Which domain addresses incident management and resolution?

The domain that specifically addresses incident management and resolution is the one focused on Incident Response and Recovery. This area encompasses the processes, strategies, and procedures necessary to effectively respond to security incidents, ensuring that organizations can detect, analyze, and mitigate threats quickly and effectively.

Within this domain, professionals are trained on how to prepare for incidents, how to respond when they occur, and how to recover from them in a way that minimizes damage and restores operations. This includes understanding the lifecycle of an incident—from identification to eradication, recovery, and lessons learned.

While other domains such as Security Operations cover the day-to-day security management practices, and Risk Management involves identifying and mitigating risks, it is the Incident Response and Recovery domain that is explicitly designed to manage incidents once they occur, making it the correct answer for addressing incident management and resolution.