Emergency Preparedness

Appendix P EOC ACTIVATION

Topic Organizational Structure  ICS allows for organizational flexibility, so the Intelligence/Investigations Function can be embedded in several different places within the organizationalstructure:  Within the Planning Section. This is the traditional placement for this function and is appropriate for incidents with little or no investigative information requirements, nor a significant amount of specialized information.  As a Separate General Staff Section. This option may be appropriate when there is an intelligence/investigative component to the incident or when multiple investigative agencies are part of the investigative process and/or there is a need for classified intelligence.  Within the Operations Section. This option may be appropriate for incidents that require a high degree of linkage and coordination between the investigative information and the operational tactics that are being employed.  Within the Command Staff. This option may be appropriate for incidents with little need for tactical information or classified intelligence and where supporting Agency Representatives are providing the real-time information to the CommandElement.  The mission of the Intelligence/Investigations Function is to ensure that all investigative and intelligence operations, functions, and activities within the incident response are properly managed, coordinated, and directed in order to:  Prevent/deter additional activity, incidents, and/or attacks.  Collect, process, analyze, and appropriately disseminate intelligenceinformation.  Conduct a thorough and comprehensive investigation.  Identify, process, collect, create a chain of custody for, safeguard, examine/analyze, and store all situational intelligence and/or probative evidence.  The Intelligence/Investigations Function has responsibilities that cross all departments’ interests involved during an incident, but there are functions that remain specific to law enforcement response and/or mission areas. Two examples of these are expeditious identification and apprehension of all perpetrators, and successful prosecution of all defendants.  Regardless of how the Intelligence/Investigations Function is organized, a close liaison will be maintained and information will be transmitted to Command, Operations, and Planning. However, classified information requiring a security clearance, sensitive information, or specific investigative tactics that would compromise the investigation will be shared only with those who have the appropriate security clearance and need to know.

May 2008

Incident Command System Training

Page 16