CROS3Consulting
Operations13 min read

What ICS Can Teach Every Business Leader

The Incident Command System solved coordination problems that most companies still have. Its solutions are public, free, and almost entirely unused outside emergency response.

Ryan Crose

The Incident Command System is the management structure used by essentially every emergency response organization in the United States. It coordinates responses ranging from a single-vehicle collision to a hurricane requiring thousands of personnel from dozens of agencies that have never worked together. It is documented in public, taught for free, and has been refined against real failures for decades.

It is also, in my experience, nearly unknown to business leaders, which is unfortunate, because ICS solved a specific set of coordination problems that most organizations still have. Its solutions are not proprietary and not complicated. They are simply unfamiliar outside the response community.

The origin matters for understanding why the doctrine is worth borrowing. ICS was not developed by studying successful operations and extracting best practices. It was developed by examining failures — coordination breakdowns with attributable consequences — and designing a structural control against each one. That is a considerably better evidence base than most management thinking rests on, because it tells you what to prevent rather than what the survivors happened to do.

NIMS identifies fourteen management characteristics. Five translate to business almost without modification, and I want to take each one seriously, because in most organizations all five are violated simultaneously and the resulting dysfunction gets attributed to culture.

1. Common terminology

ICS requires that everyone use the same words for the same things. This exists because agencies arriving at a joint incident with different vocabularies for identical resources have produced coordination failures with fatal outcomes. The remedy is mandatory standardized terminology, and it is not treated as a nicety.

The business analogue is everywhere and almost entirely unaddressed. Ask five people in a company to define a qualified lead, an active customer, a completed project, or a committed deadline, and you will typically get five definitions that overlap but do not match. Each person's definition is coherent. The aggregate is not, and every report built on the aggregate contains a silent error.

The consequences are less dramatic than in emergency response and more expensive over time, because they compound invisibly. A regional manufacturer I worked with reported on-time delivery at approximately 82 percent, a figure every executive could quote from memory. The metric was calculated against the most recently revised promise date rather than the original commitment made to the customer. Every schedule slip had been quietly absorbed by the definition. Measured against original commitments, on-time delivery was 61 percent.

Nobody had falsified anything. A reasonable definitional choice had been made years earlier, propagated into reporting, and never re-examined. Leadership had been managing a problem one third the size of the one they had. Any improvement plan built on that number would have been calibrated to the wrong gap and would have failed while appearing to be executed correctly — and the failure would have been blamed on execution discipline.

2. Management by objectives

ICS requires that objectives be established before tactics are developed, and that objectives be specific enough to determine whether they were achieved. The incident action planning process makes the sequence explicit: understand the situation, then establish objectives, then develop the plan. The order is not negotiable, because committing resources against an unclear objective wastes them in a way that is difficult to detect until the resources are gone.

Business planning inverts this constantly. Initiatives launch with directional intent — improve customer experience, strengthen the culture, become more data-driven — and tactics are generated underneath. Every tactic is defensible because the objective is compatible with almost any activity. Nothing can be evaluated, because there was never a standard to evaluate against.

The functional test for an objective is whether it can settle an argument. If two reasonable people advocate different courses of action, and consulting the stated objective leaves both equally defensible, the objective is doing no work. It is a category, not a direction.

There is a second requirement that business planning omits more often than the first: objectives must be reviewed and either validated or revised at defined intervals. In incident planning this happens every operational period. The Incident Commander explicitly re-examines the objectives and decides whether they still hold. Business objectives are typically set annually and then defended, which converts them from instruments into commitments to a past state of knowledge.

3. Manageable span of control

This is the ICS principle I find most immediately useful in business, and the one most often violated without anyone recognizing it as a violation.

Span of control refers to the number of individuals or resources that one supervisor can manage effectively during an incident. Experience has shown that an effective span of control for a supervisor in an incident is three to seven people. Fewer than three people generally leads to inefficient operations. Greater than seven is generally too many for one individual to manage.

FEMA Emergency Management Institute

Note that this is bounded on both ends, which is the part people miss. Too few is a problem, not just too many. A supervisor with one or two direct reports is generally an unnecessary layer, and the organization is paying for coordination it does not need.

The direct application to reporting structures is obvious enough. The more valuable application is to objectives, and it is not obvious at all: the same three-to-seven ceiling governs how many concurrent priorities a person or team can actually hold.

Consider what a supervisor does with a subordinate — maintains awareness of status, provides direction, notices when something is off, and intervenes. An objective requires exactly the same attention. If seven subordinates exceed one person's effective capacity, seven simultaneous objectives do as well, and for the same reason.

