Threat Against Judge Scenario

Scenario: While assigned to the Criminal Intelligence Team, you are notified by a BCDC Lieutenant that an inmate threatened to kill a sitting Baltimore County Circuit Court Judge during a recorded jail telephone call.

Question:
What are your immediate investigative responsibilities?

Expected Answer

• Notify your supervisor.

• Obtain all available information from the reporting lieutenant.

• Determine the credibility and immediacy of the threat.

• Ensure the recorded jail call is preserved as evidence.

• Begin Detective Notes and document the investigation.

• Determine the inmate's custody status.

⭐ Board Enhancer

Begin thinking simultaneously about criminal investigation and protective intelligence priorities.

Question:
What information should you obtain from the BCDC Lieutenant before beginning your investigation?

Expected Answer

• Date and time of the call

• Recording number

• Identity of inmate

• Identity (if known) of the female caller

• Exact threatening statements

• Context of the conversation

• Whether additional calls exist

⭐ Board Enhancer

Determine whether similar threats have previously been intercepted.

Question:
Why should detectives immediately preserve the recorded jail telephone call?

Expected Answer

• Preserve evidence

• Prevent accidental deletion

• Maintain chain of custody

• Support future prosecution

• Assist threat assessment

⭐ Board Enhancer

Prepare a transcript of the recording to assist investigators and prosecutors.

Question:
What are your first priorities as a Criminal Intelligence detective investigating a threat against a judge?

Expected Answer

Determine:

• Intent

• Capability

• Opportunity

• Credibility

• Immediacy

These factors help determine the level of threat and guide the investigation.

Question:
What investigative documentation should be completed during the initial phase?

Expected Answer

• Detective Notes

• Premier One documentation

• Intelligence documentation

• Supervisor notifications

Question:
Why is determining the inmate's custody status important?

Expected Answer

To determine:

• Immediate risk

• Ability to carry out the threat

• Release status

• Housing location

• Required protective measures

⭐ Board Enhancer

Begin monitoring the inmate for future release.

Question:
As the lead Criminal Intelligence detective, what should your investigative mindset be during the first phase of the investigation?

Expected Answer

Focus on:

1. Preserving evidence

2. Assessing the threat

3. Protecting the judge

4. Identifying co-conspirators

5. Preventing violence

Question:
What evidence should detectives immediately obtain and review?

Expected Answer

• Recorded jail telephone call

• Telephone records

• Call logs

• Previous jail calls

• Intelligence reports

• Prior incident reports

⭐ Board Enhancer

Review additional recorded calls to determine if the threat has been discussed previously.

Question:
How should detectives investigate the unknown female involved in the jail call?

Expected Answer

• Identify the caller through jail telephone records.

• Conduct a criminal history check.

• Obtain subscriber information.

• Determine her relationship to the inmate.

• Assess her ability to assist in carrying out the threat.

⭐ Board Enhancer

Conduct surveillance or an interview if appropriate to further assess her involvement.

Question:
Why is it important to determine whether the inmate has the capability and opportunity to carry out the threat?

Expected Answer

Threats become more credible when investigators determine:

• Access to weapons

• Outside assistance

• Planned actions

• Means to carry out the threat

• Opportunity after release or through accomplices

Question:
What background investigation should detectives conduct on inmate James Williams?

Expected Answer

Review:

• Criminal history

• Violent offenses

• Prior threats

• Gang affiliation

• Intelligence reports

• Known associates

• Prior cases involving the judge

⭐ Board Enhancer

Determine whether Williams has a history of threatening judges, prosecutors, or law enforcement.

Question:
What should detectives do if the investigation indicates the threat may be credible?

Expected Answer

• Notify supervisors.

• Notify the appropriate judicial security personnel.

• Implement protective measures.

• Continue the criminal investigation.

• Coordinate with partner agencies if necessary.

Question:
Why is identifying the unknown female a critical investigative objective?

Expected Answer

She may:

• Be a co-conspirator

• Assist in carrying out the threat

• Possess additional intelligence

• Provide evidence of planning

• Corroborate the inmate's intent

Question:
What legal process may detectives need during this investigation?

Expected Answer

• Court Orders

• Search Warrants

• Telephone subscriber information

• Additional recorded communications

Question:
What is the overall objective of the threat investigation?

Expected Answer

Determine whether the threat is:

• Genuine

• Credible

• Imminent

• Actionable

while protecting the intended victim and developing evidence for prosecution.

Question:
Once you determine that the threat may be credible, what are your immediate responsibilities regarding the judge?

Expected Answer

• Notify your supervisor.

