Course: IS-100 - Incident Command System (ICS) 100 Training
Lesson 2: ICS Features and Principles
Lesson Overview
The ICS Features and Principles lesson introduces you to:
- ICS management principles.
- ICS core system features.
- Common ICS responsibilities.
By the end of this lesson, you should be able to:
- Describe the basic features of ICS.
- Identify common incident tasks.
- Describe the six basic ICS facilities.
- Identify facilities that may be located together.
- Identify facility map symbols.
- Describe common responsibilities at an incident.
- List individual accountability responsibilities.
- Describe common mobilization responsibilities.
- Describe common demobilization responsibilities.
ICS Features
As you learned in the previous lesson, ICS is based on proven management principles, which contribute to the strength and efficiency of the overall system.
ICS principles are implemented through a wide range of management features including the use of common terminology and clear text, and a modular organizational structure.
ICS emphasizes effective planning, including management by objectives and reliance on an Incident Action Plan.
ICS helps ensure full utilization of all incident resources by:
- Maintaining a manageable span of control.
- Establishing predesignated incident locations and facilities.
- Implementing resource management practices.
- Ensuring integrated communications.
The ICS features related to command structure include chain of command and unity of command as well as, unified command and transfer of command. Formal transfer of command occurs whenever leadership changes.
Through accountability and mobilization, ICS helps ensure that resources are on hand and ready.
And, finally ICS supports responders and decisionmakers by providing the data they need through effective information and intelligence management.
This lesson covers each of these ICS features in detail.
Common Terminology and Clear Text
The ability to communicate within the ICS is absolutely critical. An essential method for ensuring the ability to communicate is by using common terminology and clear text.
A critical part of an effective multiagency incident management system is for all communications to be in plain English. That is, use clear text. Do not use radio codes, agency-specific codes, or jargon.
ICS establishes common terminology allowing diverse incident management and support entities to work together. Common terminology helps to define:
- Organizational Functions: Major functions and functional units with incident management responsibilities are named and defined. Terminology for the organizational elements involved is standard and consistent.
- Resource Descriptions: Major resources (personnel, facilities, and equipment/ supply items) are given common names and are "typed" or categorized by their capabilities. This helps to avoid confusion and to enhance interoperability.
- Incident Facilities: Common terminology is used to designate incident facilities.
- Position Titles: ICS management or supervisory positions are referred to by titles, such as Officer, Chief, Director, Supervisor, or Leader.
Each of the above areas will be covered in more detail in this and the remaining lessons.
Modular Organization
The ICS organizational structure develops in a top-down, modular fashion that is based on the size and complexity of the incident, as well as the specifics of the hazard environment created by the incident. As incident complexity increases, the organization expands from the top down as functional responsibilities are delegated.
The ICS organizational structure is flexible. When needed, separate functional elements can be established and subdivided to enhance internal organizational management and external coordination. As the ICS organizational structure expands, the number of management positions also expands to adequately address the requirements of the incident.
In ICS, only those functions or positions necessary for a particular incident will be filled.
Management by Objectives
All levels of a growing ICS organization must have a clear understanding of the functional actions required to manage the incident. Management by objectives is an approach used to communicate functional actions throughout the entire ICS organization. It can be accomplished through the incident action planning process, which includes the following steps:
| Step 1: | Understand agency policy and direction. |
| Step 2: | Assess incident situation. |
| Step 3: | Establish incident objectives. |
| Step 4: | Select appropriate strategy or strategies to achieve objectives. |
| Step 5: | Perform tactical direction (applying tactics appropriate to the strategy, assigning the right resources, and monitoring their performance). |
| Step 6: | Provide necessary followup (changing strategy or tactics, adding or subtracting resources, etc.). |
Reliance on an Incident Action Plan
In ICS, considerable emphasis is placed on developing effective Incident Action Plans.
An Incident Action Plan (IAP) is an oral or written plan containing general objectives reflecting the overall strategy for managing an incident. An IAP includes the identification of operational resources and assignments and may include attachments that provide additional direction.
Every incident must have a verbal or written Incident Action Plan. The purpose of this plan is to provide all incident supervisory personnel with direction for actions to be implemented during the operational period identified in the plan.
Incident Action Plans include the measurable strategic operations to be achieved and are prepared around a timeframe called an Operational Period.
