Intelligence/Investigations (I/I) is an ICS function identified in NIMS.
When I/I is required, the Incident Commander/Unified Command can place the I/I function in multiple locations within the incident command structure based on factors such as the nature of the incident, the level of I/I activity, and the relationship of I/I to other incident activities.
The I/I can be placed in the Planning Section, in the Operations Section, within the Command Staff, as a separate General Staff section, or in some combination of these locations.
You can learn more about the I/I function by reading NIMS and the I/I Function Guidance and Field Operations Guide available on the FEMA NIMS website.