The "top half" refers to the interrupt handler.

The top half executes in interrupt context and should perform the time critical part and then give up control, e.g. to the process/code that was interrupted.

What about the additional work?

The additional work should be placed in function, the "bottom half", and an arrangement made so that this additional work will indeed be executed, but not necessarily now.