Incident Action Plans provide a coherent means of communicating the overall incident objectives in the context of both operational and support activities. The plan may be oral or written except for hazardous materials incidents, which require a written IAP.
At the simplest level, all Incident Action Plans must have four elements:
- What do we want to do?
- Who is responsible for doing it?
- How do we communicate with each other?
- What is the procedure if someone is injured?
Manageable Span of Control
Another basic ICS feature concerns the supervisory structure of the organization.
Span of control pertains to the number of individuals or resources that one supervisor can manage effectively during emergency response incidents or special events. Maintaining an effective span of control is particularly important on incidents where safety and accountability are a top priority.
Span of control is the key to effective and efficient incident management. The type of incident, nature of the task, hazards and safety factors, and distances between personnel and resources all influence span of control considerations.
Maintaining adequate span of control throughout the ICS organization is very important.
Effective span of control on incidents may vary from three (3) to seven (7), and a ratio of one (1) supervisor to five (5) reporting elements is recommended.
If the number of reporting elements falls outside of these ranges, expansion or consolidation of the organization may be necessary. There may be exceptions, usually in lower-risk assignments or where resources work in close proximity to each other.
Predesignated Incident Locations and Facilities
Incident activities may be accomplished from a variety of operational locations and support facilities. Facilities will be identified and established by the Incident Commander depending on the requirements and complexity of the incident or event.
It is important to know and understand the names and functions of the principal ICS facilities.
Incident Facilities Virtual Tour
The Incident Command Post, or ICP, is the location from which the Incident Commander oversees all incident operations. There is generally only one ICP for each incident or event, but it may change locations during the event. Every incident or event must have some form of an Incident Command Post. The ICP may be located in a vehicle, trailer, tent, or within a building. The ICP will be positioned outside of the present and potential hazard zone but close enough to the incident to maintain command. The ICP will be designated by the name of the incident, e.g., Trail Creek ICP.
Staging Areas are temporary locations at an incident where personnel and equipment are kept while waiting for tactical assignments. The resources in the Staging Area are always in available status. Staging Areas should be located close enough to the incident for a timely response, but far enough away to be out of the immediate impact zone. There may be more than one Staging Area at an incident. Staging Areas can be collocated with the ICP, Bases, Camps, Helibases, or Helispots.
A Base is the location from which primary logistics and administrative functions are coordinated and administered. The Base may be collocated with the Incident Command Post. There is only one Base per incident, and it is designated by the incident name. The Base is established and managed by the Logistics Section. The resources in the Base are always out-of-service.
A Camp is the location where resources may be kept to support incident operations if a Base is not accessible to all resources. Camps are temporary locations within the general incident area, which are equipped and staffed to provide food, water, sleeping areas, and sanitary services. Camps are designated by geographic location or number. Multiple Camps may be used, but not all incidents will have Camps.
A Helibase is the location from which helicopter-centered air operations are conducted. Helibases are generally used on a more long-term basis and include such services as fueling and maintenance. The Helibase is usually designated by the name of the incident, e.g. Trail Creek Helibase.
Helispots are more temporary locations at the incident, where helicopters can safely land and take off. Multiple Helispots may be used.
Incident Facility Map Symbols
In ICS, it is important to be able to identify the map symbols associated with the basic incident facilities. The map symbols used to represent each of the six basic ICS facilities are:
|
|
|
|
Resource Management
ICS resources can be factored into two categories:
- Tactical Resources: Personnel and major items of equipment that are available or potentially available to the Operations function on assignment to incidents are called tactical resources.
- Support Resources: All other resources required to support the incident. Food, communications equipment, tents, supplies, and fleet vehicles are examples of support resources.
Tactical resources are always classified as one of the following:
- Assigned: Assigned resources are working on an assignment under the direction of a Supervisor.
- Available: Available resources are assembled, have been issued their equipment, and are ready for immediate assignment.
- Out-Of-Service: Out-of-service resources are not ready for available or assigned status.
Maintaining an accurate and up-to-date picture of resource utilization is a critical component of resource management.
Resource management includes processes for:
- Categorizing resources.
- Ordering resources.
- Dispatching resources.
- Tracking resources.
- Recovering resources.
It also includes processes for reimbursement for resources, as appropriate.
Integrated Communications
The use of a common communications plan is essential for ensuring that responders can communicate with one another during an incident. Communication equipment, procedures, and systems must operate across jurisdictions (interoperably).
