Skip to content

Countermeasure

What is Countermeasure?

An action, device, procedure, or technique that reduces a threat, vulnerability, or attack by eliminating or preventing it, minimizing harm, or enabling discovery.

Risk Management

What the standards actually require on countermeasure

Requirements naming countermeasure across 6 standards, quoted from the control text.

Introducing new countermeasures changes how operations are run, so it is carried out through the organization's management system, which makes sure enough resources are provided, effects on other operations are managed, and management backs the change.

iso-28001-2007-supply-chain-security-management::B.7 · B.7 Step six: implementation of countermeasures →
IEC 624438 controls

Where the unmitigated risk exceeds tolerance, the countermeasures already in place are identified and evaluated for their effect on likelihood and impact, producing a list of countermeasures.

iec-62443::ZCR 5.8 · ZCR 5.8 Identify and evaluate existing countermeasures →

The organization should keep a formal documented process for treating risk and choosing countermeasures that considers: removing the source of risk where possible; avoiding the risk by pausing the activity that creates it;

ansi-asis-pap-1-2012-physical-asset-protection::A.4.2.2 · A.4.2.2 A documented risk treatment and countermeasure selection process →

Compensating countermeasures may replace or supplement inherent security capabilities to satisfy requirements, provided they meet the intent and rigour of the original requirement, considering the referenced standards and differences from them, and follow 3.1....

iacs-unified-requirements-e26e27-cyber-resilience-of-ships-and-on-board-systems::E27-2.4 · E27 2.4 Compensating countermeasures →

After provision starts, gather information on privacy infringements in the AI system or service as appropriate, deal with any infringement recognised, and consider how to prevent recurrence.

japan-ai-guidelines::P-4.ii · P-4) ii. Countermeasures against privacy infringement →
ISO 21448:20223 controls

The design considers potential performance insufficiencies where an element's output could lead to hazardous behaviour at vehicle level, such as insufficient classification, measurement, tracking, target selection or kinematic estimation, false positive and fa...

iso-21448-2022::5.4 · 5.4 Performance insufficiencies and countermeasures considerations →

Questions people ask about countermeasure

What is Countermeasure?
An action, device, procedure, or technique that reduces a threat, vulnerability, or attack by eliminating or preventing it, minimizing harm, or enabling discovery.
Why is Countermeasure important for compliance?
Countermeasure is a key concept in Risk Management. Understanding countermeasure helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Countermeasure?
Countermeasure appears in the requirement text of ISO 28001:2007 Supply Chain Security Management, IEC 62443, ANSI/ASIS PAP.1-2012 Physical Asset Protection, IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems, Japan AI Guidelines. Across these standards we have identified 38 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Countermeasure?
Explore our compliance framework pages to see how countermeasure applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Countermeasure applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.