• Notify the appropriate Judicial Security personnel.

• Ensure the threatened judge is informed through the proper chain of command.

• Share known facts regarding the threat.

• Continue assessing the credibility and immediacy of the threat.

⭐ Board Enhancer

Coordinate with Judicial Security to determine whether additional protective measures should be implemented immediately.

Question:
What factors should detectives consider when assessing the credibility of a threat?

Expected Answer

Evaluate:

• Intent – Does the suspect genuinely want to carry out the threat?

• Capability – Does the suspect have the means?

• Opportunity – Can the suspect realistically act on the threat?

• Specificity – Were details discussed?

• Immediacy – Is there an imminent danger?

⭐ Board Enhancer

Conduct a formal threat assessment utilizing departmental resources when appropriate.

Question:
Why is protecting the threatened judge just as important as investigating the crime?

Expected Answer

The primary objective is to:

• Prevent violence

• Protect life

• Reduce risk

• Allow informed security decisions

• Preserve public confidence in the judicial system

⭐ Board Enhancer

Maintain ongoing communication with Judicial Security as new intelligence develops.

Question:
What investigative information should be shared with Judicial Security?

Expected Answer

• Nature of the threat

• Identity of the inmate

• Identity of possible accomplices

• Known plans

• Timeline

• Current custody status

• Intelligence concerning capability

⭐ Board Enhancer

Provide timely updates as additional intelligence is developed throughout the investigation.

Question:
How does threat assessment differ from a traditional criminal investigation?

Expected Answer

A criminal investigation focuses on proving a crime.

A threat assessment focuses on determining:

• Intent

• Capability

• Opportunity

• Escalation risk

• Prevention

The goal is to stop violence before it occurs.

Question:
If additional intelligence suggests the threat is escalating, what investigative actions should detectives consider?

Expected Answer

• Increase investigative efforts

• Notify supervisors immediately

• Update Judicial Security

• Coordinate with partner agencies

• Identify additional conspirators

• Continue gathering intelligence

⭐ Board Enhancer

Request assistance from specialized investigative units if the threat exceeds available resources.

Question:
What role does documentation play during a threat assessment investigation?

Expected Answer

Document:

• Every investigative action

• Threat assessments

• Notifications

• Intelligence received

• Protective actions taken

• Interviews conducted

• Evidence preserved

Proper documentation supports both prosecution and future threat evaluations.

Question:
As the lead Criminal Intelligence detective, what are your primary objectives throughout the threat assessment?

Expected Answer

• Preserve evidence.

• Assess the credibility of the threat.

• Protect the threatened judge.

• Identify all involved individuals.

• Prevent the planned violence.

• Develop evidence for prosecution.

• Keep supervisors informed.

⭐ Board Enhancer

Continue reassessing the threat as new intelligence becomes available, coordinating with specialized resources and adjusting protective measures as needed to ensure the safety of the judge and the public.

Oral Board Tip

One sentence that consistently demonstrates a Criminal Intelligence mindset is:

"Throughout the investigation, I would continuously evaluate the suspect's intent, capability, and opportunity to carry out the threat. My priorities would be to protect the judge, prevent the threatened violence, preserve evidence, and develop a prosecutable case while coordinating closely with Judicial Security and supervisory personnel."

Question:
What intelligence should detectives develop on inmate James Williams?

Expected Answer

Conduct a comprehensive intelligence review by examining:

• Criminal History

• Premier One (P1)

• LINX

• Intelligence reports

• Gang affiliation

• Prior violent offenses

• Known associates

• Previous threats

• Prior contacts with the judge

⭐ Board Enhancer

Determine whether Williams has previously threatened judges, prosecutors, law enforcement officers, or public officials.

Question:
How should detectives investigate the unknown female involved in the recorded jail call?

Expected Answer

• Identify the female through jail telephone records.

• Obtain subscriber information.

• Conduct a criminal history check.

• Determine her relationship to Williams.

• Determine whether she has the means or intent to assist.

⭐ Board Enhancer

Conduct surveillance or an interview if appropriate and determine whether she has access to weapons, transportation, or the judge's location.

Question:
Why is identifying the relationship between Williams and the unknown female important?

Expected Answer

It helps determine whether she is:

• A witness

• A confidant

• A co-conspirator

• A facilitator

• A source of additional intelligence

Understanding their relationship helps assess the overall threat.

Question:
What investigative databases should detectives utilize during an intelligence investigation?

Expected Answer

• Premier One (P1)

• LINX

• Criminal History

• MVA

• NCIC (when appropriate)

• Intelligence databases

• Social Media

• Jail records

⭐ Board Enhancer

Cross-reference intelligence with previous investigations involving Williams or the unknown female.