Developing an integrated voice and data communications system, including equipment, systems, and protocols, must occur prior to an incident.
Effective ICS communications include three elements:
- Modes: The "hardware" systems that transfer information.
- Planning: Planning for the use of all available communications resources.
- Networks: The procedures and processes for transferring information internally and externally.
Chain of Command and Unity of Command
In the Incident Command System:
- Chain of command means that there is an orderly line of authority within the ranks of the organization, with lower levels subordinate to, and connected to, higher levels.
- Unity of command means that every individual is accountable to only one designated supervisor to whom they report at the scene of an incident.
The principles clarify reporting relationships and eliminate the confusion caused by multiple, conflicting directives. Incident managers at all levels must be able to control the actions of all personnel under their supervision. These principles do not apply to the exchange of information. Although orders must flow through the chain of command, members of the organization may directly communicate with each other to ask for or share information.
The command function may be carried out in two ways:
- As a Single Command in which the Incident Commander will have complete responsibility for incident management. A Single Command may be simple, involving an Incident Commander and single resources, or it may be a complex organizational structure with an Incident Management Team.
- As a Unified Command in which responding agencies and/or jurisdictions with responsibility for the incident share incident management.
Unified Command
A Unified Command may be needed for incidents involving:
- Multiple jurisdictions.
- A single jurisdiction with multiple agencies sharing responsibility.
- Multiple jurisdictions with multi-agency involvement.
If a Unified Command is needed, Incident Commanders representing agencies or jurisdictions that share responsibility for the incident manage the response from a single Incident Command Post.
A Unified Command allows agencies with different legal, geographic, and functional authorities and responsibilities to work together effectively without affecting individual agency authority, responsibility, or accountability. Under a Unified Command, a single, coordinated Incident Action Plan will direct all activities. The Incident Commanders will supervise a single Command and General Staff organization and speak with one voice.
Transfer of Command
The process of moving the responsibility for incident command from one Incident Commander to another is called transfer of command. Transfer of command may take place when:
- A more qualified person assumes command.
- The incident situation changes over time, resulting in a legal requirement to change command.
- Changing command makes good sense, e.g., an Incident Management Team takes command of an incident from a local jurisdictional unit due to increased incident complexity.
- There is normal turnover of personnel on long or extended incidents, i.e., to accomodate work/rest requirements.
- The incident response is concluded and incident responsibility is transferred back to the home agency.
The transfer of command process always includes a transfer of command briefing, which may be oral, written, or a combination of both.
Accountability
Effective accountability during incident operations is essential at all jurisdictional levels and within individual functional areas. Individuals must abide by their agency policies and guidelines and any applicable local, tribal, State, or Federal rules and regulations. The following guidelines must be adhered to:
- Check-In: All responders, regardless of agency affiliation, must report in to receive an assignment in accordance with the procedures established by the Incident Commander.
- Incident Action Plan: Response operations must be directed and coordinated as outlined in the IAP.
- Unity of Command: Each individual involved in incident operations will be assigned to only one supervisor.
- Span of Control: Supervisors must be able to adequately supervise and control their subordinates, as well as communicate with and manage all resources under their supervision.
- Resource Tracking: Supervisors must record and report resource status changes as they occur.
Mobilization
At any incident or event, the situation must be assessed and response planned. Resources must be organized, assigned and directed to accomplish the incident objectives. As they work, resources must be managed to adjust to changing conditions.
Managing resources safely and effectively is the most important consideration at an incident. Therefore, personnel and equipment should respond only when requested or when dispatched by an appropriate authority.
Information and Intelligence Management
The analysis and sharing of information and intelligence is an important component of ICS. The incident management organization must establish a process for gathering, sharing, and managing incident-related information and intelligence.
Intelligence includes not only national security or other types of classified information but also other operational information that may come from a variety of different sources, such as:
|
|
General GuidelinesLengthy Assignments
Many incidents last only a short time, and may not require travel. Other deployments may require a lengthy assignment away from home. Below are general guidelines for incidents requiring extended stays or travel:
- Assemble a travel kit containing any special technical information (e.g., maps, manuals, contact lists, and reference materials).
- Prepare personal items needed for your estimated length of stay, including medications, cash, credit cards, etc.
- Ensure that family members know your destination and how to contact you.
- Determine appropriate travel authorizations.
- Familiarize yourself with travel and transportation arrangements.
