position, or attacking its inhabitants.
- Raid - A Raid is an attack involving a sustained close-quarters engagement with a fixed position which is not capable of offering armed resistance, with the aim of seizing, looting or destroying the position, or attacking its inhabitants.
- Engagement - An Engagement is a close-quarters encounter between two armed forces manoeuvring in the same environment, i.e. between land forces (where the incident does not qualify as an Ambush ), between military aircraft, or between naval vessels.
- Stand-off/Area Attack - A Stand-off/Area Attack is a one-sided attack which does not normally involve a close-quarters engagement with the target, but which instead employs a stand-off area weapon - such as IEDs, mines, artillery, mortars, rockets, missiles, etc - designed to cause collective and indiscriminate damage from a distance to people and property within the immediate radius of the target.
- Sabotage - A Sabotage operation is an attack whose objective is to damage or destroy specific equipment, vehicles, monuments or infrastructure with the aim of preventing them from serving their function. While the intent may be to cause casualties (e.g. by derailing a train), the act of sabotage itself (e.g. removing train tracks) should not itself cause casualties.
- Assassination - An Assassination is an operation which has the limited objective of killing a selectively-targeted individual or group of individuals in a highly discriminate, focused attack.
- Wounding - A Wounding is an attack whose apparent primary objective is the inflicting of deliberately non-lethal injuries on an individual or group of individuals, typically with the aim of punishing or coercing the individual(s) and/or their community.
- Kidnap - A Kidnap operation is an attack involving the seizure, removal and holding of an individual (or group of individuals), typically but not necessarily for the purposes of securing some demand, or for publicity.
- Siege, Hostage, Hijack - A Siege, Hostage, Hijack operation is an attack involving the public seizure and holding of a building or vehicle - along with any inhabitants - typically but not necessarily for the purposes of securing some demand, or for publicity.
- Riot - A Riot is a mass demonstration that involves the illegal use of violence against people or damage to property.
- Coup - A Coup is an illegal and unconstitutional attempt to seize state power via a single decisive act which aims to decapitate the existing administration - typically by killing, capturing or exiling the current leadership.
Target's environment
- Urban - The target was in a built-up area at the time of the attack, i.e. cities, towns and other large settlements. Includes attacks on targets travelling on a river passing through such an area.
- Rural - The target was in a rural or wilderness area at the time of the attack. Includes attacks on targets travelling on a river passing through such an area.
- Maritime - The target was at sea or on a large inland water body at the time of the attack.
- Air - The target was airborne at the time of the attack.
- Virtual - The target was a virtual entity, existing only on the internet or other computer network (e.g. a website or database).
Attack platform
- Man-portable - The weapon was portable and handheld (e.g. a rifle) or emplaced by hand (e.g. an IED).
- Vehicle-borne - The weapon was mounted on a land vehicle, or the vehicle itself was used as an impact weapon.
- Sea-launched - The weapon was mounted on a maritime vessel, or the vessel itself was used as an impact weapon.
- Air-launched - The weapon was mounted on an aircraft, or the aircraft itself was used as an impact weapon.
- Mail - The weapon was delivered through the postal system, e.g. a mail bomb or anthrax letter.
- Cyber - The weapon was delivered through a computer network, e.g. a virus was deployed, or an operating system was hacked.
- Other/Unknown - It was unclear from reports how the weapon was delivered to the target.
Attack weapon
- Direct Fire Infantry - Personal handheld weapons requiring line of sight engagement with the target, e.g. handguns, rifles, RPGs, and other small-arms.
- Direct Fire Heavy - Crew-manned or platform-mounted weapons requiring line of sight engagement with the target, e.g., anti-aircraft gun, vehicle/ship/aircraft-mounted cannon, 'technicals', etc.
- Indirect Fire Tactical - Unguided indirect fire weapons enabling stand-off engagements within the immediate battle space, such as mortars, artillery, short-range rockets.
- Indirect Fire Strategic - Unguided indirect fire weapons enabling strategic engagements beyond the immediate battle space, such as medium and long-range rockets.
- Guided Missile - Guided weapons enabling stand-off engagements within the immediate battle space, or strategic engagements beyond the immediate battle space. Includes surface-to-air missiles (SAM), man-portable air defence systems (MANPADS), guided anti-tank missiles, etc.
- Explosives - Any form of homemade, commercial, or military explosive, including fragmentation grenades.
- Incendiary Device - The use of fire, or a device initiating fire.
- CBRN - Chemical (e.g. Sarin), biological (e.g. Anthrax), radiological, or nuclear weapons.
- Poison or Toxic - The use of a poisonous or toxic substance as a weapon, e.g. Ricin.
- Vehicle Impact - A land, sea or air vehicle used as an impact weapon, as opposed to as a platform for a weapon.
