Terrorist threats in Europe

Terrorism in Europe. A current picture

Acute and diverse”, it is the expression used by Europol [1] to describe the actual terrorist threat across Europe, but these adjectives not only exist in future terms. We can describe the complexity of current terrorist activity around ten facts that define it.

Low-level conflicts and irregular warfare

The characteristics that define current conflicts where terrorist groups even state-sponsored, urban guerrillas, rebels or fighters determine the asymmetry of at least one of its parts, have a dramatic impact on the local and regional security environment, but the effects do not remain there. Even if none of these scenarios take place within Europe today, the closeness regarding conflicts (Ukraine or Libya) requires an action by EU members. This is another effect of the globalisation process [2]. We cannot ignore that the world faces massive and enduring tensions like population shifts, demographics movements, natural resources shortage, global competition, spread conflicts, modus operandi copycat or transnational grievances, among others.

These challenges, no matter the way they may take, can only be combated by actions: international cooperation, military missions or international peacekeeping interventions, which in the current geopolitical circumstances should not be trivialised by EU members.

Increase of foreign fighters

Without underestimating the gravity of previous contexts as Bosnia, Chechnya, Afghanistan and Iraq, the current situation of foreign fighters are marked by the Syrian scenario that has become the largest field of the jihadist battle so far [3] and is acting as a lure to radicals from around the world. According to data from the International Centre for the Study of Radicalisation (ICSR) (April and December, 2013) during the period between 2011 and early 2013 around 140–600 European fighters were displaced to Syria, and in the winter of 2013 this number increased to 1100–1700 individuals. Recent CIA data shows that this number could increase up to 2.000 fighters.

Although it is not a new phenomenon, European concern about the foreign fighters is increasing especially because of the threat that the return to their origin places may bring. In this direction we have several signals. One of the last was made by the Heads of State and Governments of the European Union on August 30th 2014, where they show a strong concern about the current situation and “requests the Council to review the effectiveness of the measures and to propose additional action, as required”.Footnote 1 However, the risk that may involve the return of these individuals to their origin places has not been analysed deeply within Europe [4] only a few researches about past plots exist like Sageman [5], Clarke and Soria [6] or the dataset explained by Hegghammer [7]. But still there are not studies on the implications, not only of their “fight”, but also of those who are engaged in recruitment, training, propaganda and communication activities among others.

Homegrown terrorism

9/11 led to an unprecedented growth of violent activity inspired by radical Islamism and perpetrated by European citizens’ descendants from immigrants, which have been called the second and third generations, and Muslim converts. Even when domestic terrorism is not a novel phenomenon, the current development of terrorism, especially coming from jihadist roots, has become a weapon of great destructive power that threats Western interests and citizens and is generally associated with transnational socio-political grievances [8]. As Europol [1] shows, Al-Qaeda and like-minded terrorist groups continued to encourage self-organized attacks within the EU aiming for indiscriminate casualties.

Extremism and radicalization increased

According to the last Te-SAT Report from Europol, left-wing and anarchist terrorism increased in number of attacks and arrests. In the case of far-right groups it is becoming more usual to show violent and intimidating behaviour, but they do not usually use terrorist tactics.

The European CommissionFootnote 2 is concerned about activities that are not only led by large organizations. Individual actions, small cells or EU-based groups involve new and unpredictable forms of action. And the results are not only the loss of lives or economic damage; these episodes increase radicalization and encourage extremisms across society. Europe is also directly affected by global terrorism. Europeans could be victims of attacks or perpetrators, recruiters or propagandists, fighters or lone actors.

Individual terrorist actions

The phenomenon of individual terrorism is far from a modern modus operandi but it is noticeable that there are new trends: the adaptation process of new-style terrorist tactics helped by the access to new technologies. However, despite the antiquity of this problem, the increase in the number of cases, that still is a marginal problem, is happening mainly in Europe [9]. Though the United States is the country with the largest number of this kind of attacks, the second most affected region is Europe, specifically Germany and the United Kingdom. Also, if until 2010 individual jihadist terrorism had only taken place in the US, in the last four years its effects also were appreciated in the UK, Germany, France, Denmark, Sweden, Norway, Canada, and Spain [10].

