The IC owns coordination: they hold the big picture, make and delegate decisions, and keep roles clear so the response does not fragment. They deliberately do not dive into hands-on debugging, which is the operations lead’s job, so they can stay above the details. Writing status updates is the communications lead’s role. And procuring budget or hardware is unrelated to running a live incident.
Official docs