Table 3: Summary of ICS Categories and Criteria

R1 - There are some self-policing procedures, some of which may be fail-safe

R2 - There some self-policing procedures, at least one of which is fail-safe.

S1 - There is a mixture of Class 2, 3 and even Class 4 detective controls. The Class 2 and 3 controls that are not protected by fail-safe self-policing procedures may degrade to Class 4.

S2 - There is a majority of Class 2 detective controls, with possibly some Class 3 or even Class 4. The Class 2 and 3 controls that are not protected by fail-safe self-policing procedures may degrade to Class 4.

A1 - There is at least one Class 6 BCP dealing with some catastrophe (e.g. fire).   Other unexpected events incidents are dealt with through an ad hoc procedure.

A2 - There are a variety of BCPs (some of which may be Class 5) dealing the failure of  catastrophe (e.g. fire). Other unexpected events incidents are dealt with through an ad hoc procedure.

Award 3 marks for each of R1, S1 and A1 and award 1 extra mark if it is exceeded.

The resulting ICS categorisation is:

bullet

Well above average (AAA rating) 11 or higher

bullet

Above average (A*) 10

bullet

Average (A) 9

bullet

Below average (B) 6 - 8

bullet Well below average (C) 4 or lower