This context shows a latent need to adapt existing intelligence mechanisms and prevention and detection security measures.

Spread and adaptability of the modus operandi

In Europol words (2014), new tactics of several levels of sophistication continue to be observed in all affiliations. But it is not the only problem. The globalisation of the modus operandi and its continuous adaptation to the new security and prevention measures is becoming a silent real trend: an unusual combination of modalities and terrorist tactics with the ability to transcend international public opinion and threaten states through a single incident. This is a critical juncture understood as the period of significant change, which normally happens in different ways depending on the country.

The internet as a terrorist tool

The internet has become an unwanted enhancer in its illicit use, although it is recalled that its use by anyone involved in security issues brings great benefits.

In 2013, RAND Corporation [11] conducted an investigation which, in an exploratory way, studied the role of the internet use in 15 cases of radicalization, extremism and terrorism that had been previously identified by UK Counter Terrorism Units. The results of the study allowed confirming the following assumptions: the internet increases opportunities and facilitates the process of radicalization, promotes propaganda and begins to be a great recruitment tool.

In addition, UNODC [12] makes a classification of the features that the internet actually provides to promote and support terrorism as a tool for: propaganda (including recruitment, radicalization and incitement to terrorism); financing; training; planning; execution; and cyber-attacks.

Rise of trans-national terrorist groups capabilities

The problem is not only the growth of starring jihadist terrorism, already present in territories like Mali, Algeria, Mauritania, Niger, Libya, Morocco, Nigeria, Senegal and Burkina Faso [13]. Phenomena such as the anarchist or extreme right and left groups have international structures, resulting from the strong bonds between the different organizations, but also due to their ability to call to action and act in third states.

The impact of terrorist intergroup cooperation

International terrorist alliances are a latent threat [14]. Their existence contributes to increase opportunities for groups to improve their operational efficiency [15] and lethality [16] as well as it helps them to gain followers, provides a natural bridge for the diffusion of tactical knowledge [17] or brings new funding channels. Ultimately these alliances give them power and ability to act when its structure is limited or threatened. The existence of sanctuaries and safe havens in many parts of the world contributes to this threat by providing meeting places for terrorists. Places where they can design joint activities and seek and obtain support while they are sheltered and even receiving support from states that favour their cause.

It is a highly complex context in which the asymmetry of the conflict does not necessarily mean that one of the two sides lack sufficient potential to face the battle.

Links between terrorism, organized crime and corruption

This is an obstacle of enormous complexity. Facing a problem in which three independent variables are interrelated, potential negative outcomes are multiple. Terrorism, organized crime and corruption are evident in many fragile states like Afghanistan, Iraq or Syria (Fragile States Index, 2014) and this is not a problem far away from Europe.

The EU Anti-Corruption ReportFootnote 3 published by the European Commission in March reflects a substantial increase across the region. In the Commission’s words, it is “breath-taking” and entails a cost of at least 120bn euros per year. In the organised crime case the trend is similar. A recent Europol study [18] shows that criminal groups, over 3.600 currently active in Europe, have growing networks, transnational operation capacity, higher mobility and great diversification of activities. The cost of this scourge only in business terms is estimated at more than €670 billion annually within the EU.

Large social forces like economic inequality, unemployed youth population or austerity policies [19] may or may not have consequences. The ability to impact of these three variables together can be greater than we expect.

Counter-terrorism measures. A critical overview of the European framework

The EU legislative career in counter-terrorism was first taken seriously after the attacks of 9/11. Until then it had never designed or implemented any measures by EU members as a whole. However, despite the on-going initiatives as developed by SECILE [20] there is still no focus repository and catalogue of all these measures.

Early years of EU counter-terrorism cooperation were focused primarily on the “prevent” and “disrupt” elements of the EU strategy. It was seven years ago when the trend changed taking priority “action” and “protection”. A bleak picture which imposes two dimensions of action over two different ones equally important.

A brief timeline is presented below indicating the major counter-terrorism actions undertaken by the EU in order to develop a critical view of the current situation (Table 1).

