The CIMS Functions
Incident response involves a range of activities to be carried out. CIMS divides the responsibilities for these activities into CIMS functions, which are established as required, and then operate in a networked hierarchy.
Public reference