2Respond and manage
Demobilization
Demobilization releases people and resources in order, with nothing left behind: no open access, no loose evidence, no unbilled hours. Planning writes the demobilization plan as soon as the end is in sight, and the IC approves it.
Release order
Release outside responders and borrowed staff as their objectives close. Keep core responders until eradication is verified. Keep monitoring capacity after that, at the level the recovery plan calls for.
Check-out, per person (after ICS 221)
| # | Item |
|---|---|
| 1 | Assignment handed to a named person, or closed |
| 2 | Activity log submitted to Documentation |
| 3 | Notes, evidence and media handed over, with custody recorded |
| 4 | Temporary accounts, access and tokens revoked |
| 5 | Loaner hardware and licences returned |
| 6 | Hours submitted to Finance/Admin |
| 7 | Rest before the next shift or return to normal duty |
Closing the incident organization
| # | Item |
|---|---|
| 1 | IC declares the end of the incident, with the time |
| 2 | Final status summary issued |
| 3 | Emergency changes reviewed and closed or made permanent |
| 4 | Outside engagements ended in writing and final invoices requested |
| 5 | Records consolidated by Documentation and indexed |
| 6 | Costs totalled by Finance/Admin, insurer's claim file updated |
| 7 | After-action review scheduled, run as the PIVTR-D debrief |