
The following should be considered for inclusion in an IAP:
- Incident goals (where the response system wants to be at the end of response)
- Operational period objectives (major areas that must be addressed in the specified operational period to achieve the goals or control objectives)
- Response strategies (priorities and the general approach to accomplish the objectives)
- Response tactics (methods developed by Operations to achieve the objectives)
What is an incident Action Plan (IAP)?
An incident action plan (IAP) formally documents incident goals (known as control objectives in NIMS), operational period objectives, and the response strategy defined by incident command during response planning.
How do you conduct an incident action plan?
Conducting Incident Action Planning Meetings and Briefings Collaboration and coordination are the keys to incident action planning, and it is important that the meetings and briefings are conducted effectively and efficiently. Guidance for conducting these meetings and briefings is provided in the FEMA IMH.
What is the purpose of the incident command system action planning guide?
Purpose This guide is intended to promote the effectiveness of incident operations by standardizing the incident action planning process. The guide describes how the Federal Emergency Management Agency (FEMA) applies the Incident Command System (ICS) incident action planning process.
What is a FEMA Incident Action Plan?
Agency (FEMA) applies the Incident Command System (ICS) incident action planning process. It also defines the specific roles and responsibilities of the various organizations, and establishes standards for incident action planning on FEMA incidents.
What is an incident action plan?
What is the goal of HCO?
What is operational period objective?
What is a communications plan?
See 1 more
About this website

What are the five major components of the incident command system?
ICS establishes five functional areas for management of major incidents: command, operations, planning, logistics, and finance/administration.
What is an incident action plan FEMA?
The incident action planning process helps synchronize operations and ensure that they support incident objectives. Incident action planning is more than producing an IAP and completing forms—it provides a consistent rhythm and structure to incident management.
What are characteristics of an IAP?
An Incident Action Plan (IAP) is an oral or written plan containing general objectives reflecting the overall strategy for managing an incident. An IAP includes the identification of operational resources and assignments and may include attachments that provide additional direction.
What are the 7 principles of the Incident Command System?
Incident personnel should adhere to principles of accountability, including check-in/check-out, incident action planning, unity of command, personal responsibility, span of control, and resource tracking.
What are 3 basic elements in an incident?
The Three Elements of Incident Response: Plan, Team, and Tools.
What are the 4 components of an emergency action plan?
Four Core Elements to Incorporate into an Emergency Preparedness PlanRisk Assessment and Planning. When developing an emergency plan, organizations must complete an evaluation of the potential risks they could face and create plans to address them. ... Policies and Procedures. ... Communication Plan. ... Training and Testing.
What is included in an IAP?
An incident action plan (IAP) formally documents incident goals (known as control objectives in NIMS), operational period objectives, and the response strategy defined by incident command during response planning.
What forms are in an IAP?
A completed IAP must have an ICS-202, ICS-203, and ICS-204 for each division and group. The ICS-205 (Communications Plan) and ICS-206 (Medical Plan) may not be required in all cases.
What is the primary purpose of an action plan?
An action plan is a definitive checklist of key steps and resources required to achieve a goal. Action plans specify the key over-arching objective you want to accomplish than “chunk down” that key goal into all the specific tasks and resources needed to achieve it.
What are the 4 C's of Incident Command System?
These are command, control, communications and coordination. They are four simple words, but they can have far-reaching implications.
What are the 8 basic elements of an incident response plan?
8 Essential Elements for an Incident Response PlanA Mission Statement.Formal Documentation of Roles and Responsibilities.Cyberthreat Preparation Documentation.An Incident Response Threshold Determination.Management and Containment Processes.Fast, Effective Recovery Plans.Post-Incident Review.
What are the 4 types of major incidents?
A major incident can take many different forms, such as natural disasters, transport incidents, industrial and terrorism.
What are the 3 parts of an emergency action plan?
Evacuation Procedures, Escape Routes, and Floor Plans.
What are the 8 basic elements of an incident response plan?
8 Essential Elements for an Incident Response PlanA Mission Statement.Formal Documentation of Roles and Responsibilities.Cyberthreat Preparation Documentation.An Incident Response Threshold Determination.Management and Containment Processes.Fast, Effective Recovery Plans.Post-Incident Review.
What is the purpose of an incident response plan?
Definition(s): The documentation of a predetermined set of instructions or procedures to detect, respond to, and limit consequences of a malicious cyber attacks against an organization's information systems(s).
What are the 7 steps in the emergency action plan?
The Seven Elements of Successful Emergency Action PlanningConsider the situations. ... Determine the correct actions. ... Create rally points. ... Verify safe routes. ... Account for everyone. ... Drill (or not). ... Keep reviewing.
