The five steps of operational security are:
1. Identity sensitive data
2. Identify possible threats
3. Analyze security threats and vulnerabilities
4. Appraise the threat level and vulnerability risk
5. Devise a plan to mitigate the threats