NIMS ICS
Intelligence and Information

Chapter II
NIMS - Command and Management
(5) Information and Intelligence Function.
The analysis and sharing of information and intelligence are important elements of ICS. In this context, intelligence includes not only national security or other types of classified information but also other operational information, such as risk assessments, medical intelligence (i.e., surveillance), weather information, geospatial data, structural designs, toxic contaminant levels, and utilities and public works data, that may come from a variety of different sources. Traditionally, information and intelligence functions are located in the Planning Section. However, in exceptional situations, the IC may need to assign the information and intelligence functions to other parts of the ICS organization. In any case, information and intelligence must be appropriately analyzed and shared with personnel, designated by the IC, who have proper clearance and a “ need-to-know” to ensure that they support decision-making.

The intelligence and information function may be organized in one of the following ways:

(a) Within the Command Staff.
This option may be most appropriate in incidents with little need for tactical or classified intelligence and in which incident-related intelligence is provided by supporting Agency Representatives, through real-time reach-back capabilities.

(b) As a Unit Within the Planning Section.
This option may be most appropriate in an incident with some need for tactical intelligence and when no law enforcement entity is a member of the UC.

(c) As a Branch Within the Operations Section.
This option may be most appropriate in incidents with a high need for tactical intelligence (particularly classified intelligence) and when law enforcement is a member of the UC.

(d) As a Separate General Staff Section.
This option may be most appropriate when an incident is heavily influenced by intelligence factors or when there is a need to manage and/or analyze a large volume of classified or highly sensitive intelligence or information. This option is particularly relevant to a terrorism incident, for which intelligence plays a crucial role throughout the incident life cycle.

Regardless of how it is organized, the information and intelligence function is also responsible for developing, conducting, and managing information- related security plans and operations as directed by the IC. These can include information security and operational security activities, as well as the complex task of ensuring that sensitive information of all types (e.g., classified information, sensitive law enforcement information, proprietary and personal information, or export-controlled information) is handled in a way that not only safeguards the information but also ensures that it gets to those who need access to it so that they can effectively and safely conduct their missions. The information and intelligence function also has the responsibility for coordinating information- and operational-security matters with public awareness activities that fall under the responsibility of the PIO, particularly where such public awareness activities may affect information or operations security.

(white background)

(transparent background)

(white background)

(transparent background)