Which of the following is NOT a method of assessment in security operations?

Monitoring ongoing threats is indeed a crucial part of security operations; however, it does not constitute a method of assessment in security operations. Assessment typically focuses on evaluating, reviewing, or verifying certain aspects of security measures and responses.

Verifying incidents allows security teams to confirm whether a security breach or event occurred, which is essential in assessing the effectiveness of security protocols. Evaluating response effectiveness assesses how well the organization responds to security incidents, helping to identify strengths and weaknesses in the response plan. Conducting follow-up reviews allows security teams to analyze past incidents and changes in security posture, ensuring continual improvement.

In contrast, simply monitoring ongoing threats involves continuously observing the threat landscape but does not involve a structured assessment of security operations, effectiveness, or incident responses. Therefore, it stands apart from the defined methods of assessment.