In ISO 20000, which process is primarily responsible for restoring normal service operation as quickly as possible after an unplanned interruption?