Question:
Why is corroborating intelligence critical before taking enforcement action?

Expected Answer

Corroboration:

• Confirms credibility

• Eliminates misinformation

• Strengthens probable cause

• Supports prosecution

• Guides operational planning

Investigative decisions should never rely solely on unverified intelligence.

Question:
What indicators suggest that the threat against the judge may be escalating?

Expected Answer

Indicators include:

• Detailed planning

• Discussions of weapons

• Identification of the judge's schedule

• Recruitment of accomplices

• Acquisition of resources

• Multiple conversations about the threat

⭐ Board Enhancer

Assess whether the suspect's actions demonstrate movement from fantasy or anger toward operational planning.

Question:
What investigative objective should detectives have when analyzing intelligence in this case?

Expected Answer

Determine:

• Who is involved

• What is being planned

• When it may occur

• Where it may occur

• How the suspects intend to carry it out

The objective is to identify and disrupt the threat before violence occurs.

Question:
As the lead Criminal Intelligence detective, how do you transform intelligence into actionable information?

Expected Answer

• Corroborate all intelligence.

• Compare information from multiple sources.

• Identify additional suspects or co-conspirators.

• Determine intent, capability, and opportunity.

• Share relevant intelligence with supervisors and partner agencies.

• Develop investigative strategies to prevent the threatened act.

⭐ Board Enhancer

Use a continuous intelligence cycle:

1. Collect intelligence.

2. Evaluate credibility and reliability.

3. Analyze patterns and relationships.

4. Disseminate actionable intelligence to appropriate personnel.

5. Reassess as new information becomes available.

Oral Board Tip

One answer that consistently impresses interview panels is:

"As a Criminal Intelligence detective, my responsibility is not simply to gather information, but to transform raw intelligence into actionable intelligence. I would continuously collect, corroborate, analyze, and disseminate information to determine the suspect's intent, capability, and opportunity while taking proactive measures to prevent the threatened violence."

Question:
How can Confidential Informants assist during a criminal intelligence investigation involving an inmate making threats?

Expected Answer

Confidential Informants (CIs) may help:

• Verify the credibility of the threat.

• Identify additional suspects or accomplices.

• Determine whether the inmate has discussed the threat with others.

• Gather intelligence regarding motive and planning.

• Corroborate information obtained through other investigative means.

⭐ Board Enhancer

Determine whether there are both in-custody and out-of-custody CIs who may provide additional intelligence.

Question:
What jail intelligence sources should detectives review during this investigation?

Expected Answer

Review:

• Recorded jail telephone calls

• Housing assignments

• Classification records

• Disciplinary reports

• Prior intelligence reports

• Movement history

• Booking information

⭐ Board Enhancer

Review visitor logs and jail mail for evidence of planning or communication with co-conspirators.

Question:
Why should detectives monitor inmate Williams' custody status throughout the investigation?

Expected Answer

Monitoring custody status allows detectives to:

• Determine release eligibility.

• Assess changes in threat level.

• Coordinate protective measures.

• Plan enforcement action if necessary.

⭐ Board Enhancer

Monitor release status using:

• VINE Link

• Jail staff

• Detention records

Question:
What investigative value do inmate visitor logs provide?

Expected Answer

Visitor logs may identify:

• Associates

• Family members

• Potential accomplices

• Witnesses

• Individuals assisting the inmate

This information may help expand the investigation.

⭐ Board Enhancer

Compare visitor information with telephone contacts and known associates to identify recurring individuals involved in the inmate's communications.

Question:
Under what circumstances should detectives seek legal authority to review an inmate's jail mail?

Expected Answer

When there is probable cause that the correspondence contains evidence of:

• Threats

• Criminal planning

• Conspiracy

• Communication with accomplices

A Court Order should be obtained before reviewing the mail.

⭐ Board Enhancer

Continue monitoring jail communications after the Court Order to identify additional conspirators or evolving plans.

Question:
How can detectives utilize an in-custody Confidential Informant during this investigation?

Expected Answer

If appropriate and in accordance with departmental policy:

• Develop intelligence regarding the inmate's intent.

• Determine whether additional threats have been made.

• Identify associates.

• Corroborate existing intelligence.

⭐ Board Enhancer

Consider whether an approved CI can be relocated closer to inmate Williams to lawfully gather additional intelligence regarding the threat.

Question:
When should detectives consider requesting assistance from the Behavioral Assessment Unit?

Expected Answer

Request assistance when:

• The credibility of the threat is unclear.

