3A · Intelligence Before 9/11

What We Knew: Intelligence Before 9/11

Students will examine intelligence available before 9/11 and explore how incomplete information, agency silos, and uncertainty made an emerging threat difficult to recognize and act upon.

Response Grades 3–5 Middle School (6–8) High School (9–12) College & Civic Church & Community Workplace & Groups Families Multi-day unit Lesson Plan

Essential question

When information is incomplete and spread across many people and institutions, what does it take to recognize a threat in time to act?

Lesson overview

In the years before September 11, U.S. intelligence and law enforcement agencies encountered pieces of information that, viewed in hindsight, appear to point toward the attacks that followed. At the time, however, those pieces were scattered across agencies, investigations, jurisdictions, and an enormous volume of competing intelligence. This lesson asks students to examine that history without assuming the outcome was obvious or inevitable. Rather than simply cataloging “missed signals,” students consider a harder question: what could reasonably have been understood from the information available at the time, and what made connecting those pieces difficult?

The lesson is intentionally flexible across ages and learning environments. Younger students can approach the subject as a problem of communication, shared information, and putting pieces of a puzzle together, while older students can examine specific intelligence, institutional structures, agency silos, and questions of prevention and accountability. Teachers can adjust the number and complexity of sources while preserving the same underlying inquiry. In looping environments, the lesson can also be revisited in later years: students who first encounter the concepts through communication and decision-making can return to the same history with increasingly complex primary sources and a deeper understanding of institutions, national security, and historical evidence.

Throughout the lesson, teachers should reinforce an important distinction: a warning is not the same thing as a prediction. Students know what happened on September 11; the people making decisions beforehand did not. The goal is to help students investigate how information becomes knowledge, how institutions make decisions under uncertainty, and how societies learn from failures in order to improve the systems intended to protect them.

Learning objectives

  • Students will be able to identify key pieces of intelligence and warning signs that existed before September 11, 2001.
  • Students will be able to explain how agency structures, information sharing, and uncertainty affected the ability to recognize an emerging threat.
  • Students will be able to analyze multiple sources to determine what could reasonably have been understood from the information available at the time.
  • Students will be able to evaluate how hindsight can influence our understanding of historical decisions, missed opportunities, and questions of prevention.

Activities

Activity 1 50 min

Warmup: The Missing Pieces

Begin without immediately introducing 9/11. Divide students into small groups and give each group only part of the information needed to understand a fictional, age-appropriate situation. Each group answers: * What do we know? * What do we think might be happening? * What information are we missing? * What, if anything, should we do? Then allow the groups to share their information. Ask students to reconsider their conclusions once the pieces are brought together. The important reveal is conceptual: the information did not necessarily change; their ability to see it together did.Introduce the lesson’s Essential Question and explain that intelligence and law-enforcement agencies faced a far more complicated version of this problem before 9/11.

Activity 2 50 min

What Did We Know, and When?

Students examine a teacher-curated sequence of pre-9/11 intelligence and warning signs. Rather than receiving everything at once, students encounter information chronologically and periodically stop to assess: What can we reasonably conclude at this point? What remains uncertain? What additional information would we want? Does the evidence justify action, and if so, what kind? You can scale the source set by age. Younger students can work with simplified summaries emphasizing communication and incomplete information. Middle and high school students can encounter increasingly complex material involving al-Qaeda, watchlisting, intelligence agencies, the Phoenix memo, Zacarias Moussaoui, and warnings during the summer of 2001.

Activity 3 50 min

Connecting Dots and Pieces

Now students receive information from multiple sources or institutional perspectives and place the pieces on a shared timeline, board, or systems map. They identify where information existed, where it traveled, where it did not, and what barriers may have prevented separate pieces from becoming a coherent picture. For grades 9–12, portions of the 9/11 Commission's public record can deepen the exercise. Its staff materials specifically address watchlisting and tracking, intelligence performance, law enforcement and intelligence collection before 9/11, and threats and responses during 2001. After students assemble the larger picture, return to the central distinction: A warning is not the same thing as a prediction. * Ask students to identify information that now appears significant because they know what happened on September 11. * Then ask the harder question: Would its significance have been equally clear at the time? For older students, the declassified August 6, 2001 Presidential Daily Brief, “Bin Ladin Determined to Strike in US,”can serve as a culminating source. Students should evaluate what the document warned about, what it did not establish, and what additional information decision-makers would have needed. The PDB itself discussed bin Laden's desire to attack inside the United States and previous plotting, making it particularly useful for separating a broad warning from a specific prediction.

Activity 4 35 min

Exit Ticket: Knowing What We Know

Students respond individually to three short prompts: * One piece of information available before 9/11 that I believe was important was… * One reason recognizing the larger threat was difficult was… * Knowing what happened afterward changes how we view this information because… Close by returning to the Essential Question: When information is incomplete and spread across many people and institutions, what does it take to recognize a threat in time to act?

Grades 3-5 discussion questions

  1. How can sharing information help people understand a problem more clearly?
  2. Why might two people look at the same information and reach different conclusions?
  3. What can happen when different people each know one part of a larger problem but do not share what they know?
  4. How can people make careful decisions when they do not yet have all the information they need?

Grades 6-8 discussion questions

  1. What factors made it difficult for different agencies to recognize that separate pieces of information might be connected?
  2. How does sharing information change what people or organizations are able to understand about a possible threat?
  3. How can decision-makers determine when incomplete information is strong enough to justify taking action?
  4. How does knowing what happened on 9/11 affect the way we interpret warning signs that existed beforehand?

Grades 9-12 discussion questions

  1. Based on the information available before 9/11, what could U.S. officials reasonably have understood about the threat posed by al-Qaeda, and what remained uncertain?
  2. At what point does a warning become strong enough to justify government action, and what risks come with acting too early or too late?
  3. To what extent did failures in information sharing contribute to the inability to recognize the larger threat, and what other factors should be considered?
  4. How should we evaluate decisions made before 9/11 without allowing our knowledge of what happened afterward to determine what we think officials should have known at the time?

Adult discussion questions

  1. How should leaders distinguish between isolated warning signs and an emerging pattern when information is incomplete, fragmented, or uncertain?
  2. What organizational structures, incentives, or assumptions can prevent important information from moving across institutional boundaries?
  3. How should institutions balance the risks of acting on incomplete intelligence against the consequences of waiting for greater certainty?
  4. What lessons from intelligence before 9/11 can be applied to how organizations today identify weak signals, share information, challenge assumptions, and make decisions under uncertainty?

Primary source

Video Interview

Warning Signs of an Attack, from the National September 11 Memorial and Museum: https://www.911memorial.org/lesson-plans/warning-signs-attack?utm_source=chatgpt.com

Grades 3–5: Student Analysis Prompt * What important information does this source give you? * What questions do you still have after examining the source? * How might sharing this information with someone else help them understand a larger problem? Grades 6–8: Student Analysis Prompt * What does this source suggest officials knew at the time, and what remained uncertain? * How might this information connect with evidence available to other people or agencies? * What additional information would you want before deciding whether action was necessary? Grades 9–12: Student Analysis Prompt * What conclusions could a decision-maker reasonably draw from this source at the time it was created? * What limitations, uncertainties, or missing information should affect how much weight you give this evidence? * How does knowing what happened on 9/11 influence your interpretation of this source, and how can you account for that hindsight? College and Professional Settings: Student Analysis Prompt * What does this source indicate about the information available to decision-makers, and what does it not establish? * What institutional, organizational, or analytical barriers might affect whether this information reaches the right people or is recognized as significant? * Based only on what was knowable at the time, what action, if any, would this evidence justify?