Table 1 EU CTMeasures (Cohen and Blanco 2014) *(Measures quantified according to the type of instrument used by the EU to implement them and the counter-terrorism area of impact)

Starting from the initial situation that has been displayed, the current issues in terrorism matters, and with reference to this framework, make it difficult to assure the existence of a counter-terrorism strategy or if it is a cosmetic arrangement.

  • As can be seen on the timeline, the impact of 9/11 represented an unprecedented growth of European counterterrorism agenda. The instinctive reaction of governments of the EU was to include as much justice and security measures as possible under the premise of fighting terrorism [20]. As Romano Prodi, former President of the European Commission, said jokingly: Osama bin Laden did more for the development of European counterterrorism and home affairs cooperation than Jean Monnet.

  • In the same line it is observed that any urgency to deal with terrorism is performed once its effects are felt. Jihadist terrorism, al-Qaeda, individual terrorism, ISIS, foreign fighters, homegrown terrorism, every “new phenomenon” seems to swallow all previous problems and start to be the importance centre. The problem is when this tendency to act “following news” comes from the field of research and legislation and from the decision-makers. Listening these days, from members of European governments, the possibility of treating citizens as terrorists who are getting involved in conflicts abroad, or the intention to revoke citizenship to them, are some of these examples, born out of urgency and proposed without evaluation or criteria.

  • The actual counterterrorism agenda with a huge number of measures, over 260, some unrelated, sometimes overlapping, not only makes very complex its study by the academic community but also its practical application.

  • These more than 260 measures, many of which cannot be understood in isolation, circumstance which greatly hinders their development, inspire little confidence not only on the security forces from different countries who need minimum guarantees for the performance of their duties. It also downplays the damage suffered by the fundamental rights of citizens. Security is becoming the main objective, when it only should be a mean to ensure the exercise of civil rights and liberties.

  • Despite the recent enlargements of the mandate and powers of the European Commission in these areas, their functions are still very limited. These decision-making bodies are suffering a “democratic deficit” and when they are given more power they just stumble frontally with the governments of the member states which do not allow large intrusions into their security agendas.

  • These concerns on democratic control of the Council of the EU and its strategies, and its counter-terrorism agenda, are increasing the distrust generated by the growing involvement of industry security and defence policy in many newly developed measures.

  • In fact, there is neither monitoring nor a regular evaluation of the actions that are being developed. Even more, the implementation of the measures for each country is individual and the effects, costs or benefits are measured, in the best case, in local terms.

The future of terrorism in Europe (2030)

Methodological framework

We have applied the analytical framework used by RAND Europe in its research “Europe’s Societal Challenges. An analysis of global societal trends to 2030 and their impact on the EU” [21], that is consistent with the Development, Concepts and Doctrine Centre (DCDC) report of the UK Ministry of Defence (2010), titled “Global Strategic Trends out to 2040” [22].

We selected the trends observed trough a literature review process owing to the fact that we believe it necessary to study the phenomenon of terrorism within the social context (with all variables that it entails) in which it runs. Using the same documents and helped by experts meetings in the headquarters of the Centre of Analysis and Foresight (CAP) of Guardia Civil (Spanish Law Enforcement Agency) we identified their drivers (factors that influence or causes change) indicators and those outcomes that could be related to terrorism, that could act as causes or factors, and produce threats and risks, according to the existing lists in “The Routledge Handbook of Terrorism Studies” [23].

A trend is a set of processes that cannot be changed easily, a discernible pattern of change. They were born, have been pushed or depend on the present and will continue in the future. A driver is an agent or factor which drive a change forward and the indicators are the different variables that explain it.

In our process, which follows partially the model of Lia [33] for the study of the future of terrorism, we have selected political, economic, social, technological and environmental trends, based on the following sources:

  • “Europe’s Societal Challenges”. RAND Europe [21].

  • “Global Strategic Trends out to 2040”. DCDC [22].

  • “Global Risks 2013” [24] and “Global Risks 2014” [25]. World Economic Forum.

