At a glance
An ICP (Incident Command Post) is the field location from which the Incident Commander directs response operations during an incident or event under the Incident Command System (ICS). The ICP is established close enough to the incident to maintain situational awareness but far enough to remain safe and functional, and is the operational nerve center for tactical decisions.
Why it matters for event security
Whether or not an incident occurs, every major planned event runs under some form of ICS, and the ICP is where event-day tactical decisions are made. Knowing where the ICP is, who staffs it, and what information flows through it is foundational to event-security coordination. When an incident does occur, the ICP becomes the single authoritative source for command decisions; private-sector security teams must integrate with rather than parallel that structure.
How an ICP is used in practice
Under ICS, the ICP is typically located near but not inside the incident scene. It is signed, secured, and equipped with communications, situation displays, and adequate workspace for the command and general staff. Larger or more complex events use a Unified Command structure inside the ICP, with representatives from law enforcement, fire, EMS, public health, and event-management organizations co-located.
Operationally, the ICP is distinct from the Emergency Operations Center (EOC). The ICP is field-based and tactical; the EOC is typically located at a fixed government facility and is strategic and coordinative. A multi-agency event may run both: an ICP at the venue and an EOC at city or county emergency-management offices, linked by ICS communications.
For event-security planning, the venue's command post is often a private-sector ICP or operates as an ICS Section within a Unified Command. Common pitfalls include parallel command structures (private security running its own ICP separate from public-safety command), inadequate communications interoperability, and unclear authority transitions when an incident moves from "event operations" to "incident response."
Related signals & tools
SignalGuard is designed to be displayed inside an ICP or SOC, with map overlays and live feeds from all 50+ signals surfacing on the situational-awareness display. Real-time inputs from signals such as the Scanner Feeds signal, the Traffic signal, and the Weather signal feed directly into ICP decision-making during an active event.
FAQ
What's the difference between an ICP and an EOC? The ICP is field-based and tactical; the EOC is fixed-location and strategic-coordinative.
Who runs the ICP? The Incident Commander, or a Unified Command in multi-agency events.
Is a venue security command post an ICP? It can be, when it operates under ICS doctrine and integrates with public-safety command.
Further reading
- FEMA ICS Resource Center: https://training.fema.gov/emiweb/is/icsresource/
- NIMS Overview: https://www.fema.gov/emergency-managers/nims
- FEMA IS-100 Course: https://training.fema.gov/is/courseoverview.aspx?code=IS-100.c
Explore all 50+ signals at https://signalguard.live/docs/signals/.