Incident management provides the operational governance framework required to coordinate multi-departmental corporate resources during an active crisis or operational disruption. Organizations structure crisis governance using the international Incident Command System (ICS) model to ensure clear communication and decision-making lines.
  ┌────────────────────────────────────────────────────────┐
  │                 INCIDENT COMMANDER                     │
  │   • Holds ultimate operational decision authority      │
  └───────────────────────────┬────────────────────────────┘
                              ▼
  ┌────────────────────────────────────────────────────────┐
  │                 FUNCTIONAL STEWARD LINES               │
  │   • Operations Section  ──► Manages hands-on recovery  │
  │   • Planning Section    ──► Logs logs & tracks assets   │
  │   • Logistics Section   ──► Provisions hardware gear   │
  │   • Finance Section     ──► Tracks operational spend   │
  └────────────────────────────────────────────────────────┘

The crisis infrastructure operates through four core functional areas:
  • Operations Section: Manages hands-on technical and operational recovery tasks, executing playbooks to isolate threats and restore critical systems.
  • Planning Section: Tracks the status of recovery efforts, logs incident data, tracks asset allocations, and documents the incident timeline.
  • Logistics Section: Provisions necessary hardware components, alternative workspaces, communication gear, and support services for recovery teams.
  • Finance Section: Tracks operational expenditure during the crisis, manages emergency vendor payments, and logs financial damage data for future insurance claims.
PreviousNext