- Edged & Improvised - Knives and swords; pre-modern weapons such as the slingshot or bow and arrows; improvised weapons such as baseball bats, rocks, etc.
- Imitation Weapons - Any object used to convince others of a lethal capability, e.g. a dummy IED, replica firearm, etc.
- Virus/Malware - The attack involved the use of a virus or other malware, deployed over a computer network.
- None - The perpetrator was unarmed.
- Other/Unknown - It was unclear from reports what weapon type was used.
Suicide attack
- Yes - Indicates that the platform/weapon was used as part of a suicide attack - defined as an offensive act which simultaneously both kills the perpetrator and inflicts (or is intended and capable of inflicting) casualties or damage on a target.
- Suspected - Indicates that it is suspected that the platform/weapon was used as part of a suicide attack, but official confirmation was unavailable.
- No - Indicates that there was no indication the platform/weapon was used as part of a suicide attack.
- Suicidal - Indicates that the platform/weapon was used as part of a suicidal attack, defined as an operation in which the perpetrators make no attempt to escape or surrender, but fight until they are killed or incapacitated.
Target sector
- Security Forces - An attack directed at the security forces of the state, or those of a foreign state, i.e. police, intelligence, military, paramilitary and state-sponsored civilian militias.
- Government & Governance - An attack directed at transnational governance structures (the UN, IMF, World Bank, etc); domestic governance structures (parliament, ministries, politicians, tribal leaders, etc); the judiciary (courts, judges, attorney generals, etc); and diplomatic targets (embassies, ambassadors, etc).
- Non-State Armed Groups - An attack directed by militants against other militants, i.e. an inter-factional clash between members of the same group, or a clash between two or more rival militant groups.
- Identity Groups - An attack directed at a section of society whose members are defined by a shared characteristic which is a fixed part of their identity, rather than a behavioural choice, e.g. race, religion, gender, nationality, etc.
- Social Groups - An attack directed at a section of society whose members are defined by a shared behaviour which is a personal choice, rather than a fixed part of their identity, e.g. political affiliation, lifestyle choices, etc.
- National Infrastructure - An attack directed at facilities, infrastructure and other national assets which are critical to the normal functioning of the state (e.g. power stations, water supply, mass transport, etc), or which have iconic national status (e.g. monuments, famous historical buildings, etc).
- Civil Society - An attack directed at those elements of society which help monitor and constrain the power of the state and the broader establishment, and/or help empower individual citizens and secure their rights, e.g. independent news journalism, trade unions, NGOs, interest groups, etc.
- Public Sector - An attack directed at services provided by the state (or by the private sector in partnership with the state) on behalf of the general population, e.g. hospitals and healthcare, education, local council services (refuse, road maintenance etc), postal services, etc.
- Commerce & Industry - An attack directed at commerce and industry - from resource extraction, through manufacturing, to retail and other services.
- Random or Indiscriminate - An attack which impacts random people and/or property - either because target selection was indiscriminate, or because a specific target was attacked with an indiscriminate weapon that caused collateral damage (e.g. civilians killed in an IED attack targeting soldiers).
- Other/Unknown - the target sector was unspecified or unclassifiable
Target sub sector
| Target sector | Target sub-sectors |
|---|---|
| Security Forces |
|
| Government & Governance |
|
| Non-State Armed Groups |
|
| Identity Groups |
|
| Social Groups |
|
| National Infrastructure |
|
| Civil Society |
|
| Public Sector |
|
| Commerce & Industry |
|
| Random or Indiscriminate | Random or Indiscriminate - As per sector definition. |
| Other/Unknown | Other/Unknown - as per sector definition |
Target Object
What assets from the selected Target Sub-Sector were impacted by the attack, e.g. people, vehicles, buildings etc.
Target Nation
The nationalities of the Target Objects that were impacted
NSAG (non-state armed group) Statement
- Threat - The statement contained a threat to carry out an attack.
- Claim - The statement contained a claim or acknowledgement of responsibility for an attack or other militant operation.
- Denial - The statement contained a denial of responsibility for an attack or other militant operation.
- Legal - The statement was made by a suspected militant during a trial or other judicial proceeding, or in reference to such a proceeding.
- Hostage - The statement contained information about a hostage, or communicated a demand for their release.
- Strategic - The statement contained details of an individual or group's aims and objectives, and/or how they intend to achieve these objectives.
- Tactical - The statement contained information useful in the preparation of an attack, or the waging of a campaign, e.g. bomb making instructions, military field manuals, target lists, etc.
- Organisational - The statement contained information about the status of a group or its members.
- Ideological - The statement contained explorations of ideology.
- Other/Unknown - The statement's content was unspecified or unclassifiable.
NSAG (non-state armed group) Medium
- Online Statement - A written statement published online.
- Online Document - An extended written publication published online.
