A system for a broker policy manager, BPM, comprising: a transceiver; and one or more processors coupled to the transceiver, configured to: determine that a first Internet of Things, IoT, client is a participant of an incident communications network corresponding to an incident; transmit first instructions to a certificate-based IoT broker to change a first IoT policy associated with a first certificate of the first IoT client, to enable the first IoT client to publish or subscribe to a first topic corresponding to the incident: receive a indication that a second IoT client accepts an invitation from the first IoT client to join the incident communications network; transmit second instructions to the certificate-based IoT broker to change a second IoT policy associated with a second certificate of the second IoT client that enables the second IoT client to publish or subscribe to the first topic corresponding to the incident; and determine that a third IoT client has a third certificate associated with the first certificate of the first IoT client based on a third indication received from the first IoT client, wherein the first instructions transmitted to the certificate-based IoT broker change a third IoT policy associated with the third certificate of the third IoT client to enable the third IoT client to publish or subscribe to the first topic. a transceiver; and one or more processors coupled to the transceiver, configured to: determine that a first Internet of Things, IoT, client is a participant of an incident communications network corresponding to an incident; transmit first instructions to a certificate-based IoT broker to change a first IoT policy associated with a first certificate of the first IoT client, to enable the first IoT client to publish or subscribe to a first topic corresponding to the incident: receive a indication that a second IoT client accepts an invitation from the first IoT client to join the incident communications network; transmit second instructions to the certificate-based IoT broker to change a second IoT policy associated with a second certificate of the second IoT client that enables the second IoT client to publish or subscribe to the first topic corresponding to the incident; and determine that a third IoT client has a third certificate associated with the first certificate of the first IoT client based on a third indication received from the first IoT client, wherein the first instructions transmitted to the certificate-based IoT broker change a third IoT policy associated with the third certificate of the third IoT client to enable the third IoT client to publish or subscribe to the first topic. determine that a first Internet of Things, IoT, client is a participant of an incident communications network corresponding to an incident; transmit first instructions to a certificate-based IoT broker to change a first IoT policy associated with a first certificate of the first IoT client, to enable the first IoT client to publish or subscribe to a first topic corresponding to the incident: receive a indication that a second IoT client accepts an invitation from the first IoT client to join the incident communications network; transmit second instructions to the certificate-based IoT broker to change a second IoT policy associated with a second certificate of the second IoT client that enables the second IoT client to publish or subscribe to the first topic corresponding to the incident; and determine that a third IoT client has a third certificate associated with the first certificate of the first IoT client based on a third indication received from the first IoT client, wherein the first instructions transmitted to the certificate-based IoT broker change a third IoT policy associated with the third certificate of the third IoT client to enable the third IoT client to publish or subscribe to the first topic.