Incident Response and Emergency Operations Flashcards
6 cards from real DRI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Incident Response and Emergency Operations flashcards as text
In incident response, what is 'triage' and why is it the first analytical step?
Answer: The initial assessment to determine incident severity, scope, and required response level, enabling appropriate resource allocation
Triage is the initial assessment of an incident's severity, scope, and impact to determine the appropriate response level and resource allocation—ensuring that limited response resources are deployed proportionately to the actual incident severity.
What is the significance of 'chain of custody' in incident response?
Answer: The documented record tracking who had access to evidence, when, and what was done with it, preserving evidentiary integrity for legal proceedings
Chain of custody is the documented record of who collected, handled, transferred, and analyzed evidence—maintaining evidentiary integrity ensures that evidence is admissible in legal proceedings and that its integrity has not been compromised.
What is meant by 'incident scope' in the context of emergency operations?
Answer: The geographic, functional, and temporal boundaries of the incident—what is affected, where, and for how long
Incident scope defines the boundaries of the incident—which locations, systems, business functions, and stakeholders are affected, and the expected or actual duration—essential for proportionate resource deployment and recovery planning.
What role does 'situational awareness' play in emergency operations center management?
Answer: It provides the current, accurate, and shared understanding of incident status needed for effective coordination and decision-making
Situational awareness—a current, accurate, shared understanding of the incident situation—is the foundation of effective EOC operations, enabling all decision-makers to base their actions on the same reality rather than fragmented, potentially contradictory information.
Which document is used to formally declare the end of an incident response and transition to normal operations?
Answer: A formal incident demobilization plan or stand-down order
A formal incident demobilization plan or stand-down order formally closes the incident response, transitions activities back to normal operations, releases response resources, and establishes accountability for remaining actions.
What is the importance of pre-establishing 'mutual aid agreements' for emergency operations?
Answer: They establish in advance the terms under which organizations will share resources, personnel, and capabilities during incidents exceeding a single organization's capacity
Mutual aid agreements pre-establish the terms, conditions, and processes for organizations to share resources, personnel, facilities, and capabilities during major incidents—ensuring that aid is available when needed without requiring negotiation during the crisis itself.