  • “Global Trends 2030”. National Intelligence Council [26]

  • Internal documents of the CAP, Guardia Civil, based on a general literature review about the future, and the selection of the main trends about the future with a PESTEL / SWOT model.

For each trend we assign a degree of evidence (high: ***; medium: **; low: *), and a degree of uncertainty about the outcomes (H: high; M: medium; L: low).

Trends, drivers and indicators, although there are specific mentions to the EU or Europe, must be global, because they involve more than a country or a region. Events occurring on one part of the world can affect and be affected by events occurring in other parts. The process of globalisation is a continuous and permanent megatrend that affects politics, economics, social change, or technological development.

Trends, drivers, indicators and outcomes

  • Political trends (Table 2)

  • Economic trends (Table 3)

  • Social trends (Table 4)

  • Technological trends (Table 5)

  • Environmental trends (Table 6)

Megatrends, game changers and wild cards

A conclusion appears to be clear: international terrorism will persist, and needs to be faced with all our efforts and imagination. An asymmetric threat needs asymmetric measures.

Some of the identified trends offer a high degree of evidence, being megatrends, trends that are very probable to happen (i.e. demographic evolution). Other trends and outcomes could affect in a positive or a negative way the phenomenon of terrorism, we call them “game changers” (i.e. technology). Following those trends and outcomes, and applying them to the research on terrorism, we could think on a future with the following characteristics (Table 7):

Table 2 Political trends and security outcomes (Cohen and Blanco 2014)
Table 3 Economic trends and security outcomes (Cohen and Blanco 2014)
Table 4 Social trends and security outcomes (Cohen and Blanco 2014)
Table 5 Technological trends and security outcomes (Cohen and Blanco 2014)
Table 6 Environmental trends and security outcomes (Cohen and Blanco 2014)
Table 7 Terrorism in Europe 2030 (Cohen and Blanco 2014)

Those risks with low probability (because of the high competencies or resources needed to plan and execute an attack, historical trends, or incidents that go beyond our imagination) and high impact (because they generate terror, casualties, or dangers) are what we call “wild cards”. Different from those called as “known unknowns”, the things we know will happen although we do not know exactly when or what effects will result.

There is a key factor that could act as a “game changer”: counter-terrorism policies, that, as we argue, it is not possible to know if act as a pull, a push, or a neutral factor because the EU does not follow an evidence-based policing system.

In conclusion, there are several difficulties with uncertainty, complexity and change dynamics. So, the methodological effort would try to combine positive knowledge about future trends with intransparency. Game changers could be managed through a monitoring system of information, analysing the evolution of each one. Wild cards are impossible to detect, are incontrollable. We deal with the distinction between a “present future” and a “future present”. Esposito (2011) [27], following the sociological systems theory of Niklas Luhmann, points out that the past and the future include a multiplicity of past and future presents. Even if the world is unknown, one still has a known and acceptable orientation about the future. We know emerging trends that could be consolidated in the future, and we know events (elections, demography evolution) and technologies that will be points of change. It is possible to get a methodological vision of “present future”, through trends analysis, horizon scanning or other techniques (tools to understand the future, but not scientific methodologies). But we do not know what will happen, the information is limited, “both concerning the behaviour of others who are oriented to us and also concerning the future that will result from our choices”, so we have the opportunity to revise this “present future” in the continuous “future presents”. Esposito, in this situation, thinks that time is a great opportunity and allows for imagination and creativity.

New counter-terrorism policies in contexts of change, complexity and great uncertainty

Intelligence analysis with creativity and imagination

The report about 9/11 [28] stressed in a chapter devoted to prospective analysis (“Foresight and Hindsight”) that the lack of imagination was the major mistake when trying to prevent the terrorist attacks. Imagination is not common in bureaucracies. Policy-makers have a short horizon, but policies should not.

Some authors highlight the obsession for collecting data [29]. The so called “Big Data” is a revolution because it is a source of development that allows managing huge amounts of information and applying predictive techniques. When studying the phenomenon of terrorism or analysing intelligence, this obsession for details can let us know what is going on, but not its causes or the most appropriate measures to be implemented. In the best-case scenario, we can guess that some event will probably happen in the future, or we can compare patterns, but it does not guarantee that the future will be that way [30]. In addition, if analysts get used to having every possible detail before making a diagnosis, this might result in an excessive dependence that might lead to paralysis.

