Which term covers implementing controls and measures to reduce risk?

Which term covers implementing controls and measures to reduce risk?

• A. Risk response
• B. Risk transfer
• C. Risk mitigation
• D. Safeguard

Answer: (C)

Reducing risk by taking actions that lower either the likelihood of a threat or the impact if it occurs is risk mitigation. When you implement controls and measures—such as access controls, patch management, encryption, monitoring, and network segmentation—you’re actively decreasing the residual risk to an acceptable level. This is the formal process of mitigating risk.

This differs from risk transfer, which shifts potential losses to another party (like insurance or outsourcing). It also isn’t simply the safeguard itself, which is a specific control; mitigation refers to the broader act of reducing risk through such controls.