Respond with certainty
when it matters most.
At the centre of every incident is a people problem. Who's affected, where are they, and how do you reach them — fast.
Today, that answer often lives in a spreadsheet, in someone's head, or it simply doesn't exist at all. ICM closes that gap with crisis management software and incident management software — a single place to manage the incident, with the operational context your team needs around them.
Built by people who've run incidents. Proven in the field.
ICM replaced the whiteboards, binder-bound SOPs, and disconnected tools that response teams had lived with for years. It was designed by people who had run incidents themselves, built on lessons from real events with global organisations, and validated through both live incidents and exercises. That's why it became the crisis management software capability teams trust when the pressure is highest.
Now ICM sits inside resilienceOS — not as a standalone module, but as the orchestration layer where response actually happens. The relevant context from across the incident management software — people, sites, assets, risk, travel, communications — is visible around the response, so teams spend less time orienting and more time deciding.
ICM reduces the effort needed by your team to get into the right response position.
The first five minutes stop being the hardest.
ICM reshapes the moments that decide how a response goes — orientation, shared truth, and the discipline to capture what happened.
You see the incident in its operational context.
Live context from across resilienceOS — people, sites, risk, travel — is available around the response, so no one is starting from yesterday's spreadsheet.
Response teams move less between systems to orient themselves.
When an event is being assessed, the information to judge it is already at hand. Teams focus on the decision, not on assembling the picture.
Everyone in the room is looking at the same picture.
A shared operational view — map, timeline, people, tasks — removes the most common failure mode in a crisis: two teams making decisions from two different versions of the truth.
Decisions are defensible, weeks and months later.
An audit isn't a task someone reconstructs afterwards — it's the natural by-product of running a response well. In offshore and regulated environments, ICM meets the bar and exceeds it.
Your response is consistent, whoever's on shift.
Standardised across sites, repeatable across teams, reliable across the complexity of your operation.
Your response improves every time you use it.
Training mode lets teams exercise in the live system without touching real incidents — so when something real happens, the tool isn't the unfamiliar part.
Designed to be used under pressure.
Simplicity is a deliberate design principle. Every capability of the incident management software is built to be used by real teams, without needing to manage the tool itself.
Case management
Run anything from a site-level issue to a full multi-team crisis through a single case model. Clear structure, without locking teams into rigidity.
Playbooks
Assign multiple playbooks per role. Teams choose which apply as the situation evolves — so no one is locked into a checklist that stopped matching reality ten minutes ago.
Teams, roles & permissions
Granular, case-level access control. The right people see exactly what they need — and nothing they shouldn't.
Full audit trail
Every action captured automatically. Exportable for review, compliance, and judicial proceedings — a by-product of running the response, not a task afterwards.
Mass communications
Send multi-channel messages — App, SMS, Email, Voice — directly from the case. Safety poll responses feed into the operational picture, so teams aren't chasing confirmations manually.
People in context
When an event affects a location, relevant people information is available to inform response — who may be impacted, their roles, and the organisational context around them.
Integrated mapping
People, assets, incident radius, risk, weather, and traffic layered onto the same map. Environmental and situational factors visible where teams need them.
Briefings & tasks
Schedule, draft, and share structured briefings. Tasks are tracked, assigned, and captured in the audit log — nothing falls between shifts.
Training mode
Run exercises in the live system, safely separated from real incidents. Teams build confidence with the actual tool — not a simulation.
Logistics & movement
Track people and asset movements across land, sea, and air. Capture passenger numbers, ETDs, ETAs, and plot routes on the integrated map.
One case. The full picture.
From the first signal to the post-incident review — see what your team would see when it matters.
Structured response, set up in seconds.
Spin up Incident Management and Crisis Management teams with the right roles assigned. Internal stakeholders, external responders, log keepers — everyone slotted in, with permissions that match.
No reorganising under pressure. The structure is already there.
Nothing falls between shifts.
Every task assigned, tracked, and accounted for — across teams, across handovers. Filterable by status, priority, role, or team. Comments and updates captured in the audit log automatically.
When the next shift takes over, they pick up exactly where the last one left off.
The audit trail writes itself.
Every action — every overview edit, every role assignment, every task update — captured automatically with timestamp, author, and team. Exportable for compliance, regulatory review, or judicial proceedings.
No one has to reconstruct what happened. It's already there.
Accountability, at scale.
137 people, 135 accounted for, 1 injured, 1 casualty — in one view. Filterable by location, status, type. Mass communications and safety polls feed directly into the picture, so the count is always current.
The people problem at the centre of every incident — answered.
Movement tracked across land, sea, and air.
Plot every flight, vessel, and convoy on the integrated map. Capture passenger manifests, ETDs, ETAs, and route data. Status updates as movements complete — Pending, In Progress, Completed.
Teams know where everyone is, and where everyone is going.
Run it yourself, or run it with us.
ICM is available as self-managed SaaS or as a managed service — with Restrata's experienced response team working alongside yours when it counts.
Your teams run response independently.
Full configuration control, training mode for exercises, and every resilienceOS capability available to you. The platform is yours to operate, on your terms.
Expert hands on deck the moment something breaks.
Restrata's response team supports your organisation directly during incidents — on the same platform, the same case model. For teams who want experienced operators alongside them when the pressure is highest.
ICM coordinates. resilienceOS provides the context.
The rest of the platform makes response decisions better — by feeding the right information into the case, automatically.
People
Structured visibility of employees, contractors, and other relevant individuals — with role and organisational context to inform assessment and coordination.
Sites
Locations and their operational importance, so incidents are understood in relation to place — not just as abstract events.
Assets
Key operational, mobile, and critical resources — so response decisions reflect what's at stake.
Fused risk
Internal and external risk information brought together — to inform severity judgements and downstream impact.
Travel
Awareness of people operating away from primary sites — extending duty of care beyond fixed locations.
Mass communications
Timely, reliable delivery aligned with the evolving response — with delivery and response data feeding back into the operational picture.
See exactly what your team would see when it matters.
Book a demo and we'll walk you through a real-world case — from the moment a signal is flagged, through assessment, active response, and post-incident review.