The final step in the security risk assessment process is to

analyze the costs and benefits of various countermeasures

decide whether or not to implement particular countermeasures

create a chart that identifies loss events, their frequency, and their monetary costs

assess the feasibility of implementing each of the identified mitigation measures