ICS Forms in Action: From Declaration → Containment → Resolution

Use this interactive guide to see which ICS forms support each phase of a cyber/OT incident. Build a quick Incident Action Plan (IAP) as you go.

Scenario:
Declare/Assess Contain/Plan Recover/Operate Demobilize/Close