8.1 Incident Response & Incident Command System (ICS/NIMS)

8.1 Incident Response & Incident Command System (ICS/NIMS)

During physical security incidents, industrial accidents, severe weather events, or hostile threat scenarios, effective command and control determines whether an organization mitigates damage or succumbs to operational chaos. The Incident Command System (ICS) is a standardized, on-scene, all-hazards management concept designed to enable effective and efficient incident management by integrating a combination of facilities, equipment, personnel, procedures, and communications operating within a common organizational structure.

Originally developed in the 1970s following devastating wildfires in Southern California under the FIRESCOPE (Firefighting Resources of California Organized for Potential Emergencies) project, ICS was formally integrated into the federal framework under the National Incident Management System (NIMS) published by the Federal Emergency Management Agency (FEMA). For Associate Protection Professionals (APP), mastering ICS and NIMS principles is essential for structuring internal response efforts and collaborating seamlessly with municipal emergency services.

---

Core Principles of the Incident Command System

ICS is built upon foundational management principles that maintain operational stability regardless of the incident size or complexity:

• Common Terminology: ICS requires standard titles for organizational functions, facility designations, and operational resources. Agency-specific jargon, radio codes, or acronyms are strictly prohibited to avoid dangerous miscommunications between public and private responders.
• Modular Organization: The command structure expands and contracts top-down based on the scale and complexity of the event. Positions are activated only as required by the operational environment; unneeded positions remain unassigned.
• Management by Objectives: The Incident Commander (IC) establishes overarching incident objectives, which drive tactical strategies and operational assignments. These objectives are documented in a formal Incident Action Plan (IAP) for operational periods exceeding brief tactical interventions.
• Manageable Span of Control: Maintaining an effective ratio of supervisors to subordinates is critical for safety and oversight. The ideal span of control under ICS is 1 supervisor to 5 subordinates (1:5), with an acceptable operational range of 1:3 to 1:7.
• Unified Command: When incidents involve multiple geographical jurisdictions, legal authorities, or private-public functional boundaries, a Unified Command structure replaces a single Incident Commander. Representatives from participating entities co-locate to establish a single set of incident objectives and a unified IAP without forfeiting their individual agency authorities.
• Chain of Command & Unity of Command: Every individual in the response organization reports to only one designated supervisor, establishing clear lines of accountability and eliminating conflicting orders.

---

Organizational Structure: Command Staff vs. General Staff

The ICS organization is partitioned into two primary leadership structures reporting directly to the Incident Commander: the Command Staff and the General Staff.

                    +-----------------------+
                    |  Incident Commander   |
                    +-----------+-----------
                                |
        +-----------------------+-----------------------+
        |                                               |
+-------+-------+                               +-------+-------+
| Command Staff |                               | General Staff |
+---------------+                               +---------------+
| • Safety Off. |                               | • Operations  |
| • PIO         |                               | • Planning    |
| • Liaison Off |                               | • Logistics   |
+---------------+                               | • Finance/Adm |
                                                +---------------

The Incident Commander (IC)

The Incident Commander holds ultimate operational authority and responsibility for managing all incident operations, establishing objectives, and ensuring overall scene safety. On private property, the initial IC is often the senior facility security supervisor until command is formally transferred to public safety authorities or an executive lead.

Command Staff Functions

Command Staff members carry out specialized administrative and inter-agency coordination functions directly supporting the Incident Commander:

1. Public Information Officer (PIO): Serves as the sole authorized conduit for releasing official information, press statements, and media briefings regarding the incident. The PIO coordinates message content with executive leadership and partner agencies to ensure accuracy and prevent rumor dissemination.
2. Safety Officer: Monitors tactical operations, identifies hazardous conditions, and enforces safety protocols. Critically, the Safety Officer possesses direct, independent authority to order immediate suspension or alteration of any unsafe operational activity without prior approval from the Incident Commander.
3. Liaison Officer: Acts as the primary point of contact for representatives from assisting and cooperating agencies, such as municipal police, fire departments, public health officials, or corporate utility providers.

General Staff Sections

The General Staff manages the functional execution of the Incident Action Plan across four specialized sections, each led by a Section Chief:

• Operations Section: Executes tactical actions to resolve the immediate hazard, rescue victims, protect assets, and stabilize the emergency scene.
• Planning Section: Collects, evaluates, and disseminates incident intelligence; tracks operational resources; and prepares the written Incident Action Plan for upcoming operational cycles.
• Logistics Section: Procures and maintains facilities, equipment, transportation, communications hardware, medical care, and supplies required to sustain response personnel.
• Finance/Administration Section: Manages personnel time tracking, vendor contracts, procurement documentation, risk management claims, and post-incident cost accounting.

---

Summary of ICS Command & General Staff Roles

---

NIMS Integration & Public-Private Coordination

The National Incident Management System (NIMS) extends standard ICS concepts nationwide, creating a unified framework across federal, state, local, tribal, and private-sector organizations. NIMS standardizes resource typing (categorizing response equipment and personnel by capability metrics) and qualification credentialing.

When a major incident affects a commercial enterprise, private security personnel initiate field ICS. Upon the arrival of municipal emergency responders, a formal Transfer of Command takes place. This process requires a comprehensive verbal briefing covering incident history, current objectives, safety hazards, resource commitments, and ongoing tactical assignments before command is formally passed to the public authority.