Focuses on preparing for and managing responses to information security incidents, encompassing detection through resolution.