- Online Audio - An audio recording published online.
- Online Video - A video recording published online.
- Public Statement - A statement made live to an audience.
- Printed Hardcopy - A written or printed statement or publication in physical form.
- Audio Hardcopy - An audio recording distributed in a physical format, e.g. CD.
- Video Hardcopy - A video production distributed in a physical format, e.g. DVD.
- Media Interview - An interview given with any conventional news organisation.
- Other/Unknown - The medium of the statement was unknown or unclassifiable. This option should be used whenever the medium of the statement is not explicitly identified.
NSAG (non-state armed group) Action Type
- Political - Any action taken by militants to participate within the constitutional process (such as forming a political party), or any bilateral negotiation or agreement with the government (including ceasefires and peace agreements).
- Shadow Political - Any action taken by militants to establish or maintain a parallel governance structure within an area of territorial control, or any negotiation or agreement with other sub-state groups or bodies (e.g. tribal elders or other militant groups).
- Shadow Judicial - Any action taken by militants to establish courts, or other pseudo legal or judicial bodies, for the purpose of arbitrating disputes, or sentencing those whose behaviour is deemed criminal.
- Logistics - Any action taken by militants to procure weapons, vehicles or other equipment; to store such items; or to deploy them.
- Commercial - Any action taken by militants to engage in legitimate business activities, typically for the purpose of raising funds, but also to provide cover for other activities.
- Criminal Action - A purely criminal action carried out by militants who are otherwise ostensibly politically-motivated - typically for financing purposes, e.g. extortion, robbery, trafficking, etc.
- Intimidation - Any action which involves intimidating an individual or community (such as a village, or employees of a company), through harassment, threats, etc - but which falls short of the level of violence that would qualify as an NSAG Attack .
- Direct Action - Any action intended to disrupt or obstruct the conduct of normal business, or any other process, but which falls short of the level of violence that would qualify as an NSAG Attack.
- Hoax Attack - Any action which causes disruption by leading others to believe that an attack is imminent, when no such attack is intended.
- Demonstration/Strike - Any action involving a major instance of civil unrest, including mass protests and acts of civil disobedience, which remains non-violent and therefore does not qualify as NSAG Attack > Riot.
- Hostage Release - Any action involving the voluntary release of hostages (as opposed to during a counter-terrorism operation), typically — but not necessarily — in return for some concession.
- Prisoner Escape - Any action involving militant prisoners escaping from detention under their own initiative, as opposed to being freed during an attack mounted by militants from outside the prison.
- Recruitment - Any action which involves the recruitment of others into a militant group - either voluntarily or through coercion.
- Defection/Surrender - Any action which involves members of a group (but not the group as a whole) surrendering to the authorities, defecting to another militant group, forming a splinter group, or publicly renouncing their group.
- Retreat - Any action which involves conceding territory or withdrawing from a position while not under fire (i.e. not during an active counter-terrorism operation).
- Disarmament/Demobilisation - Any action which involves a group formally decommissioning arms, demobilising forces, or otherwise surrendering its capabilities.
- Other/Unknown - The militant action was unspecified or unclassifiable.
Counter Terrorism [back to top]
Click on the links below to access the full definitions.
- Counter terrorism operation type
- Counter terrorism operational environment
- Counter terrorism force
- Arms seized/destroyed
- Counter terrorism assets
- Counter terrorism statement type
- Formal charges
- Suspects convicted
- Suspects acquitted
- Suspects extradited
- Successful appeals
- Other restraining orders
Counter Terrorism Operation Type
- Interdiction - An event in which routine anti-terrorism measures result in the interception of militants or their assets, e.g. as a result of customs checks, routine stop-and-search (including coastguard), etc.
- Cordon and Search - An operation involving a temporary, non-routine, heightening of security measures in a particular location - typically involving the systematic searching of persons and/or property - with the aim of uncovering militant personnel/assets.
- Covert - An operation, typically carried out by intelligence assets or special forces, which seeks to achieve its objective covertly, i.e. both exfiltration as well as infiltration is achieved in secret.
- Raid - An operation - typically intelligence-led - targeting a specific individual or location, which does not involve an armed engagement.
- Assault - An operation - typically intelligence-led - targeting a specific individual or location, which involves a close quarters armed engagement.
- Engagement - A close-quarters encounter between two armed forces manoeuvring in the same environment (i.e. between land forces, between aircraft, or between ships), where the CT force initiated the engagement.
- Strike - An operation involving the use of a stand-off weapon to carry out a ranged attack on a target, e.g. the use of cruise missiles, airstrikes, artillery, etc.
- Disruption - An operation involving tactics - other than Cordon and Search - intended to disrupt the operational, logistical, communications or other capabilities of a militant group - or its supporters - rather than to kill or capture its personnel, or seize/destroy its assets.
