A method for handling dynamic incidents includes initiating a first policy in response to a first incident. The first policy comprises a plurality of actions to be performed in response to the first incident. The method also includes creating at least one virtual talk group comprising a plurality of endpoints of different communication networks communicating using a respective communication protocol. The method further includes monitoring a plurality of events via a plurality of sources. At least one source comprises an endpoint from the plurality of endpoints of the virtual talk group. The method additionally includes detecting a deviation event and storing information indicative of the deviation event.