I see your post, and raise you a blog.
http://taosecurity.blogspot.com/2009/04/speaking-of-incident-response.htmlIncident response and incident handling are synonyms. If you need to differentiate between the role that does technical work and one which does leadership work, you can use incident response/handling for the former and incident management for the latter.
The blog goes into a further dissection of GCIH as a technical cert, with CERT's CCSI as being the management portion.
I agree with Bejtlich in that being GCIH certified does not automatically grant someone the ability to handle incidents.
But then again, I neither myself or my company would ever pay $9k+ for CERT's cert.. so I'm going GCIH.
Good topic! I was going to bring it up this morning if someone hadn't.