What is the term coined for logging, recording and resolving events in a company?

An Internal Procedure is a specific step-by-step instruction for performing a task, not the overarching process that governs how all events are managed end-to-end.

A Security Policy defines the rules, requirements, and acceptable use standards for protecting assets, not the reactive process for handling events after they occur.

The Incident Management Process is the structured framework - central to ITIL and NIST guidelines - that governs how an organization identifies, logs, categorizes, prioritizes, and resolves incidents. It ensures events are handled consistently and systematically, including documentation and post-incident review. This distinguishes it from policies (which define rules) or metrics (which measure outcomes).

Metrics are quantitative measurements used to assess performance or security posture, not a process for managing the lifecycle of events.