Monitoring and analysing security on an ongoing basis. Detecting, analysing and responding to security incidents ()