• The suspect demonstrates concerning behavioral patterns.

• Specialized threat assessment expertise is needed.

• The investigation indicates an elevated risk.

⭐ Board Enhancer

Integrate the Behavioral Assessment Unit's findings into the overall threat assessment to guide investigative and protective decisions.

Question:
As the lead Criminal Intelligence detective, what is your objective when utilizing jail intelligence and Confidential Informants?

Expected Answer

My objective is to:

• Gather reliable intelligence.

• Corroborate information from multiple sources.

• Identify co-conspirators.

• Assess the credibility of the threat.

• Prevent violence.

• Develop evidence for prosecution.

⭐ Board Enhancer

Develop a comprehensive intelligence picture by combining:

• Jail telephone calls

• Jail mail

• Visitor logs

• Confidential Informants

• Criminal history

• Intelligence databases

• Behavioral assessment

• Ongoing threat monitoring

This layered approach provides the strongest foundation for both threat mitigation and successful prosecution.

Oral Board Tip

One of the strongest answers you can give during an intelligence interview is:

"I would never rely on a single source of intelligence. I would corroborate information using recorded jail calls, visitor logs, lawful review of jail mail, confidential informants, intelligence databases, and interviews. By validating information from multiple independent sources, I can more accurately assess the suspect's intent, capability, and opportunity while protecting the threatened judge and preserving evidence for prosecution."

Question:
What legal process should detectives consider during this investigation to obtain additional evidence?

Expected Answer

Depending on the facts developed during the investigation, obtain the appropriate legal authority for:

• Recorded jail telephone calls

• Subscriber information

• Call Detail Records (CDRs)

• Search Warrants

• Court Orders

• Arrest Warrants (if probable cause exists)

Consult with the State's Attorney's Office when appropriate.

⭐ Board Enhancer

Obtain a Court Order to review inmate Williams' jail mail and continue monitoring communications consistent with legal authority.

Question:
How should detectives coordinate with outside agencies during a threat investigation involving a judge?

Expected Answer

Coordinate with:

• Judicial Security

• Baltimore County Detention Center (BCDC)

• State's Attorney's Office (ASA)

• Patrol personnel

• Supervisors

• Any other agency with investigative responsibility

The objective is to ensure a coordinated response while protecting the intended victim.

⭐ Board Enhancer

Request assistance from the Behavioral Assessment Unit (BAU) if the threat requires specialized behavioral analysis.

Question:
How should detectives document a Criminal Intelligence investigation?

Expected Answer

Maintain thorough documentation by completing:

• Detective Notes

• Premier One (P1)

• Intelligence reports

• Supplemental reports

• Evidence documentation

• Interview summaries

• Threat assessment documentation

Accurate documentation preserves investigative integrity and supports prosecution.

⭐ Board Enhancer

Document every reassessment of the threat as new intelligence develops.

Question:
If probable cause develops that the inmate and the unknown female are actively planning to kill the judge, what investigative actions should detectives consider?

Expected Answer

• Notify supervisors immediately.

• Notify Judicial Security.

• Coordinate with the State's Attorney's Office.

• Develop an operational plan.

• Obtain appropriate arrest warrants if probable cause exists.

• Continue collecting evidence.

• Protect the judge.

⭐ Board Enhancer

Coordinate the timing of enforcement actions to safely prevent the planned attack while preserving the integrity of the investigation.

Question:
What investigative responsibilities continue after immediate protective measures have been implemented?

Expected Answer

Continue to:

• Collect intelligence.

• Interview witnesses.

• Identify co-conspirators.

• Review additional communications.

• Analyze new evidence.

• Reassess the threat.

• Keep supervisors informed.

⭐ Board Enhancer

Continue monitoring the inmate's communications and activities to identify any changes in intent, capability, or opportunity.

Question:
What is the detective's responsibility regarding ongoing threat monitoring?

Expected Answer

Threat investigations require continuous reassessment.

Detectives should monitor:

• New intelligence

• New communications

• Changes in custody status

• Additional suspects

• Escalation indicators

Threat assessments are dynamic and should be updated as new information becomes available.

⭐ Board Enhancer

Monitor:

• VINE Link

• Jail Staff notifications

• Visitor logs

• Jail telephone calls

• Jail mail (when legally authorized)

Question:
How should detectives determine when the investigation is complete?

Expected Answer

The investigation is complete when detectives have:

• Thoroughly investigated the threat.

• Protected the intended victim.

• Identified all involved individuals.

• Preserved all available evidence.

• Completed all legal process.

• Documented all investigative actions.