Incident Action Planning Guide - FEMA
Incident Action Planning Guide - FEMA
INCIDENT ACTION PLAN (IAP) WORKSHEET IC-1
Galena Fire Department INCIDENT ACTION PLAN (IAP) WORKSHEET IC-1 Incident Name: Date: Time: Address: MABAS Card #: Level: Weather Conditions: Command Frequency: Tactical Frequency 1: Tactical Frequency 2:
Incident Action Plans: ICS IAP Forms and Documents
The incident action planning process should synchronize site-specific incident response operations and objectives based on the Incident Command System (ICS).The Incident Action Plan (IAP) should include predetermined activities or processes, repeated in each operational period, that provide a consistent rhythm and structure to the required incident management at the scene.
What is an incident management team?
The Incident Management Team must ensure that the IAP being developed meets the needs of the incident and the response objectives. Included in the IAP are ICS forms, a valuable resource for advancing a response to controlled conditions. However, leaders must be vigilant that these forms do not become the primary focus of the planning process, but rather a support tool that furthers the integration of a rational and effective planning process.
What is an ICS form?
ICS forms are intended for developing IAPs, incident management activities, and for support and documentation of ICS activities. ICS forms are utilized to document many primary response components and provide the site-specific information utilized during a response.
What is incident action planning?
The incident action planning process should synchronize site-specific incident response operations and objectives based on the Incident Command System (ICS). The Incident Action Plan (IAP) should include predetermined activities or processes, repeated in each operational period, that provide a consistent rhythm and structure to the required incident management at the scene. With a detailed plan in place, response objectives can be met with the appropriate integrated incident response and coordinated operational support.
What is incident response?
An incident is “an occurrence, natural or manmade, that requires a response to protect life or property.”.
How to minimize damage and effectively respond?
To minimize damage and effectively respond, your organization needs to verify that a cyber incident has actually occurred and appraise its impact. Just like an attack can come through any number of vectors, your team may be alerted to a potential incident from various warning systems.
What is the first step in cyber security?
1. Preparation. The first step to incident response is preparing in advance. This should include using risk assessments to bolster the cyber resiliency of your networks, systems, applications, and devices. To avoid chaos and confusion at the onset of an attack, you must define the roles and responsibilities of the individuals ...
What should post incident analysis be used for?
Post-incident analysis should also appraise the monetary and non-monetary impact of the cyber attack. Hopefully, data insights can be used to justify increased funding for cyber readiness to avoid future attacks.
How long does it take for a cyber incident to go undetected?
Cyber events often go weeks or months undetected. To minimize damage and effectively respond, your organization needs to verify that a cyber incident has actually occurred and appraise its impact.
What is the first step in incident response?
The first step to incident response is preparing in advance. This should include using risk assessments to bolster the cyber resiliency of your networks, systems, applications, and devices.
What is an IRP?
To avoid the worst fallout of a cyber incident, it’s vital that the components of your incident response plan (IRP) are built with consideration of industry guidelines, cyber legislation, and your company’s unique risk profile.
How to avoid chaos and confusion at the onset of an attack?
To avoid chaos and confusion at the onset of an attack, you must define the roles and responsibilities of the individuals that compose your incident response team. Even if you hire an external incident response service, your team will necessarily be part of the communication process needed to deal with a crisis.
Why is an IAP not needed?
Because the IAP and the incident action planning process are inherently operational, the UCG may determine that an IAP is not needed for certain incidents (i.e., Level III). This is most likely to occur on incidents where no Federal response operations are required or anticipated and where FEMA activities are focusing exclusively on delivery of Public Assistance (PA) and Hazard Mitigation (HM) programs. Typically, such incidents are the result of Stafford Act declarations that are made days or even weeks after the actual disaster or emergency and after State, Local, Tribal, and Territorial (SLTT) officials have completed response operations. In non-Stafford Act incidents, incidents that involve a multi-agency response the IAP process and forms may be used in order to ensure an organized effort.
What is an ICS form?
ICS practitioners have developed and refined a set of forms that assist incident personnel in completing the incident action planning process. Incident leaders must ensure that the plan meets the needs of the incident and that form completion does not become the primary focus of the planning process. FEMA has modified some standard ICS forms to address the implementation of assistance programs and the requirements for assigning Federal resources.
How to implement an IAP?
1. Understand the situation 2. Establish incident objectives 3. Develop the plan 4. Prepare and disseminate the plan 5. Execute, evaluate, and revise the plan The IAP identifies incident objectives and provides essential information regarding incident organization, resource allocation, work assignments, safety, and weather. A well-conceived, complete IAP facilitates successful incident operations and provides a basis for evaluating performance in achieving incident objectives.
How does FEMA use the Incident Command System?
It also defines the specific roles and responsibilities of the various organizations, and establishes standards for incident action planning on FEMA incidents. This guide also communicates to partners the details of how the Agency conducts the incident action planning process. In addition, it serves as a reference for incident management personnel and provides the basis for incident action planning staffing and exercising. Finally, this guide informs required training, position task books, and development of courses in alignment with the FEMA Qualification System.
How many forms are needed for IAP?