Unknowns unknowns, a famous concept developed by Donald Rumsfeld, are perhaps impossible to manage. Taleb creates the concept of “antifragility”, a way to manage uncertainty (wild cards or black swans) but not trying to identify them previously, but being prepared to be stronger in this evolutionary and complex system when events with low probability happen. This concept goes over the resilience theories (Wildavsky, Douglas).

According to the 9/11 Commission Report “it is therefore crucial to find a way of routinizing, even bureaucratizing, the exercise of imagination”. Richard Clark (National Counter-terrorism Coordinator, NSC, 1997–2001) attributed his awareness about the possible use of airplanes as weapons more to Tom Clancy novels than to warnings from the intelligence community.

Imagination is needed to identify attackers, to discover vulnerabilities, to think about a new modus operandi in terrorist attacks, to connect the dots (one of the key functions of intelligence analysis), to preview scenarios, to establish hypothesis to evaluate, to suggest different alternatives, to have different points of view, and to develop new ways and new processes of analysis. Imagination is, sadly, a non-used source of information.

Finding atypical observations, the “dots”, could be the first step in an intelligence process based on creativity. These observations could be originated by the knowledge of rare events, or changes in classical patterns of terrorism. But this information could not only be based on existing data, information or events. It could be possible to create information based on a creative thinking process following some of the multiple methodologies that pursue this aim. Once we have identified a possible “dot”, we propose the use of the Atypical Signal Analysis and Processing (ASAP) concept developed by the RAND National Security Research Division (NSRD) [31].

Foresight as a continuous system

Policy-makers take counter-terrorist measures without objective analysis systems, mainly responding to opportunity or social alarm triggered by some event, and without designing future scenarios that will never take place during their term of office.

The International Centre for Counter-Terrorism [32] developed an important research analysing the references to the future evolution of this phenomenon in 60 surveys conducted by well-known institutions and experts. This survey reaches a conclusion: most of them lack a methodological basis; in general, they do not even mention possible dynamics of change that would allow establishing indicators to monitor the evolution of the phenomenon.

In the best-case scenario, these surveys are a goodwill gesture based on personal opinions, intuition based on experience or trend forecasting.

Lia [33] points out that the literature about the future of terrorism lacks a systematic way of thinking on how social change creates new environments for terrorism. Normally individual events or cases are used and extrapolated, but no analysis is carried out on the evolution of those factors determining the environment where terrorism can increase or be tackled.

Among the different attempts to create such a model, Brynjar Lia’s deserves special attention. The main advantage of this proposal is that it defines a framework to analyse the environment regarding the potential socio-political changes enabling the evolution of terrorism.

Lia basically mentions that there are factors such as international relations (leadership, proliferation of weapons of mass destruction, democratisation, fragile states, multilateralism, peace support interventions, non-governmental actions), economic factors (inequality, relationship between economy and politics, organized crime, energy), demographic factors (growth and migrations), ideologies and technologies that would allow identifying the causes of terrorism and predicting the future (target patterns, terrorism level, deadliness, ideological motivations, geographical location, etc.). A similar model is the one we used in the second epigraph of this paper.

Foresight research, papers or books are static information. When we must address risks with rapid change and high uncertainty, the efforts must be continuous. Foresight must be a permanent system because terrorism is an evolutive concept. Trends are continuously evolving. Drivers and indicators need to be continuously evaluated.

Decision-making process

Evidence-based counter-terrorism policy is widely understood as a historical search for usable and relevant knowledge generated through rational scientific methods to help address and resolve terrorism-related problems, to produce knowledge required for fine-tuning programs and constructing guidelines and toolkits for dealing with known problems.

The centre of policy evidence-based should be to evaluate if counter-terrorism policies work and fix the way we could measure it. But our aim would be broader. It would be, at the end, to design a holistic approach, a model, in order to assure that policing designers had the best knowledge and the best intelligence when they take decisions on counter-terrorism.

