Arrange these steps in a practical sequence for using assessment findings to improve operational security: identify and assess risks, select or adjust measures, integrate the measures into operations, and review their effectiveness.

### Why this is right Assessment comes first because the organization needs to understand the risks before choosing a response. After implementing measures, it can review their effectiveness and use the findings to inform further changes. ### The order 1. **Identify and assess risks**: Establish what vulnerabilities or concerns need attention. 2. **Select or adjust measures**: Choose a response that addresses the assessed concerns. 3. **Integrate the measures into operations**: Put the chosen response into the organization's systems and work practices. 4. **Review the measures' effectiveness**: Determine whether the measures perform as intended. ### Remember Assess first, act on findings, then review the result.