The final step in the security risk assessment process is to

analyze the costs and benefits of all IT related purchases

decide whether or not to implement particular countermeasures

create a chart that identifies all of the steps taken during the risk assessment

assess the feasibility of implementing the disaster recovery plan