• Coordinated with prosecutors.

• Ensured the threat has been appropriately mitigated.

⭐ Board Enhancer

Conduct a final intelligence review to determine whether any additional investigative leads or long-term monitoring are necessary.

Question:
As the lead Criminal Intelligence detective, what is your overall investigative objective from beginning to end?

Expected Answer

My objective is to:

• Preserve evidence.

• Assess the credibility of the threat.

• Protect the threatened judge.

• Identify all involved individuals.

• Develop actionable intelligence.

• Prevent violence.

• Establish probable cause when appropriate.

• Prepare the strongest possible case for prosecution.

• Document the investigation completely.

⭐ Board Enhancer

Maintain a proactive intelligence posture by continuously collecting, analyzing, corroborating, and disseminating information while coordinating with specialized units and partner agencies to ensure both public safety and successful prosecution.

Oral Board Tip

This is an excellent scenario to close with a strong summary. A response like the one below demonstrates leadership, organization, and a Criminal Intelligence mindset:

"Throughout the investigation, I would preserve all available evidence, continuously assess the credibility of the threat, protect the threatened judge through coordination with Judicial Security, develop intelligence from multiple independent sources, obtain the appropriate legal process, identify and investigate all involved individuals, and reassess the threat as new information becomes available. My goal is to prevent violence, protect the public, and present a thorough, well-documented case for prosecution."

Question:
What additional investigative steps can strengthen a threat investigation involving an incarcerated suspect? (Highly)

⭐ Board Enhancer

Monitor inmate Williams continuously by:

• VINE Link

• Jail Staff notifications

• Housing changes

• Classification changes

• Court appearances

• Release status

Why?

An inmate's custody status directly impacts their opportunity to carry out the threat.

Question:
Why should detectives review inmate visitor logs during a threat investigation? (Highly)

⭐ Board Enhancer

Visitor logs can identify:

• Unknown associates

• Family members

• Possible co-conspirators

• Individuals assisting with planning

• Witnesses

Compare visitor logs with:

• Telephone calls

• Jail mail

• Intelligence reports

• Criminal histories

Purpose

Identify everyone involved in the conspiracy.

Question:
Why should detectives seek a Court Order to review inmate Williams' jail mail? (Highly)

⭐ Board Enhancer

Jail mail may reveal:

• Additional threats

• Operational planning

• Maps

• Addresses

• Weapons discussions

• Communications with accomplices

Always obtain the proper legal authority before reviewing inmate correspondence.

Question:
When should detectives conduct a formal threat assessment? (Highly)

⭐ Board Enhancer

Conduct a formal threat assessment when:

• Threats are specific

• Violence is discussed

• Public officials are targeted

• Multiple people are involved

• Intelligence indicates planning

A threat assessment evaluates:

• Intent

• Capability

• Opportunity

• Immediacy

Question:
When should detectives request assistance from the Behavioral Assessment Unit (BAU)? [Highly]

⭐ Board Enhancer

Consider BAU assistance when:

• The suspect demonstrates fixation.

• Violent ideation is escalating.

• Mental health concerns are present.

• Specialized behavioral analysis is needed.

• The threat level is difficult to assess.

Purpose

BAU assists in evaluating behavioral indicators that may increase or decrease the overall threat.

Question:
Why should detectives research whether Williams has previously threatened judges or public officials? [Highly]

⭐ Board Enhancer

Past behavior often predicts future behavior.

Investigate:

• Previous threats

• Prior violence

• Protective orders

• Threats toward judges

• Threats toward prosecutors

• Threats toward law enforcement

• Institutional misconduct

Repeated behavior strengthens threat credibility.

Question:
How can Confidential Informants expand the investigation?

⭐ Board Enhancer

Determine whether there are:

Inside the jail

• Confidential Informants

• Cooperating inmates

Outside the jail

• Confidential Informants

• Cooperating witnesses

• Known associates

Purpose:

Develop independent intelligence to corroborate the threat and identify additional participants.

Question:
What distinguishes an exceptional Criminal Intelligence investigation from an average one?

⭐ Board Enhancer

An exceptional investigation does not rely on a single source of information.

Instead, it integrates intelligence from multiple independent sources, including:

• Recorded jail calls

• Visitor logs

• Jail mail (with legal authority)

• Confidential Informants

• Criminal History

• Intelligence databases

• Behavioral Assessment Unit

• Interviews

• Surveillance

• Prior threats

• Ongoing custody monitoring

The objective is to continually assess:

• Intent

• Capability

• Opportunity

• Credibility

• Immediacy

and take proactive steps to prevent violence before it occurs.