Incident management is the capability to effectively respond to and mitigate security events. A formalized process ensures that threats are detected early, contained quickly, and that the organization learns from every event to prevent future occurrences.