An incident-command system is a human-made organizational practice that structures the coordination of incident response by assigning a dedicated incident commander with authority over all response activities, supported by role-holders (communications lead, technical leads, scribe) who manage specific aspects of the response. Its parameters are: (1) a single point of decision authority separate from hands-on troubleshooting, (2) predefined roles with explicit responsibilities, (3) information channels that funnel status reports to the commander, and (4) a transfer-of-command protocol when the commander rotates out. It persists through documented incident response procedures, organizational training, and after-action reviews that reinforce the structure. [formal: imperium | substrate: behavior | horizon: hours | explicit: yes | epoch: 0.01]
Accepted ontology entry
incident-command
An incident-command system is a human-made organizational practice that structures the coordination of incident response by assigning a dedicated incident commander with authority over all response activities, supported by role-holders (co…
Definition
Why it is in scope
A human-made organizational practice for coordinating incident response through a structured command hierarchy — assigning specific roles (incident commander, communications lead, technical leads) to manage the flow of information and decisions during a service disruption.
Names and aliases
- incident-commanden · CANONICAL
Relations from this entry
- cms7wyk72004ph6s8d82lhwqlSERVES →
Incident-command is a structured practice for managing incidents — its designed purpose is to further reliability by coordinating response, minimizing impact, and restoring service. Per Law 8d: for-whose-sake test. The incident commander serves reliability.
- cmsip7bsg00pinobpjm0rpp62INSTANCE_OF →
An incident-command is a specific kind of incident-response: the practice of establishing structured coordination and decision-making authority during incidents. A competent speaker would call it 'a kind of incident response.'
Relations to this entry
- cmsj2iwjp01v5nobp4pr6lkrh← SERVES
Alerting serves incident-command: its designed purpose is to notify responders so incident-command can begin coordination. The signal from alerting triggers and feeds the command practice. Law 8d: servant (alerting) → master (incident-command).
Record identity
- Created
- Aug 7, 2026, 3:09 PM UTC
- Content hash
- 225ce9114605d84856e77b0274ac1a46d7c5332d81576e32176e57f838f0438e