Termination is the incident phase characterized by near completion of response and start of recovery?

• A. Termination
• B. Planning
• C. Activation
• D. Containment

Answer: (A)

Termination is the phase where the response winds down and recovery begins. It comes as the immediate hazards are under control and the incident objectives are near completion, triggering demobilization of personnel and equipment and a shift toward restoring normal operations. In this phase responsibilities are handed off to recovery teams, after-action reviews are conducted, and the incident is formally closed through documentation and lessons learned.

Activation involves getting people and resources mobilized; planning runs throughout the incident to map actions; containment focuses on stopping the spread or escalation during the response.