Incident Management Training for IT Operations

Incident Commander, Command Staff and Key Responder Training, Level 1 Certification (Session #5: September 2021)

Open Enrollment session #5: classes held September 20, 22, 23, 27 & 29.

Time: 0900-1100 PDT (subject to change)

  • Enrollment in this course closed on 09/15/2021.

Course Information


Course Overview, Content, and Objectives

OVERVIEW: Provide the foundational level of skills, knowledge and abilities for individuals who will work in the critical leadership functions of incident command, incident communications and technology problem-solving during Information Technology (IT) incidents.

CONTENT: history of the Incident Management System (IMS); adaptation of IMS best practices from public safety into IT; roles and responsibilities of the Incident Commander, Liaison Officer and Scribe (the Command Staff); communications briefings using the Conditions, Actions and Needs (CAN) report; human behaviors and situations commonly encountered during incidents; the Incident Lifecycle template and After-Action Reviews (AARs).

OBJECTIVE: To prepare individuals to successfully lead critical functions during incidents in the roles of Incident Commanders, Liaison Officer (LNO), Scribe and Subject Matter Expert (SME).

Course Format: The Level 1 training course is organized into five blocks of two hours each conducted on the Zoom videoconferencing platform. All blocks are led by Blackrock 3 Partners personnel, with a lead instructor providing instructional content and preceptors observing participant engagement and documenting the results. Instructor and preceptors will utilize the Incident Commander, Liaison Officer and Scribe (Command Staff) roles from IMS during each block. Each block will combine lecture and small-group exercises using the Zoom Breakout Room feature, so that participants can practice the roles, skills and tactics discussed during the lecture. Participants will receive an invitation called a “Dispatch Notice”, which will include the date, time and Zoom invite link for each block of the five block Level 1 training course.

Evaluation Criteria and Grading: In each of the five blocks, participant will take the leadership roles of Incident Commander and Command Staff during small-group exercises conducted in Zoom’s Breakout Rooms. Participants will be observed and evaluated by the preceptor in the Breakout Rooms. Upon completion of block five, participants will take a written quiz and pass with a score of 80% or greater to receive the BRP Level 1 certification. Participants have an opportunity to complete a course evaluation survey.

Requirements: a) Students in this course will be required to sign and submit a Non-Disclosure Agreement as a condition of participation in OnLINE Academy training. b) Students will need a webcam with microphone, and be able to use the Zoom platform for interactive exercises. Headset/headphones are optional. Out of respect for all participants, we request that students make every effort to ensure their workspace is free of background noise and visual distractions during training sessions.

Prerequisites: There are no prerequisites, but optional readings can be found on BRP’s website ( and in the textbook Incident Management for Operations (ISBN-13: 978-1491917626) by Rob Schnepp, Ron Vidal and Chris Hawley.

This course fulfills prerequisite requirement for enrollment in Incident Commander Level 2.


Blackrock 3 Partners has over 100 years of collective incident management experience leading Special Operations teams in busy urban Fire Departments on the east and west coast, and managing critical technology infrastructure across the United States. We also have incident management experience in 40+ countries at the highest levels of government and industry. We take best practices, literally tested by fire, and translate them into the world of IT Operations.