Patent ID: 8874159

Claim:
A method for handling dynamic incidents, comprising: initiating, at a first time, a first policy in response to a first incident, the first policy comprising a first plurality of actions to be performed in response to the first incident; creating, by a first processor, at least a first virtual talk group comprising a first plurality of endpoints of different communication networks communicating using a first respective communication protocol; monitoring a first plurality of events via a first plurality of sources, the first plurality of events including at least one of the first plurality of actions of the first policy, the first plurality of sources comprising an endpoint from the first plurality of endpoints of the first virtual talk group; detecting a first deviation event in the monitored first plurality of events, the first deviation event comprising a first action not included in the first plurality of actions of the first policy; storing information indicative of the first deviation event; initiating, at a second time, a second policy in response to a second incident, the second policy comprising a second plurality of actions to be performed in response to the second incident; creating, by a second processor, at least a second virtual talk group comprising a second plurality of endpoints of different communication networks communicating using a second respective communication protocol; monitoring a second plurality of events via a second plurality of sources, the second plurality of events including at least one of the second plurality of actions of the second policy, the second plurality of sources comprising an endpoint from the second plurality of endpoints of the second virtual talk group; detecting a second deviation event in the monitored second plurality of events, the second deviation event comprising a second action not included in the second plurality of actions of the second policy; comparing the second deviation event to the first deviation event; generating, based on the comparison, a suggestion comprising at least one modification to the second policy; receiving an indication in response to the suggestion, the indication indicating whether to modify the second policy in accordance with the suggestion; and storing information indicative of the second deviation event.