John Nolan · HarperBusiness, 1999 · 359 pages

Confidential

Uncover Your Competitors' Top Business Secrets Legally and Quickly — and Protect Your Own

Intelligence training rewritten for people who sell things. Three roughly equal parts: how to draw information out, how to run that as an operation, and how to stop it being done to you.

00 Read this before you trust a word

This book is still in copyright and I do not have its text. So unlike a digest of a public-domain book, nothing here is checked against the book itself. It is built from five sources I opened and read: the publisher's authorised excerpt, a long interview with the author, a training deck that teaches his method by name, contemporary reporting on his firm, and the verified contents page.

Every quoted claim carries a tag naming its source. The linking prose, the summary and the judgements about what aged well are mine and are not tagged — treat those as my reading, not as the book. If you already own a copy, point me at it and I will rebuild this against the real text.

01 The short version

  1. His publisher bio says 22 years in intelligence collection and counterintelligence special operations. He then sold those methods to companies. This is that training, written down.
  2. The hard part is not the techniques. He says stop asking questions — the opposite of how everyone tries to find things out.
  3. There is a real contradiction inside it about how far the deception goes. It is on this page rather than smoothed over.

02 How the book is built

Three parts. The third is the first two turned around and pointed at you.

The three parts of Confidential Three parts: elicit (ch. 1-7, ending in twelve techniques), collect (8-13, run as an operation), protect (14-19, the same map read backwards). PART I · CH. 1–7 Elicit How to have the conversation. Ends in twelve techniques, served as two “six-packs”. PART II · CH. 8–13 Collect Run it as an operation: inside sources, outside sources, trade shows, profiles. PART III · CH. 14–19 Protect The same map, read backwards. Work out how you'd be attacked, then attack yourself. everything in parts I and II is also the threat model
The reason the book works as a defensive manual: the attack chapters are the defence chapters.

03 The method, in ten pieces

01

The whole book runs on one line: get it by talking to people, not by stealing it.

His publisher bio says 22 years in intelligence collection and counterintelligence special operations. He then sold those methods to companies. The argument: most of what you want is already in someone's head.

We do it legally and ethically. We don't steal information, bribe people, bug their conference rooms and executive suites, or hack into their computers.

HIS WORDS, FROM THE BOOK
02

His stated rule: use your real name and your real company.

This is the line he says separates his trade from spying. You may keep a client's name confidential. You may not pretend to be someone you are not.

we follow a standard that requires us to identify ourselves by our true names, and by our company.

HIS WORDS, FROM THE BOOK
03

Elicitation is not interviewing. The trick is to stop asking questions.

A question tells the other person exactly what you want, and people remember being questioned. A conversation that drifts does not feel like collection, so nothing closes up.

a process which… avoids direct questions and employs a conversational style to help reduce concerns and suspicions… in the interest of maximizing the flow of information

TAUGHT AS HIS METHOD
04

Put the thing you actually want in the middle of the conversation.

People remember the start and the end of a conversation clearly and the middle vaguely. So the small talk goes at both ends, and the one thing you came for goes where memory is weakest. A 2022 training deck teaches this under the heading “Nolan’s elicitation methodology”.

confine CI topics to the middle of

TAUGHT AS HIS METHOD
05

Pick the technique to fit the person, not your own comfort.

A boaster gets drawn into one-upmanship. A precise, introverted specialist gets told something slightly wrong, because he cannot leave an error alone. Same goal, opposite move.

if it's someone who is boastful, I'm going to want to get him involved in one-upsmanship

HIS WORDS, ELSEWHERE
06

The best collector is a connector — and lazy people treat every meeting as one-off.

He keeps a running file on people and updates it after every contact, so that two years later he can pick up where the last conversation ended. That is the work most people will not do.

The best collector is a connector. As soon as he meets somebody, he starts filling in the boxes on his Rolodex about that particular guy.

HIS WORDS, ELSEWHERE
07

Introverts are often better at this than extroverts.

The talkative person fills every silence and guesses wrong. The quiet person can sit in a pause until the other person fills it. He says 'often' — the article warns against turning it into a stereotype.

An introvert is often going to be a magnificent elicitor because he knows he has to be thinking before he says anything.

HIS WORDS, ELSEWHERE
08

A trade show is a collection operation, and the person on the booth is chosen for talking.

Trade shows get their own chapter. The person a company puts on its booth is picked for being outgoing and competitive — exactly the personality that talks too much.

The booth maven is going to be a competitive, aggressive guy. That's who you want there, but he's got a push-to-talk button painted on his chest, as far as I'm concerned.

HIS WORDS, ELSEWHERE
09

Twelve named techniques, delivered as two "six-packs".

Chapters 6 and 7 are titled 'Your First Six-Pack of Elicitation Techniques' and 'Your Second Six-Pack'. Twelve primary named techniques; variants may push the count higher depending on how you slice them.

Ch. 6 — Your First Six-Pack of Elicitation Techniques (p. 54) · Ch. 7 — Your Second Six-Pack of Elicitation Techniques (p. 80)

THE BOOK'S CONTENTS PAGE
10

The second half is the first half turned around: protection means knowing exactly how you would be attacked.

Part III asks who wants your information, what routes they would use, and how long it stays valuable — then tells you to attack yourself and find out.

