incident command technology risk assessment