For this purpose, we distinguish three phases, but each of them is formed by too many processes:

  1. a)

    Before policing. The decision-maker must have access to the best possible information. Knowledge about terrorism is fragmented and elaborated by different actors (university, think tanks, intelligence analysts, government civil servants, lobbies, citizens’ desires and needs, etc.), and we must join them. We must evaluate the results of this process, in order to know if it works, and to propose an integral framework of knowledge and intelligence for policy makers.

  2. b)

    Taking decisions or policing. We must know how a policy-maker acts. There are many researches about it that we could apply to the process: studies about individual factors, cognitive biases, group factors, public policy theories, and intelligence led policing. We must evaluate this process in order to know the causes of a bad decision (for example, when the decision-maker does not follow the analysts’ advice). It is important to go ahead classical models, as the rational model of decision-making. Policy-makers are not absolutely rational, so we must consider the use of incremental models [34] or less rational models like the multiple stream approach [35], the discrediting decisions of Weick, or the mixed scanning model of Etziani that combines a high policy-making process with basic directions and fundamental decisions and incremental ones that consider past policies and prepare for fundamental decisions and manage them after they are approved [36]. These models should be completed with new visions, under construction, based on networks and collective intelligence.

  3. c)

    After policing. Policies generate effects that must be measured, but not only with rational indicators (arrests, number and cost of attacks, time between attacks). If causing terror is the main objective of terrorism, we should measure fear and terror, and other social impacts of counter-terrorism policies (i.e. loss of civil liberties). This process not only aims to know the effectiveness of the policies, but also to improve future policy making.

A new methodological approach to the study of terrorism and decision-making

Therefore, the model we propose, a holistic approach [37], integrates at least five individual models: a new intelligence process, the decision-making process, the “connecting the dots” model of RAND Corporation, evidence-based policing and foresight. The pillars of this holistic approach are:

  1. a)

    Need to focus on intelligence surveys, analyses and actions on answering the question “what for?”. Decision-making is the major goal, at strategic, tactical and operational levels.

  2. b)

    The intelligence process must satisfy, as a main objective, the need to “connect the dots”, answering the requirements established to inform the decision-making process.

  3. c)

    The sources of those different “dots” are data, information, imagination and creative thinking, and homeland security observations (i.e. previous knowledge, or intuition based on experience).

  4. d)

    There are multiple stakeholders that could help to create the best knowledge and intelligence in order to take actions, design strategies, or make plans. Think tanks, universities, experts, and citizens should be an important part of that process. It would be useful to integrate the synergies among academic studies about intelligence and terrorism.

  5. e)

    A new intelligence process, with the support of modern information technologies, modifying and eliminating the classical cycle of intelligence. This process is not based on a lineal and continuous cycle, but on the use of different tools like scanning, monitoring, information classification and evaluation, integration, analysis, dissemination or visualization of information, which are not sequential stages.

  6. f)

    Time perspective. We shape the future through the decisions we make in every moment. Expectations about the future introduce causal factors in it, and they also condition our decisions at present. But our past (experiences, education) creates our present too. Consequently, we can state that these three moments overlap. The model introduces considerations about non-linearity of time, path dependency and multi-causality.

  7. g)

    The integration of every applicable methodology, from a holistic time-based perspective. From a methodological point of view, it would start from the scientific method and social sciences, incorporating the structured techniques of intelligence analysis, and even including Big Data or the futures studies.

  8. h)

    As the model regards strategic and operational aspects, the use of global systems and models would allow supporting early warning systems. The starting point would be using methodologies such as Environmental Scanning and Horizon Scanning.

  9. i)

    Finally, the model incorporates the theory of evidence-based policing, evaluating different processes: the requirements or needs of intelligence, the intelligence process developed by analysts and their managers, the decision-making process, and the effects of the CT strategies (efficiency, costs, impacts in citizens and other non-desired effects) (Fig. 1).

Fig. 1
figure 1

Holistic process for Counter-terrorism policy-making (Cohen and Blanco 2014)