Which of the following would BEST help to identify vulnerabilities introduced by changes to an organization-s technical infrastructure?

A. An intrusion detection system

B. Established security baselines

C. Penetration testing

D. Log aggregation and correlation