The difference between resolution and recovery of an incident is that recovery of an incident occurs when operations are fully restored to normal operations perhaps even through a temporary workaround. The resolution of an incident occurs when the root cause of the event is analyzed and a permanent fix is deployed (e.g., patching, bug fixing, etc.).