In the 5 Step OPSEC Process, which step is 'Apply OPSEC countermeasures'?

In the 5 Step OPSEC Process, which step is 'Apply OPSEC countermeasures'?

• A. Step 1
• B. Step 2
• C. Step 3
• D. Step 5

Answer: (D)

The last phase is about putting protective actions in place to reduce risk to sensitive information. After you’ve identified what information is critical, analyzed who might threaten it, examined where it’s vulnerable, and assessed the overall risk, you move into implementing countermeasures. This is the execution step—putting safeguards like access limitations, need-to-know controls, secure communication practices, redaction or concealment, procedures, training, and physical or technical protections into place to lower the chances of a compromise or the impact if one occurs. The earlier steps focus on discovery and evaluation, while this final step focuses on action to reduce risk.

The last phase is about putting protective actions in place to reduce risk to sensitive information. After you’ve identified what information is critical, analyzed who might threaten it, examined where it’s vulnerable, and assessed the overall risk, you move into implementing countermeasures. This is the execution step—putting safeguards like access limitations, need-to-know controls, secure communication practices, redaction or concealment, procedures, training, and physical or technical protections into place to lower the chances of a compromise or the impact if one occurs. The earlier steps focus on discovery and evaluation, while this final step focuses on action to reduce risk.