- Determine your return mode of transportation (if possible).
- Determine payroll procedures (at incident or through home agency).
- If you are going on a foreign assignment, be sure to take your passport.
General GuidelinesRoles and Authorities
In addition to preparing for your travel arrangements, it is important to understand your role and authorities.
- Review your emergency assignment. Know who you will report to and what your position will be.
- Establish a clear understanding of your decisionmaking authority.
- Determine communications procedures for contacting your headquarters or home office (if necessary).
- Identify purchasing authority and procedures.
- Identify procedures for obtaining food and lodging.
Actions Prior to Departure
Upon receiving an incident assignment, your deployment briefing should include, but may not be limited to, the following information:
- Incident type and name or designation
- Descriptive location and response area
- Incident check-in location
- Specific assignment
- Reporting date and time
- Travel instructions
- Communications instructions, e.g., incident frequencies
- Special support requirements (facilities, equipment transportation and off-loading, etc.)
- Travel authorization for air, rental car, lodging, meals, and incidental expenses
Check-In at the Incident: Activities
Check-in officially logs you in at the incident. The check-in process and information helps to:
- Ensure personnel accountability.
- Track resources.
- Prepare personnel for assignments and reassignments.
- Locate personnel in case of an emergency.
- Establish personnel time records and payroll documentation.
- Plan for releasing personnel.
- Organize the demobilization process.
Check-In at the Incident: Locations
Check in only once. Check-in locations may be found at several incident facilities, including:
- Incident Command Post.
- Base or Camp(s).
- Staging Areas.
- Helibase.
- Division/Group Supervisor (for direct assignment).
Note that these locations may not all be activated at every incident.
Check-in information is usually recorded on ICS Form 211, Check-In List.
Initial Incident Briefing
After check-in, locate your incident supervisor and obtain your initial briefing. The briefing information helps you plan your tasks and communicate with others. Briefings received and given should include:
- Current situation assessment.
- Identification of your specific job responsibilities.
- Identification of coworkers.
- Location of work area.
- Identification of eating and sleeping arrangements, as appropriate.
- Procedural instructions for obtaining additional supplies, services, and personnel.
- Operational periods/work shifts.
- Required safety procedures and Personal Protective Equipment (PPE), as appropriate.
Incident Recordkeeping
All incidents require some form of recordkeeping. Requirements vary depending upon the agencies involved and the nature of the incident. Detailed information on using ICS forms will be covered in other training sessions, or may be found in the Forms Manual.
Below are general guidelines for incident recordkeeping:
- Print or type all entries.
- Enter dates by month/day/year format.
- Enter date and time on all forms and records. Use local time.
- Fill in all blanks. Use N/A as appropriate.
- Use military 24-hour time.
- Section Chiefs and above assign recordkeeper (scribe).
If you are expected to be a supervisor:
- You must maintain a daily Unit Log (ICS-214), indicating the names of personnel assigned and a listing of the major activities that occured during the operational periods to which you were assigned.
- You are expected to give briefings to your subordinates, adjacent forces, and replacement personnel.
Communications Discipline
Important considerations related to communications include:
- Observing strict radio/telephone procedures.
- Using plain English in all communications. Codes should not be used in radio transmissions. Limit the use of discipline-specific jargon, especially on interdisciplinary incidents.
- Limiting radio and telephone traffic to essential information only. Plan what you are going to say.
- Following procedures for secure communications as required.
Personal Conduct
Sexual harassment or discrimination of any type and the use of illegal drugs and/or alcohol are prohibited on all incidents. Report all such activities to your supervisor.
Often times, incident response can produce high stress situations. As part of your responsibilities, you may be required to interact with people who have been adversely affected by the incident. It is important to be patient and act in a professional manner at all times.
Incident Demobilization
Agency requirements for demobilization may vary considerably. General demobilization guidelines for all personnel are to:
- Complete all work assignments and required forms/reports.
- Brief replacements, subordinates, and supervisor.
- Evaluate the performance of subordinates.
- Follow incident and agency check-out procedures.
- Provide adequate followup contact information.
- Return any incident-issued equipment or other nonexpendable supplies.
- Complete postincident reports, critiques, evaluations, and medical followup.
- Complete all payment and/or payroll issues or obligations.
- Upon arrival at home, notify the home unit (i.e., whomever is tracking you) of your arrival and ensure your readiness.



