International institutional profile
Iran
جمهوری اسلامی ایران
A parallel and overlapping architecture in which civilian intelligence, Revolutionary Guard intelligence, internal military protection, conventional armed forces, police, judicial institutions, cyber actors, and leadership offices collect on overlapping problems and also monitor one another.
- Formal name
- Islamic Republic of Iran
- Regional group
- Middle East and North Africa
- Source region
- Middle East and North Africa
- Subregion
- Western Asia
- System orientation
- Parallel civilian, military, ideological, and security architecture
- Research cutoff
- 2026-07-20 UTC
- Research depth
- Reviewed profile
- Profile status
- Foundational detailed profile
Scope and terminology
Institutions are not populations.
This profile describes public institutions and assessed coordination in Iran; it does not attribute institutional conduct to the population, culture, religion, ethnicity, language, or diaspora.
Local and native-script names
- faجمهوری اسلامی ایرانJomhūrī-ye Eslāmī-ye Īrān
The same questions are asked of every system. Evidence of different quality is not forced into equal confidence, and supported differences are not hidden to make profiles look symmetrical.
Orientation
Read the system before judging the system.
The profile separates official structure, independently documented behavior, assessed rivalry, allegation, and unknown information. It does not treat cyber-vendor labels as exact organizational charts.
This profile does not calculate a moral, capability, democracy, threat, or development score. It maps institutions, mandates, reporting relationships, evidence limits, and recurring tensions.
Direction and coordination
How authority becomes intelligence work
Formal authority model
Supreme-leader-centered with parallel civilian and military chains. The presidency and cabinet administer civilian institutions, while the Supreme Leader’s office and military structures exercise decisive authority over major security bodies.
Assessed coordination model
Coordination occurs through leadership offices, national-security councils, military command, and informal competition among overlapping services. Redundancy can improve warning but also produce rivalry, politicization, and inconsistent reporting.
Published law, official organization, and assessed practical influence remain separate. An assessment is not silently presented as an official fact.
Institutional map
Distinct bodies, distinct responsibilities
Civilian / national
Ministry of Intelligence (MOIS / VAJA)
Civilian national intelligence, foreign intelligence, counterintelligence, economic security, and domestic-security functions.
Military / ideological
IRGC Intelligence Organization
Political security, counter-subversion, selected foreign and cyber-related intelligence, and support to Revolutionary Guard priorities.
Internal military CI
IRGC Intelligence Protection Organization
Internal security, personnel vetting, and counterintelligence within the Revolutionary Guard.
Military / foreign
IRGC Quds Force
Extraterritorial military liaison, partner-network support, and intelligence for overseas operations.
Military
Armed Forces General Staff and Artesh intelligence
Conventional military warning, operational intelligence, and service support.
Police
Law Enforcement Command (FARAJA)
Police intelligence, public order, criminal investigation, and domestic-security support.
Judicial
Judiciary and Revolutionary Courts
Adjudication of national-security cases and legal processing of intelligence-derived allegations.
Cyber
Cyber organizations and attributed clusters
Cyber espionage, disruptive operations, information operations, and defense; public attribution confidence varies.
Law, oversight, rights, and accountability
Formal mechanisms and practical constraints
Formal oversight exists through executive, legislative, judicial, and internal structures, but the report emphasizes that parallel organizations and leadership authority limit independent external scrutiny. Official and independent accounts of security cases are shown separately.
Formal oversight exists through executive, legislative, judicial, and internal structures, but the report emphasizes that parallel organizations and leadership authority limit independent external scrutiny. Official and independent accounts of security cases are shown separately. Rights and accountability findings must be attributed to law, courts, official inquiries, or credible independent reporting and should not be generalized beyond the institution or event examined.
The existence of an oversight body does not by itself prove effective accountability. Rights findings are tied to statutes, judgments, inquiries, official positions, and attributable independent reporting.
International dimension
Interdependence, liaison, competition, and constraint
Iranian priorities include regime security, regional deterrence, nuclear and defense security, sanctions resilience, diaspora monitoring, cyber operations, economic survival, and competition with regional and global powers.
Multiple liaison reports are not independent corroboration when they trace to one originating source. Caveats, purpose limits, and correction history remain attached.
Strengths, tradeoffs, and pressure points
Institutional design creates advantages and costs.
Strengths visible in public evidence
- Institutional specialization visible in the public record
- Multiple channels for collection, analysis, or operational support
- International liaison or technical cooperation where documented
Structural tradeoffs
- MOIS versus IRGC institutional rivalry
- Civilian administration versus ideological military authority
- Redundancy for coup-proofing versus coordination failure
Recurring institutional tensions
- MOIS versus IRGC institutional rivalry
- Civilian administration versus ideological military authority
- Redundancy for coup-proofing versus coordination failure
- Official attribution versus independent technical assessment
Fictional game-design translation
Use institutional pressures—not national stereotypes.
Mission pattern
Parallel services investigate the same suspected compromise, each with different access, incentives, and reporting channels; players must reconcile contradictions without treating rivalry as proof.
Information asymmetry
Competing services hold partial evidence and may withhold information to protect institutional influence or sources.
Player roles
- Civilian intelligence analyst
- IRGC security analyst
- Military counterintelligence officer
- Police investigator
- National-security coordinator
Fairness guardrail
Do not equate intelligence effectiveness with political legitimacy, and do not present disputed foreign attribution as uncontested fact.
Game examples use fictional places, authorities, organizations, and actors. They do not provide practical targeting, intrusion, coercion, surveillance-evasion, cyber-exploitation, weapons, or physical-harm instructions.
Myths and corrections
Common simplifications to avoid
Myth: MOIS and IRGC intelligence are interchangeable names for one service.
Correction: They are distinct institutions with overlapping responsibilities and persistent rivalry.
Myth: Every public cyber-cluster label maps cleanly to one Iranian organization.
Correction: Technical clusters may share infrastructure, contractors, tools, or sponsors; attribution confidence must remain visible.
Research and provenance
Read the complete report and its evidence limits.
The profile is an orientation layer. The full report preserves the longer institutional discussion, source register, terminology, caveats, and correction plan.
Deep links into the report
- Command structure
- MOIS
- IRGC intelligence
- Coordination
- Iran in the full report
- Oversight and accountability