Which term refers to managing risk through countermeasures and controls?

• A. Safeguard
• B. Risk transfer
• C. Risk mitigation
• D. Risk acceptance

Answer: (C)

Reducing risk by implementing countermeasures and controls is risk mitigation. This approach aims to lower either the likelihood of a threat or the impact of a risk, so the residual risk stays at an acceptable level. In practice, after identifying risks, you select a response that reduces risk through safeguards and processes—mitigate. Other options describe different ways of handling risk: transferring it to another party, avoiding the risk altogether, or choosing to accept it when it’s within tolerance. So the term that best fits the description is risk mitigation.