Where in ICS is the information and intelligence function organized?

Answer 1

Under the flexible structure of ICS, the Intel and Info function can be positioned in several places within the organization, based upon tactical needs, the amount of intel and how sensitive it is (classified or time-sensitive).

In short:

• within the command staff
• as a unit within the planning section
• as a separate general staff section, or
• as a branch within the operations section

As with any other function, it naturally resides in the Command Staff (the IC and Deputies) until delegated and staffed elsewhere. The IC can also designate a special I/I staffer, especially when what little classified intel they have is being provided by liaison to other agencies.

However, the traditional position would be staffed within the Planning Section, provided if there is a manageable amount of specialized info and little additional ICS need for investigation. For instance, situation status, resource status and anticipated change/escalation would be "planning" functions (e.g., weather forecasts, delayed availability of ordered resources, etc).

Where a large part of the incident is intel/investigation, a separate General Staff Section can be established and staffed, particularly where there is critical and time-sensitive, specialized info or classified information is being used or developed. This choice may be most appropriate in those instances where an incident is heavily influenced by intelligence factors, or where there is a need to manage and/or analyze a large volume of classified or highly sensitive intelligence or information. This option is particularly relevant to a terrorism incident, where intelligence plays a crucial role throughout the incident lifecycle.

Where an even closer linkage is necessary for operational tactics, I/I may also be implemented within the Operations Section itself.

Based upon NIMS 2008 guidance.

Answer 2

The Information and Intelligence Function of ICS refers to the collection, analysis and sharing of status of the situation, resources and anticipated changes. For example, the forecast weather impacts on obtaining supplies to a remote site in time to be useful.

Some incidents also require intelligence and investigation services, which is defined as either the information leading to detection and apprehension of those responsible, or information for determination of cause, evaluation spread or impact, or countermeasures for a given incident.

Yet other incidents require only the proper use and protection of classified intelligence, under appropriate supervision and accountability, for dealing with an incident. An example would be a response to a traffic accident involving transportation of military-grade HAZMAT or equipment in possession of private contractors.

NIMS 2008 Guidance