Which of the following is the fifth step in the 5 Step OPSEC Process?

• A. Application of Countermeasures
• B. Identification of Critical Information
• C. Analysis of Threat
• D. Assessment of Risks

Answer: (A)

In OPSEC, you go through a sequence to protect critical information, and the final action is to take concrete steps to reduce risk. After identifying what information is critical, analyzing who might threaten it, examining where weaknesses exist, and assessing the overall risk, you move to implementing protective measures. This is the application of countermeasures—putting security controls, procedures, training, and physical or procedural safeguards in place, and then monitoring their effectiveness and adjusting as needed. That implementation is what you do after you’ve evaluated the risk, which is why it is the fifth step. The earlier steps are identifying critical information, analyzing threats, analyzing vulnerabilities, and assessing risk.