thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Risk Mitigation

Risk treatment that reduces likelihood or impact by implementing controls.

Definition

Mitigation (risk reduction) applies preventive, detective, corrective, or other controls to bring residual risk within appetite. It is the most common treatment option. Controls should be cost-justified and their effectiveness monitored.

Example

Deploying phishing-resistant MFA reduces the likelihood of account takeover.

Exam tip

Mitigation rarely eliminates risk; residual risk remains and must be accepted.

Related terms