Which ongoing process involves monitoring deviations from established baselines and behavior?

The ongoing process that involves monitoring deviations from established baselines and behavior is continuous monitoring. This process is essential in cybersecurity as it ensures that an organization's security posture is maintained by regularly reviewing and analyzing system activities against predefined standards or baselines.

Continuous monitoring helps organizations identify potential security threats, operational anomalies, or compliance issues in real-time. By establishing baselines for normal operations, any deviations can be quickly detected, enabling timely responses to potential incidents. This proactive approach is critical in maintaining the integrity and security of an organization’s information systems over time.

In contrast, incident response focuses primarily on addressing and managing the consequences of a security incident after it occurs, rather than monitoring for deviations continuously. Risk assessment involves identifying and evaluating risks but does not inherently involve the real-time monitoring aspect of deviations. Vulnerability analysis is aimed at identifying weaknesses in systems but does not encompass ongoing behavioral monitoring. Thus, the effectiveness of continuous monitoring in maintaining security makes it the correct choice for this question.