The IAP process requires the completion of nine primary forms with the option of additional forms to be utilized as needed. These forms are tools used to document final decisions and provide an organized means of documenting and conveying tasks and resource needs for meetings. Form input and completion of the forms is a joint UCS responsibility. However, the Planning Section is responsible for the final product and publication of the IAP. A complete IAP always includes at least the seven forms highlighted in table 1; additional forms may be used dependent on the incident. (See appendix C for more information on additional forms.)
What is an IAP?
The IAP is the vehicle by which the senior leaders of an incident— the Governor of an affected State, through the State Coordinating Officer (SCO); the Tribal/Territorial Chair/Council through the Tribal Coordinating Officer (TCO); and the President, through the Federal Coordinating Officer (FCO)—communicate their expectations and provide clear guidance to those managing an incident. The incident action planning process requires collaboration and participation among all incident partners involved in the incident (Emergency Support Functions [ESFs], NGOs/private sector, STT, etc.) to achieve unity of effort through the disciplined incident action planning process.
Why are deliberate plans important?
Deliberate plans can provide a common starting point for the incident, regional, and national levels. This ensures that there is a common understanding of the actions that need to occur and what resources are necessary to ensure an efficient stand up of operations in the initial operational period of an incident. Deliberate plans are an important starting point in the absence of information. Planners and operators must determine the most current situational awareness to understand the points of departure from the plan.
How long was Robert Avsec in the army?
About the author. Battalion Chief Robert Avsec (ret.) served with the Chesterfield (Virginia) Fire & EMS Department for 26 years. He was an instructor for fire, EMS and hazardous materials courses at the local, state and federal levels, which included more than 10 years with the National Fire Academy.
What is the NIOSH investigation of firefighter fatalities?
NIOSH investigation of firefighter fatalities has regularly identified lack of a complete 360-degree fireground assessment by the incident commander as a contributing factor in firefighter deaths. The key questions that the incident commander must answer when they arrive on the scene are:
Why are the IAFC rules of engagement important?
The IAFC’s rules of engagement are designed to help mold the way an incident commander acts.
What is incident action plan?
Developing an incident action plan is a critical incident command skill and, as with any skill, it must be practiced to develop proficiency. And it requires continued practice, using a variety of emergency scenarios, to maintain that proficiency.
Why is incident commander important?
First, they must get the incident management system started, have a plan and get fire companies committed to actions that support their plan.
Why is feedback important for fire officers?
Feedback from fire officers assigned to complete tactical objectives is critical, especially if they are not able to complete their objective or if they encounter another problem.
Why is it important to have an IAP?
The components of an IAP. It’s important that all fire officers know how to use the standard process for developing an incident action plan. By using this standard process for both training activities and actual emergency management, officers will have a common expectation for how things will run. This makes for much better communication ...
What is an incident action plan?
An incident action plan (IAP) formally documents incident goals (known as control objectives in NIMS), operational period objectives, and the response strategy defined by incident command during response planning. It contains general tactics to achieve goals and objectives within the overall strategy, while providing important information on event and response parameters. Equally important, the IAP facilitates dissemination of critical information about the status of response assets themselves. Because incident parameters evolve, action plans must be revised on a regular basis (at least once per operational period) to maintain consistent, up-to-date guidance across the system.
What is the goal of HCO?
HCO objectives: Maintain safety of HCO personnel. Maintain safety of non-incident patients.
What is operational period objective?
Operational period objectives (major areas that must be addressed in the specified operational period to achieve the goals or control objectives) Logistics plan (e.g., procedures to support Operations with equipment, supplies, etc.) Additional component plans, as indicated by the incident.
What is a communications plan?
Communications plan (how functional areas can exchange information) Logistics plan (e.g., procedures to support Operations with equipment, supplies, etc.) Responder medical plan (providing direction for care to responders) Incident map (i.e., map of incident scene) Additional component plans, as indicated by the incident.

Preparation
- The first step to incident response is preparing in advance. This should include using risk assessments to bolster the cyber resiliencyof your networks, systems, applications, and devices. To avoid chaos and confusion at the onset of an attack, you must define the roles and responsibilitiesof the individuals that compose your incident response team...
Detection and Analysis
- Cyber events often go weeks or months undetected. To minimize damage and effectively respond, your organization needs to verify that a cyber incident has actuallyoccurred and appraise its impact. Just like an attack can come through any number of vectors, your team may be alerted to a potential incident from various warning systems. Indicators that a cyber incident has occurr…
Containment, Eradication, and Recovery
- This part of incident response typically involves a mitigation decision to stop the bleeding. This may be to shut down a system, disconnect it from a network, or disable certain functions. Your IRP should guide you in making the right decision relevant to the type of attack you are experiencing. Factors that could influence this decision include: 1. The potential damage or thef…
Post-Incident Improvement
- The final step of incident response is taking stock of lessons learned and putting that knowledge to practice to prevent a similar event in the future. This should include a lessons-learned meetingto explore what happened, how it happened, and what corrective actions, tools, or resources are needed to make sure it doesn’t happen again. Post-incident analysis should also a…