This has a specific consequence. A leadership team carrying fifteen strategic initiatives does not have fifteen priorities operating at reduced intensity. It has some unidentified subset of five or six receiving real attention, and nine or ten receiving none — with the allocation determined by whatever was most recently urgent rather than by a decision. The organization believes it is pursuing fifteen things. It is pursuing five, badly chosen, while carrying the coordination overhead of fifteen.

I worked with a Series B software company carrying fifteen strategic initiatives from the prior year, eleven of which showed no measurable progress. The intervention was to select four for the next six weeks and explicitly defer the remaining eleven, each with a named revisit date. All four were completed inside the period. Two of the deferred initiatives turned out to have no owner at all, which explained eighteen months of inactivity better than any capacity argument.

The unexpected benefit was psychological. Leadership had been carrying diffuse guilt about fifteen simultaneous half-commitments. The deferred list converted abandonment into scheduling, and the guilt largely dissolved — because deferral had become a decision rather than a failure.

4. Chain of command and unity of command

Unity of command holds that every individual reports to one supervisor and knows exactly who that is. It exists because personnel receiving direction from multiple supervisors execute neither set of instructions well, and because when something is missed, no one can determine who was responsible for ensuring it happened.

Matrix organizations violate this deliberately and accept the cost in exchange for flexibility, which can be a reasonable trade when made consciously. What is not reasonable, and what I see constantly, is violating it accidentally and then being puzzled by the results.

The accidental version usually looks like an objective assigned to someone who lacks the authority to deliver it. A director is made responsible for reducing cycle time in a process owned by another function. Nobody said the words dual reporting, but the director now needs cooperation from a peer whose supervisor has different priorities, and the outcome depends on whether that peer feels like helping this quarter. When the objective is missed, the director is accountable for something they never controlled.

The remedy is to map decision rights before assigning objectives. For each objective, name who can authorize the resources, who can change the process, and who can overrule the outcome. If the person assigned the objective is not the person holding those rights, the assignment is a documented future failure. Fix the authority or move the objective.

5. Accountability

In ICS, accountability is a named management characteristic supported by concrete mechanisms: personnel are checked in, assignments are documented in a written plan, and assignments are acknowledged at the operational period briefing. Accountability is not an attitude anyone is expected to have. It is a set of procedures that make it possible to know who is doing what.

This is nearly the opposite of how the word is used in business, where accountability functions as a character trait people are exhorted to display, and where a lack of it is diagnosed after the fact. That usage is close to useless. Nobody has ever become more accountable because a leader asked for more accountability in a meeting.

The procedural version is buildable. Every objective has one named owner rather than a responsible team. Assignments are written to a standard where a competent stranger could execute them without asking a question. Owners acknowledge their assignments explicitly, and the acknowledgment is recorded. Status is reported on a fixed cadence in a format short enough to complete during a bad week. And a missed commitment triggers a diagnostic conversation rather than a consequence, because the goal is information rather than compliance.

That last point is where most attempts at accountability structure fail. If reporting a missed commitment produces punishment, people report differently rather than perform differently, and the reporting system becomes a source of misinformation that is worse than having no system. The organization then has confident, documented, wrong beliefs about its own status.

The structural insight underneath all five

There is one more thing worth taking from ICS, and it is architectural rather than a specific practice.

Incident action planning is drawn as a letter P. The vertical leg holds the steps performed exactly once at the start: initial assessment, briefings, and the first set of objectives. Once those are complete, FEMA's doctrine states that incident management shifts into a cycle of planning and operations, informed by ongoing situational awareness and repeated each operational period. The loop at the top of the P is where the work actually lives.

Most business planning is drawn, implicitly, as a straight line: assess, plan, execute, complete. That shape encodes an assumption that the plan will be correct, since there is no structural provision for it being wrong. Adjustment becomes an exception, and exceptions are treated as failures of planning rather than as the normal operation of a system that is learning.

The loop encodes the opposite assumption. The plan is a hypothesis about the next operational period. It will be partially wrong, that will be discovered during execution, and the discovery feeds the next cycle. Nothing about revising a plan implies that the original was a failure — revision is what the structure is for.

Adopting the loop is the highest-leverage change available to most organizations, and it is nearly free. Set a bounded operational period of four to six weeks. Establish three to five objectives for that period, with named owners who hold real authority. Report weekly in a format that takes ten minutes. At the close, conduct a structured review comparing what was supposed to happen to what actually happened, evaluate the plan rather than the people, and then explicitly decide whether to conclude or continue.

That is the entire mechanism. It requires no software, no consultant, and no reorganization. It requires only the willingness to bound the period, cap the objectives, and hold an honest review — and the discipline to run it when the results are unflattering, which is the only time it matters.

Topics

  • ICS
  • NIMS
  • management
  • span of control
  • coordination

Next Step

If this described your situation

The consultation is thirty to forty-five minutes at no cost, and its only purpose is to establish whether a real trigger exists and whether this method fits.