Incident Management Review (IMR) Training

Assessment

Incident Management Review (IMR)

Purpose

Evaluate the processes used to identify and analyze events, declare incidents, determine a response, and improve an organization’s incident management capability

Objectives

• Part of a U.S. Department of Homeland Security (DHS) initiative intended to help the nation’s critical infrastructure providers assess and provide a measure of an organization’s event and incident handling capabilities
• Assesses enterprise programs and practices across a range of six domains including event detection and handling, incident declaration, handling and response, post-incident analysis and testing, integration of organization capabilities, protection and sustainment of the incident management function, and preparation of incident response
• Consists of 88 questions in a facilitated interview-based review typically delivered in a three-to-four-hour workshop
• All IMR questions have three possible responses: “Yes,” “No,” and “Incomplete”

Role

Assessment Lead

Course Mode

OnDemand

Course Agenda

• Part 1: Introduction, critical services, background, pre-assessment, facilitation
• Part 2: Event handling, incident response, post-incident, organizational capabilities, protection and sustainment, preparation for incident response
• Part 3: Reporting, IMR vignettes, capstone