Incident management under NIS2 refers to the process of detecting, responding to, and recovering from cybersecurity incidents affecting network and information systems.

It includes:

Identification
Containment
Mitigation
Recovery