Figure 4: Incident Escalation Flow

Bottom up, Public Safety, Partners and affected departments report incident information to the GC CIRT. At this level, referred to as level 1 (Standard protective measures, monitoring are generally adequate however enhanced security may be required

• Incident Categorization: Low injury / Low impact), and Event (On-going routine coordination of activities. Event is under control at the affected department And no further help required.) From the GC CIRT the information may go to GC CTEC and the CRU. This level is refereed to as level 2 (Mitigation needs to be coordinated in a timely fashion as part of normal operations.
• Incident Categorization: Medium injury / Medium impact) and Initial triage, incident coordination (CRU may be called upon and start planning in preparation for an escalation. CRU to draft / implement an incident action plan and brief the Management Team on situation). From this level the information may flow up to the Management team and the DG Comms WG, referred to as Level 3 (Mitigation is possible with significant resource allocation.
• Incident Categorization: High injury / Medium impact, Medium injury / High impact) and Authorities to allocate resources, Take action (Management Team to provide guidance and approve incident action plan). If further guidance is needed the information then goes up to the ADM level comities (ADM EMC +GC CIO, CIOC, ADM NS Ops + GC CIO, then DM Committee and finally the Cabinet Committee, also referred to as level 4 (No known  mitigation available or overwhelming response action needed.
• Incident Categorization: High injury / High impact) and National response (Leadership from Cabinet Operations Committee, DM National Security Committee or ADM EMC / ADM NS Ops and the GC CIO).

Return to Figure 4: Incident Escalation Flow