- Other/Unknown - The operation type was unspecified or unclassifiable
Counter Terrorism Operational Environment
- Urban - The target was in a built-up area at the time of the operation, i.e. cities, towns and other large settlements. Includes targets travelling on a river passing through such an area.
- Rural - The target was in a rural or wilderness area at the time of the operation. Includes targets travelling on a river passing through such an area.
- Maritime - The target was at sea or on a large inland water body at the time of the operation.
- Air - The target was airborne at the time of the operation.
- Virtual - The target was a virtual entity, existing only on the internet or other computer network (e.g. a website or database).
Counter Terrorism Force
- Police/Intelligence - The operation involved civilian police or intelligence officers from the country in which the incident took place.
- Domestic Military - The operation involved military forces from the country in which the incident took place.
- Foreign Security Forces - The operation involved police, intelligence or military forces from a country other than the one in which the incident took place. Includes peacekeepers.
- Paramilitary - The operation involved civilian security contractors formally employed by the state in a security role, alongside its regular security forces, e.g. private security companies, mercenary units, etc.
- Militia - The operation involved a state-sponsored civilian militia, or people's defence force (not including militant groups which happen to be aligned with the state, but remain independent of it).
- Other/Unknown - The operation involved forces that were unspecified or unclassifiable.
Arms Seized / Destroyed
- Nothing Reported - The operation was not reported to have recovered or destroyed any materials.
- Personal Small-Arms - The operation recovered or destroyed small-arms - such as handguns and assault rifles - consistent with the personal use of those detained.
- Weapons Cache - The operation recovered or destroyed small-arms of a quantity inconsistent with the personal use of those detained; and/or any quantity of explosives; and/or any heavy or sophisticated weaponry.
- Precursor Materials - The operation recovered or destroyed materials that are not weapons in themselves, but which can be assembled to form weapons, e.g. ingredients and components for the manufacture of explosives or toxic substances .
- Hostages - The operation recovered people — either dead or alive — that had been kidnapped or were being held hostage by the militants.
- Funds/Assets - The operation recovered or destroyed funds, or other assets that may readily serve as a substitute for cash funds such as narcotics, diamonds, etc.
- Equipment - The operation recovered or destroyed equipment likely to be of use in the conduct or preparation of an attack, such as uniforms; binoculars and night-vision gear; field radios, satellite phones and other communications equipment; etc.
- Vehicles - The operation recovered or destroyed land, sea or air vehicles.
- Other/Unknown - The operation recovered or destroyed materiel that was unspecified or unclassifiable.
Counter Terrorism Assets
- Ground - The operation involved ground forces in an offensive capacity.
- Maritime - The operation involved ships, submarines, or other manned maritime craft in an offensive capacity.
- Air - The operation involved airplanes, helicopters, or other manned aircraft in an offensive capacity.
- Cyber - The operation involved the use of computer-based capabilities in an offensive capacity.
- UAV - The operation involved the use of unmanned aerial vehicles (UAVs), commonly known as drones, in an offensive capacity.
- UMV - The operation involved the use of unmanned maritime vehicles (UMVs) in an offensive capacity.
- Other/Unknown - The operation involved CT assets that were unspecified or unclassifiable.
Counter Terrorism Statement Type
- Intelligence - The statement contained information useful in assessing the capabilities and intentions of militant actors.
- Briefing - The statement contained information about the progress of a counter-terrorism operation or campaign, or an update on an ongoing situation (e.g. hostage negotiations).
- Policy - The statement contained information regarding counter-terrorism policy or strategy.
- Anti-terrorism - The statement contained details of specific anti-terrorism measures being implemented or amended - i.e. defensive measures taken to create a more restrictive operating environment and help prevent attacks occurring.
- Legislation - The statement contained details of new terrorism legislation, or changes to existing legislation.
- Diplomatic - The statement contained details of talks, agreements, or disputes between nations relating to terrorism and counter-terrorism.
- Designation - The statement announced the formal designation of a group or individual as a terrorist entity.
- Judicial Proceeding - The statement contained information relating to the ongoing progress of a trial or other judicial proceeding, such as claims made by the defence or prosecution, or the testimony of witnesses, etc.
- Other/Unknown - The content of the statement was unknown or unclassifiable.
Formal Charges
The number of individuals charged in the judicial incident being recorded
Suspects Convicted
The number of individuals convicted in the incident being recorded.
Suspects Acquitted
The number of individuals acquitted in the incident being recorded.
Suspects Extradited
The number of individuals extradited in the incident being recorded
Successful Appeals
The number of individuals who successfully appealed a conviction in the judicial incident being recorded.
Other Restraining Orders
The number of individuals who were subjected to travel embargoes, house arrest, or other forms of control order, in the judicial incident being recorded.