Ch. 16 — Just How Vulnerable Are You to Your Rival's Collection Activities? Test Yourself, Attack Yourself (p. 221)

THE BOOK'S CONTENTS PAGE
Reading the person, then picking the move Four source types and the technique each one invites. A boaster invites one-upmanship. A precise specialist invites a deliberate small error they will correct. A complainer invites a sympathetic ear. A competitive type invites a bet. The common rule underneath: say something, then stop talking. READ THE PERSON PLAY THE MOVE The boaster Talk up yours. He must top it. The precise specialist Be slightly wrong. He cannot let it stand. The complainer Sympathise. Then say nothing. The competitor Bet him it cannot be done. and underneath all four: say your piece, then stop talking
His rule is that the technique follows the person, not your own habits.

04 The contradiction I could not resolve

What the book says

The authorised excerpt is unambiguous. He rejects ruses outright: “We don't misrepresent ourselves, conduct ruse interviews, or have specially molded masks to impersonate others.” The standard is your true name and your true company.

What a reporter wrote the same year

A July 1999 report on his firm — the reporter's paraphrase, not Nolan quoted — describes analysts approaching targets under pretexts, posing as customers or prospective employers. Critics quoted there called false identities unethical even where legal.

Why it is here

Both are sources I read myself. I cannot reconcile them without the book. Quietly picking the flattering one is the failure this format exists to prevent.

05 The rest of it

The rest, one line each, tagged the same way.

06 It is from 1999. What still holds?

Written before the thing that made it powerful

1999 is pre-LinkedIn, pre-everyone-posting-their-job. Its central move — assemble harmless fragments into something valuable — got far easier after it was written.

“Legal” is not the same as “conversational”

Getting something by talking is not automatically lawful. US law counts misrepresentation and inducing someone to break a confidentiality duty as improper means. The 1996 appendix is out of date and the 2016 Defend Trade Secrets Act changed the civil picture. Take current advice.

The tradecraft aged well

Rapport, preparation, listening, matching the approach to the person — human behaviour, not technology. Trainers were still teaching his methods by name in 2022.

The protection half aged best

Trade-secret protection still turns on taking reasonable steps to keep a secret. Stamping everything confidential is not one. His “attack yourself” chapter is the practical version.

07 What is actually in the book

Transcribed from the library catalogue record. Chapter titles are shortened where they run long; appendices D–F are listed without page numbers because the record does not give them. This is the one piece of the book's own structure I can show you.

Table of contents
Ch.TitlePage
Front
PrefWhat Do Intelligence Professionals and Sharks Have in Common?p. xi
IntroAll History Is Merely Prologue on the Business Battlefieldp. xv
I · Eliciting the information you want
1Transfer Intelligence Community Techniques to the Commercial Sectorp. 7
2What Good Does It Do to Ask Questions?p. 15
3Exploding Old Myths and Succeeding at Elicitationp. 22
4Human Characteristics in Elicitationp. 34
5Who Is Most Susceptible to Elicitation — And Who Is Supposedly Most Immunep. 44
6Your First Six-Pack of Elicitation Techniquesp. 54
7Your Second Six-Pack of Elicitation Techniquesp. 80
II · Business intelligence collection
8Intelligence for Decision Makersp. 101
9Operational Business Intelligence — Actually Doing Itp. 109
10Intelligence Begins at Home: Internal Sourcesp. 118
11The World Can Be Your Oyster: External Sourcesp. 131
12Trade Show / Conference Intelligence Operationsp. 145
13Developing Personality and Psychological Profiles of Business Rivalsp. 172
III · Protection
14Operational Counterintelligence: Keeping Score and Keeping Them Outp. 190
15Who Are Those Guys and Why Are They Doing Such Terrible Things to Us?p. 205
16Just How Vulnerable Are You? Test Yourself, Attack Yourselfp. 221
17Developing Countermeasures for Your Dining and Dancing Pleasurep. 240
18Misinformation, Disinformation, and Deceptionp. 260
19Putting It All Togetherp. 271
Appendices
AThe Elicitation Techniques of Sherlock Holmesp. 277
BLegal and Ethical Aspects of Competitive Intelligencep. 286
CSample Competitive Intelligence Guidelinesp. 302
DThe Economic Espionage Act of 1996p. —
ECases and scenariosp. —
FForms and documentationp. —

08 Method, and what would make this better

What was checked

Eleven quotations matched word-for-word against documents on disk, and checked that Nolan is the nearest named speaker — a red team caught one line I had credited to him that belongs to Joe Navarro. It is gone.

What was not

Nine claims rest on pages I read but cannot re-match — and nothing at all against the book itself.

What I threw out

A research finding claimed his firm was named in a corporate-spying scandal. Independent sources did not confirm it, so it is not here.

The fix

Point me at a copy you already own. The pipeline that built the Machiavelli digest checks every quote against the real text and prints its chapter.

09 Check it yourself

The bottom line: 20 claims, 11 quotations machine-checked against documents on disk, 9 attested to pages read this run, and 0 checked against the book itself — because it is in copyright and I do not have it. 3 quotes were cut for not matching, 1 was cut for being said by someone else, and 1 research claim was dropped for failing verification.