What does crisis management cover beyond incident response?
Incident response handles the technical event. Crisis management handles everything around it: incident command, executive briefings, board and regulator notifications, customer and media communications, insurer liaison and a structured post-crisis review. Done well, it preserves trust; done badly, it compounds damage.