the incident commander or unified command can place the intelligence/investigations function in which of the following organizational locations?